Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030333a3a2f34382d3438203d3e20323034383434.roa
File:                     326131323a646434373a383030333a3a2f34382d3438203d3e20323034383434.roa (raw, json)
Hash identifier:          uxvEwl/A6i6cOZL+AVjoYmv7v0UzyTxK7ghs/LKuvVk=
Subject key identifier:   3C:A7:9C:F4:C3:99:C8:A8:13:E1:5A:68:22:73:D4:8B:D9:D5:8B:A4
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       3EC051C7C6855F3289FBF36ED86DC1BB7797722E
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030333a3a2f34382d3438203d3e20323034383434.roa
Signing time:             Sat 08 Apr 2023 05:08:03 +0000
ROA not before:           Sat 08 Apr 2023 05:03:03 +0000
ROA not after:            Sat 06 Apr 2024 05:08:03 +0000
asID:                     204844
IP address blocks:        2a12:dd47:8003::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c0:51:c7:c6:85:5f:32:89:fb:f3:6e:d8:6d:c1:bb:77:97:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 05:03:03 2023 GMT
            Not After : Apr  6 05:08:03 2024 GMT
        Subject: CN=3CA79CF4C399C8A813E15A682273D48BD9D58BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:72:4f:bc:7f:36:b3:82:69:c5:b8:db:0d:ca:
                    06:43:f3:51:0a:81:71:cf:8b:75:d0:e4:b9:60:0b:
                    fa:e8:46:ae:d4:15:d1:36:1e:98:77:8a:b9:b6:06:
                    94:e6:0b:27:75:86:85:58:df:6a:08:94:0d:a4:21:
                    18:00:97:03:fe:a5:1d:15:96:20:af:50:d9:c8:bf:
                    04:7a:99:fc:5e:54:5a:26:ed:db:21:e5:74:25:0a:
                    cf:19:ef:c9:95:e3:e4:0d:af:a6:97:6f:7e:b3:3b:
                    ec:cf:10:4b:82:77:12:c2:91:8b:33:6a:7f:c8:7f:
                    cf:cd:f0:39:dd:1c:8c:7d:9d:66:3d:e1:1d:4e:67:
                    3e:ae:ca:9f:b8:09:7c:80:e0:58:7f:41:56:9b:00:
                    9c:6e:22:dc:53:83:41:aa:ce:ad:ff:9b:ec:b6:0f:
                    5b:d1:99:b4:2b:b4:2b:aa:c9:d5:f4:92:fa:41:74:
                    8d:06:9f:45:4e:b5:52:ae:c5:73:cb:15:47:8e:ec:
                    1b:ff:b2:37:89:85:c1:a8:6d:8f:73:f6:35:b1:d8:
                    bb:6a:ad:84:6f:67:8f:0f:70:94:92:39:51:5f:0a:
                    ad:cd:f1:01:6a:e1:f2:56:d6:48:de:96:1c:1b:1b:
                    57:e7:90:7e:f2:0d:ae:4b:3a:d7:6d:c9:28:1b:9c:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:9C:F4:C3:99:C8:A8:13:E1:5A:68:22:73:D4:8B:D9:D5:8B:A4
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030333a3a2f34382d3438203d3e20323034383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8003::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8b:83:17:e2:e9:f8:44:e2:02:01:f9:df:b6:23:03:30:2b:
         20:9c:74:13:31:3b:88:90:94:35:fb:83:c8:74:8a:88:48:51:
