Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383136633a3a2f34382d3438203d3e20323037373331.roa
File:                     326131323a646434373a383136633a3a2f34382d3438203d3e20323037373331.roa (raw, json)
Hash identifier:          CGLjRq2s33DZ6Py52+h++NWV9d/DUKujVbrdvnBZAVg=
Subject key identifier:   AF:B2:D1:B5:1C:01:DD:B0:15:53:C7:0E:FE:7D:18:96:5A:5F:37:C2
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       4A41BF6D97AE1AFA08AC4E26F7E635819FD4C045
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383136633a3a2f34382d3438203d3e20323037373331.roa
Signing time:             Sat 08 Apr 2023 04:58:28 +0000
ROA not before:           Sat 08 Apr 2023 04:53:28 +0000
ROA not after:            Sat 06 Apr 2024 04:58:28 +0000
asID:                     207731
IP address blocks:        2a12:dd47:816c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:41:bf:6d:97:ae:1a:fa:08:ac:4e:26:f7:e6:35:81:9f:d4:c0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:53:28 2023 GMT
            Not After : Apr  6 04:58:28 2024 GMT
        Subject: CN=AFB2D1B51C01DDB01553C70EFE7D18965A5F37C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:17:15:29:b9:53:a0:38:ab:74:0f:7a:f7:c3:
                    bd:80:52:7e:d7:31:d3:95:09:96:a2:da:21:e8:35:
                    9b:e2:d8:a7:a9:7b:8c:4f:01:e7:90:f2:0e:f3:11:
                    34:89:6b:20:0a:27:cf:07:61:ef:bb:40:22:f4:49:
                    82:f4:0f:f5:5f:b5:eb:a6:85:ff:49:b5:e4:96:b1:
                    03:f9:1d:dc:76:36:e8:6b:47:1f:c4:f8:3c:6b:a2:
                    fa:b4:48:ff:b0:c6:1e:41:2c:79:59:15:97:1c:1a:
                    b5:ea:63:69:98:8d:ab:30:63:4e:8d:9c:b1:c3:ad:
                    60:51:0a:31:83:59:44:be:fa:8e:87:80:7b:e5:4b:
                    3e:61:d6:bd:ad:68:5e:43:04:c9:f5:09:31:0a:fa:
                    9a:aa:d8:fc:c3:56:2b:be:5f:d1:f7:ef:be:90:3c:
                    36:d9:80:9e:6d:50:19:ab:de:f0:24:e0:64:ca:e8:
                    77:11:26:eb:93:51:e8:49:c6:83:4b:6e:5e:cb:de:
                    8b:1b:9e:1b:6f:50:e2:04:f6:86:ed:17:b3:94:22:
                    4f:fc:fc:dd:62:3e:2b:1b:3f:0b:c2:14:99:61:da:
                    61:2a:3b:5f:70:f2:3d:5c:ee:92:24:ff:4d:e3:96:
                    41:02:56:2e:8a:ef:8e:b0:5b:03:0b:eb:d5:8e:3c:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B2:D1:B5:1C:01:DD:B0:15:53:C7:0E:FE:7D:18:96:5A:5F:37:C2
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383136633a3a2f34382d3438203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816c::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:79:b7:7a:8b:a3:aa:1a:e6:83:a9:e4:be:b7:f9:8f:dd:
         bd:d0:98:65:5e:14:f2:00:95:0e:9e:d4:09:44:c5:da:2e:2d:
         e1:00:57:2d:d5:f8:ab:a2:05:cc:dd:7a:11:54:75:35:1f:60:
         bc:ee:60:61:9c:8e:4f:f6:a1:da:f3:79:23:c0:d5:14:a9:97:
         65:ea:0f:4f:33:03:8a:dd:85:59:71:30:07:36:50:e8:79:f4:
         4b:f5:02:d2:98:bb:c6:46:9d:49:f8:be:b7:04:b3:95:16:48:
         52:ea:3b:4a:ae:9c:6f:bd:3e:b5:6e:b6:58:6a:a8:f3:17:8a:
         5f:af:cf:98:3f:21:03:d1:2a:01:ac:8f:fc:ec:1e:54:a5:4c:
         3b:92:7f:8f:b7:2f:10:07:1d:6c:91:9c:a9:12:69:57:c1:a3:
         c2:69:40:87:d5:62:47:fd:40:e8:0f:1a:0a:60:dc:8f:fb:21:
         cf:09:0e:ab:bb:af:2b:9e:fe:35:80:1e:6e:7a:a5:51:31:c9:
         0f:27:8a:dd:77:f3:f0:ee:ff:e4:a0:e9:2d:2e:63:d1:06:7e:
         de:d4:07:8c:f2:52:7d:54:d9:f2:bc:0c:7f:c3:8d:dd:43:e0:
         df:23:be:91:01:fb:d4:40:6c:27:ff:13:2c:7e:25:7a:02:a2:
         c3:6f:8f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:30 2025 by rpki-client