Route Origin Authorization

$ rpki-client -vvf krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
File:                     323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa (raw, json)
Hash identifier:          YG6nk4OO578oYUK1UmPP1cOzO2S1RySYPurp31DXOMA=
Subject key identifier:   2D:87:FD:4C:92:57:69:56:9E:05:BA:78:D4:8A:78:70:B1:81:67:5C
Certificate issuer:       /CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
Certificate serial:       67517864D8CFEDAFCC078EE8CD6B9C95D439176C
Authority key identifier: 47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer
Subject info access:      rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa
Signing time:             Tue 09 Feb 2021 20:53:39 +0000
ROA not before:           Tue 09 Feb 2021 20:48:39 +0000
ROA not after:            Tue 08 Feb 2022 20:53:39 +0000
asID:                     16787
IP address blocks:        2605:1c00:ff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:51:78:64:d8:cf:ed:af:cc:07:8e:e8:cd:6b:9c:95:d4:39:17:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78
        Validity
            Not Before: Feb  9 20:48:39 2021 GMT
            Not After : Feb  8 20:53:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:f2:7f:eb:20:d0:22:f2:65:88:84:2e:4c:
                    01:74:2e:45:21:66:02:aa:5f:ad:f7:a3:fa:0f:7c:
                    ef:0b:0e:be:52:dc:12:d0:14:9c:ae:df:32:15:9a:
                    b0:45:f0:0d:e2:69:a8:eb:97:ba:43:2a:9e:97:db:
                    a3:ff:fb:c7:2a:b1:21:79:a1:60:84:da:28:79:51:
                    8e:8f:52:e7:f8:0a:36:4c:26:83:72:f0:5c:44:cb:
                    85:a6:3f:55:81:01:55:f5:8d:ff:76:76:1f:c7:7c:
                    2e:4e:ca:95:02:0b:ed:4b:05:6e:29:28:1c:ea:64:
                    b1:25:ed:a5:bc:12:78:b4:33:99:20:e2:97:53:4d:
                    f1:82:00:b3:8e:a6:fd:dd:36:3e:d4:bd:42:52:86:
                    51:15:0c:4e:6d:37:1c:6c:40:b3:0a:6d:91:59:31:
                    72:25:24:a4:64:ea:95:9a:f6:3a:29:c9:79:b0:70:
                    0f:5b:6f:b0:63:47:08:d6:41:af:7b:97:2b:03:f4:
                    28:3a:e1:62:76:2b:c2:34:60:12:e4:81:9c:4c:99:
                    fa:9b:e4:ab:29:0f:be:05:5d:a1:02:4c:fe:5f:75:
                    c7:a9:77:81:0d:15:9b:73:8b:1d:d5:14:6b:f6:92:
                    7a:e4:03:4d:0b:c4:97:44:eb:1d:5d:18:b4:82:87:
                    c0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:87:FD:4C:92:57:69:56:9E:05:BA:78:D4:8A:78:70:B1:81:67:5C
            X509v3 Authority Key Identifier:
                keyid:47:CA:36:B6:8F:7E:BB:87:A8:E7:44:A7:07:2F:9E:3D:86:02:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/47CA36B68F7EBB87A8E744A7072F9E3D860263A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e35cfcfc-940d-4d53-b96c-8c71b8674fd9/15151ee44ce9e8e3000750add1f5412b7bbaf781062a5fdb78.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill-eval-ctec.charter.com/repo/Charter_CTEC_Lab/3/323630353a316330303a6666303a3a2f34342d3434203d3e203136373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:53:c9:02:e3:26:a5:56:04:c6:97:ff:82:1a:1f:4b:56:
         51:fa:b5:b0:39:b6:7e:13:ad:be:df:3f:de:85:c4:8b:cc:7b:
         02:a0:5b:3a:02:d7:09:61:26:29:10:23:a1:bd:20:a2:af:b6:
         6d:d3:86:5e:25:95:92:ef:90:74:a1:49:80:85:03:a4:2e:4f:
         f6:c6:0d:9d:bf:98:f8:16:10:53:02:48:1c:51:d3:3d:c4:02:
         46:30:50:4f:89:b3:02:ab:0d:8b:0c:f3:c2:d6:4b:33:03:ad:
         3f:3d:77:b3:04:cf:aa:ff:50:3f:8f:0f:9d:fc:01:e8:54:cd:
         18:76:20:18:ee:7c:69:e8:b4:80:ca:4a:11:57:74:f1:bc:ac:
         75:90:9f:6e:36:c8:9b:f3:84:e3:f5:62:40:eb:83:2a:bd:6a:
         79:05:3e:21:35:3c:91:b6:27:df:39:b7:75:73:cf:4b:75:75:
         07:77:07:da:68:b1:b4:f6:d6:6b:ce:0c:87:2b:6c:60:0f:dd:
         44:f8:f0:a5:3c:21:33:b9:61:50:a4:a0:9f:16:30:c3:eb:d0:
         6e:ea:7b:27:4b:17:ac:71:8a:dd:4c:48:3b:dc:4b:46:92:3f:
         af:70:b6:14:71:d2:f6:4c:16:3c:d7:d9:a1:7b:ef:77:d9:94:
         f1:31:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:39 2023 by rpki-client on console-fra.rpki-client.org