         9a:5f:5f:68:cc:95:f0:3d:6d:52:72:46:56:b5:c0:2a:de:17:
         c2:5a:de:11:d6:68:56:1b:bd:2b:cb:1e:06:b5:24:90:db:82:
         4c:96:b5:17:6c:15:1e:90:0d:1c:6e:df:39:0e:69:45:3f:ff:
         86:62:32:76:81:d7:21:17:31:48:d9:e9:c7:9a:c4:ff:b3:da:
         7c:fb:8c:f7:59:bc:ec:47:02:64:5a:c5:da:1d:52:58:ad:89:
         ce:23:92:3c:46:6d:30:26:82:02:ac:30:3f:c4:5c:0d:36:c5:
         71:a6:87:62:dd:97:2e:84:cd:2f:c4:19:e8:03:4e:ab:23:60:
         e0:ca:54:0f:24:a4:f2:83:98:bb:a8:16:3f:9f:69:a6:5c:45:
         9c:8c:e6:f8:9f:96:12:79:2f:29:92:7f:79:ff:48:c0:d5:7c:
         a4:65:a0:6d:fc:62:70:d5:f2:64:83:73:57:37:b7:b1:c2:22:
         e9:d9:85:b1:4e:97:5f:ef:ac:48:5d:9a:0f:00:2c:49:df:12:
         42:20:ef:be:b1:eb:1e:ac:85:18:1a:0f:53:b1:c2:d2:cf:51:
         84:fd:2e:32
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUPsBRx8aFXzKJ+/Nu2G3Bu3eXci4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5OTZGNjRDNEIxRENEMjdGRDI0Mzg2MEM4MzkwMDRG
NTZDMkIxMTAeFw0yMzA0MDgwNTAzMDNaFw0yNDA0MDYwNTA4MDNaMDMxMTAvBgNV
BAMTKDNDQTc5Q0Y0QzM5OUM4QTgxM0UxNUE2ODIyNzNENDhCRDlENThCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjck+8fzazgmnFuNsNygZD81EK
gXHPi3XQ5LlgC/roRq7UFdE2Hph3irm2BpTmCyd1hoVY32oIlA2kIRgAlwP+pR0V
liCvUNnIvwR6mfxeVFom7dsh5XQlCs8Z78mV4+QNr6aXb36zO+zPEEuCdxLCkYsz
an/If8/N8DndHIx9nWY94R1OZz6uyp+4CXyA4Fh/QVabAJxuItxTg0Gqzq3/m+y2
D1vRmbQrtCuqydX0kvpBdI0Gn0VOtVKuxXPLFUeO7Bv/sjeJhcGobY9z9jWx2Ltq
rYRvZ48PcJSSOVFfCq3N8QFq4fJW1kjelhwbG1fnkH7yDa5LOtdtySgbnNinAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUPKec9MOZyKgT4VpoInPUi9nVi6QwHwYDVR0j
BBgwFoAUS5lvZMSx3NJ/0kOGDIOQBPVsKxEwDgYDVR0PAQH/BAQDAgeAMFsGA1Ud
HwRUMFIwUKBOoEyGSnJzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8yLzRCOTk2
RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY3JsMGQGCCsGAQUF
BwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmNvL3JlcG8vSFlTUC82
LzRCOTk2RjY0QzRCMURDRDI3RkQyNDM4NjBDODM5MDA0RjU2QzJCMTEuY2VyMH4G
CCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4ZicnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QXVndXN0LzIvMzI2MTMxMzIzYTY0NjQzNDM3M2EzODMwMzAzMzNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzAzNDM4MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoS3UeAAzANBgkq
hkiG9w0BAQsFAAOCAQEABIuDF+Lp+ETiAgH537YjAzArIJx0EzE7iJCUNfuDyHSK
iEhRml9faMyV8D1tUnJGVrXAKt4XwlreEdZoVhu9K8seBrUkkNuCTJa1F2wVHpAN
HG7fOQ5pRT//hmIydoHXIRcxSNnpx5rE/7PafPuM91m87EcCZFrF2h1SWK2JziOS
PEZtMCaCAqwwP8RcDTbFcaaHYt2XLoTNL8QZ6ANOqyNg4MpUDySk8oOYu6gWP59p
plxFnIzm+J+WEnkvKZJ/ef9IwNV8pGWgbfxicNXyZINzVze3scIi6dmFsU6XX++s
SF2aDwAsSd8SQiDvvrHrHqyFGBoPU7HC0s9RhP0uMg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:07 2025 by rpki-client