Route Origin Authorization

$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623466303a3a2f34342d3438203d3e20313937343634.roa
File:                     326131333a646638373a623466303a3a2f34342d3438203d3e20313937343634.roa (raw, json)
Hash identifier:          FHbMKcaVmtxuioXIuCfnVGh4yLoxc+cwBRT8d4IfR5o=
Subject key identifier:   EF:B3:85:90:52:E7:DE:05:CD:55:43:A5:01:C1:98:CF:63:ED:55:50
Certificate issuer:       /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial:       54708C6A7BB0E47D6361D7DC72C5E74D798571FD
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access:      rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623466303a3a2f34342d3438203d3e20313937343634.roa
Signing time:             Thu 18 Jan 2024 18:04:36 +0000
ROA not before:           Thu 18 Jan 2024 17:59:36 +0000
ROA not after:            Thu 16 Jan 2025 18:04:36 +0000
asID:                     197464
IP address blocks:        2a13:df87:b4f0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:70:8c:6a:7b:b0:e4:7d:63:61:d7:dc:72:c5:e7:4d:79:85:71:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
        Validity
            Not Before: Jan 18 17:59:36 2024 GMT
            Not After : Jan 16 18:04:36 2025 GMT
        Subject: CN=EFB3859052E7DE05CD5543A501C198CF63ED5550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:06:2d:03:52:ba:84:55:b7:87:a8:64:2c:4b:
                    8b:f5:84:65:33:6e:54:ca:ef:e0:70:e4:60:76:0b:
                    c1:3c:f6:21:d8:26:32:ae:20:0e:2f:50:3a:2d:d7:
                    dd:e1:89:4b:82:f2:5f:86:5e:28:f1:8a:48:9e:3e:
                    d6:76:a4:0c:5f:11:f0:26:34:af:c6:66:8c:f5:36:
                    0a:2f:2d:3d:06:87:c4:67:df:18:de:8a:7f:a0:19:
                    30:de:e6:ae:2a:d8:e8:e7:00:93:e6:58:71:d6:a2:
                    87:8c:f8:db:d7:f6:c5:0b:08:0a:94:95:a3:31:f1:
                    af:e7:55:eb:48:12:6f:93:02:e7:dc:c9:6d:61:be:
                    ec:c3:e6:5f:3a:f9:04:42:f6:f8:da:ee:06:57:af:
                    81:fe:7b:ad:a4:7a:a6:ed:0e:64:d5:13:11:f8:ec:
                    73:74:a0:c8:47:f0:a4:20:f8:fb:93:f9:b3:f0:7e:
                    19:b1:f9:bd:36:d4:a7:19:cb:1f:39:ab:14:40:77:
                    a7:17:18:3c:67:e6:cd:5f:e3:1a:50:e3:08:7b:93:
                    54:e8:50:4e:9c:47:d9:1e:e5:28:bf:ae:67:b0:76:
                    c0:a1:67:5b:94:59:15:a2:56:8f:93:ba:26:88:0a:
                    ad:d5:f9:31:bf:ea:f1:32:e0:cb:02:c0:67:f4:8e:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:85:90:52:E7:DE:05:CD:55:43:A5:01:C1:98:CF:63:ED:55:50
            X509v3 Authority Key Identifier:
                keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623466303a3a2f34342d3438203d3e20313937343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df87:b4f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:23:62:78:0f:45:d8:06:b4:bc:7b:c0:a9:3d:f6:d4:5f:
         ba:be:37:d6:9a:0b:1c:dc:d2:b0:b3:1d:16:f2:5e:ac:5a:b6:
         b3:2c:e7:59:50:ad:d1:aa:78:6a:45:44:88:c7:28:d3:46:14:
         d0:26:c4:4d:61:62:6c:82:45:65:d4:58:ba:0a:6e:7e:fa:95:
         0c:7d:41:41:20:52:00:3a:fc:c3:6a:a4:1d:48:28:68:ca:98:
         e7:c4:e5:20:8a:7a:59:67:ec:41:d2:1e:0f:5f:e5:1a:f0:7c:
         2c:ac:07:b7:48:cf:13:4d:8a:99:36:70:1d:34:97:5e:df:7c:
         a1:03:99:6a:6d:69:91:af:0c:78:ed:b4:a1:95:cd:17:0c:5b:
         47:57:c1:16:06:22:22:82:37:18:c2:aa:db:de:3d:16:8d:e4:
         8a:0f:c5:a8:c3:64:8d:67:db:0e:72:83:8c:aa:bb:17:7a:b8:
         6f:7e:04:48:68:ee:01:7e:a8:b1:53:56:35:b7:5a:a9:fa:da:
         04:20:ad:c0:c5:b0:35:e4:55:7e:ee:68:af:ad:91:1d:2f:fe:
         52:55:5f:df:10:43:7a:6f:fd:3b:6a:d2:37:9d:68:d3:53:98:
         85:d5:be:bf:a7:09:88:5d:62:0c:83:ee:59:c7:ae:6a:97:5f:
         a0:01:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----