Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20313334383233.roa
File:                     32332e3133392e34312e302f32342d3234203d3e20313334383233.roa (raw, json)
Hash identifier:          zyTHI5gFiylG2B2za13VezPy30Xg833Se33WGYX3mkE=
Subject key identifier:   92:51:45:01:58:DE:FF:FF:B7:4F:01:F3:69:0A:2E:D2:73:B9:2D:24
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       6113E25F15F420E051F560FFD61281117FE3BEB8
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20313334383233.roa
Signing time:             Thu 27 Jul 2023 05:38:16 +0000
ROA not before:           Thu 27 Jul 2023 05:33:16 +0000
ROA not after:            Thu 25 Jul 2024 05:38:16 +0000
asID:                     134823
IP address blocks:        23.139.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:13:e2:5f:15:f4:20:e0:51:f5:60:ff:d6:12:81:11:7f:e3:be:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Jul 27 05:33:16 2023 GMT
            Not After : Jul 25 05:38:16 2024 GMT
        Subject: CN=9251450158DEFFFFB74F01F3690A2ED273B92D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:dc:a6:08:a3:5f:c0:2d:94:2b:11:ce:b6:
                    cb:1a:b3:fc:96:fb:b9:60:fb:1d:87:3f:ed:41:bc:
                    cb:79:f4:e3:53:de:ac:1c:95:32:c8:46:e2:8f:0c:
                    92:f1:9e:5b:44:b8:8c:3f:ab:a1:45:69:14:95:d7:
                    21:50:d3:d8:4a:56:d6:fb:ea:95:44:4d:86:22:7b:
                    07:a7:50:f0:83:b2:52:2e:ae:a2:89:5e:f6:94:af:
                    14:fe:fe:dc:9d:05:ed:b9:5d:63:fd:c5:7a:1f:80:
                    e5:28:6b:2c:12:b4:2b:8b:26:04:e9:26:b0:9d:99:
                    a6:76:1c:85:85:13:74:20:49:2b:4a:35:c4:d8:4f:
                    e3:a9:5f:35:c9:06:ec:8a:f0:18:c5:33:0b:a5:ca:
                    fc:eb:41:3c:5a:34:27:b9:fc:d3:1e:28:4e:d4:90:
                    59:6f:f0:04:2b:63:1f:a4:0c:2c:88:e9:bf:f4:6e:
                    1a:b9:b1:86:99:3e:e7:da:40:65:13:36:07:30:18:
                    34:41:89:d3:f1:80:d6:62:e5:b1:dc:c6:5a:9e:db:
                    b9:64:30:10:5a:20:7b:8b:f4:dd:5b:ae:52:b2:91:
                    9c:47:0b:1c:f3:ac:46:50:eb:59:f2:a4:0d:68:8c:
                    f0:30:be:d3:41:df:9a:b2:25:06:be:cf:f2:d9:1e:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:45:01:58:DE:FF:FF:B7:4F:01:F3:69:0A:2E:D2:73:B9:2D:24
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/32332e3133392e34312e302f32342d3234203d3e20313334383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:86:8d:ae:e5:21:ce:6c:f7:6d:30:64:41:9f:9c:e7:23:
         50:60:3c:49:d4:e9:84:df:4f:73:f3:dd:92:d4:76:c1:cd:ff:
         7a:9d:0c:35:8e:1e:36:e5:e2:dd:9d:fa:21:fa:39:d8:15:23:
         7d:b4:8a:e0:28:7f:27:8d:56:f5:43:15:fd:96:b5:d0:61:1d:
         5b:94:6b:24:4b:07:1b:16:9b:61:48:e8:65:e7:97:9a:4d:ca:
         e3:63:0c:d9:f1:0b:55:ca:36:b9:82:8d:c7:69:27:2d:a5:16:
         ca:aa:65:cb:c7:b8:66:75:f1:99:4b:b2:ad:4a:d7:63:d6:5d:
         76:35:15:87:17:17:7c:4e:e6:6d:92:6a:d8:99:b6:8e:12:89:
         52:5b:ad:56:be:d9:2a:84:2e:bf:1e:0f:df:ae:88:a8:6b:9d:
         7d:f4:1a:eb:15:62:7d:b4:ab:8a:3e:79:75:a7:9e:3d:ad:e3:
         85:32:b3:b3:c4:e9:46:e7:bc:5b:82:8d:94:c9:04:61:c2:4b:
         22:a7:9b:f1:92:06:61:d7:15:24:2b:7f:fe:47:8d:b4:05:18:
         63:c2:b6:90:ec:d0:a9:be:ef:bb:d2:dd:fc:c0:49:b9:67:40:
         3a:41:32:50:3f:e7:0e:c6:fa:bb:67:da:1f:ad:35:65:64:23:
         cf:f9:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 09:25:09 2023 by rpki-client on console-ams.rpki-client.org