Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/A7mmPTXLLhAjvGcJ63XVNEhyjwI.roa
File:                     A7mmPTXLLhAjvGcJ63XVNEhyjwI.roa (raw, json)
Hash identifier:          jl9ac8Ax4HdHFg95kQscg1z0NVZAn0TOAQW9WOXIjQQ=
Subject key identifier:   03:B9:A6:3D:35:CB:2E:10:23:BC:67:09:EB:75:D5:34:48:72:8F:02
Certificate issuer:       /CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Certificate serial:       018486AD2AAB08DFCBC67188FA2B834C793F
Authority key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/A7mmPTXLLhAjvGcJ63XVNEhyjwI.roa
Signing time:             Thu 17 Nov 2022 17:40:06 +0000
ROA not before:           Thu 17 Nov 2022 17:40:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:7200::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:ad:2a:ab:08:df:cb:c6:71:88:fa:2b:83:4c:79:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
        Validity
            Not Before: Nov 17 17:40:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03b9a63d35cb2e1023bc6709eb75d53448728f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a8:03:f6:10:03:44:42:0d:24:cf:31:93:f0:
                    bc:8f:e7:1b:87:0e:35:c8:dd:c5:59:3a:cb:b1:0b:
                    13:c6:0f:6b:d1:9c:89:65:a8:2c:fa:7e:dd:19:52:
                    7c:00:7f:80:2b:ab:bf:5b:c3:33:2d:8a:64:6e:1d:
                    eb:19:90:64:5c:a0:1a:da:fd:97:36:ad:3f:88:43:
                    49:53:6c:6f:48:bb:d9:55:01:bf:e9:32:1d:50:de:
                    50:04:f8:1f:e0:3b:e4:30:e2:70:e9:97:37:32:75:
                    6e:dd:52:fc:23:cf:05:15:13:bf:83:0c:97:20:fc:
                    13:79:c1:dd:a4:06:df:b7:94:43:d2:1a:d1:b7:1e:
                    33:f2:ed:71:e6:9f:22:ce:93:2c:0a:72:c3:f4:76:
                    8f:ff:b3:6b:c7:fc:d4:bc:31:f9:9d:0e:f4:dc:7c:
                    26:45:2c:52:80:1d:e3:67:34:89:6e:d0:12:0b:6c:
                    77:80:fe:ae:c7:b5:8d:a3:30:b8:f9:ec:60:fd:18:
                    9c:38:87:d5:73:79:8f:5b:31:90:90:92:9e:5c:db:
                    9c:9f:19:46:fc:47:4c:cf:be:e6:2b:3a:ac:31:bb:
                    47:da:ad:c8:5a:c4:22:20:0b:13:5d:b0:95:af:1b:
                    85:13:0e:ea:a3:1f:90:b2:ec:59:5c:f2:71:66:0a:
                    13:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B9:A6:3D:35:CB:2E:10:23:BC:67:09:EB:75:D5:34:48:72:8F:02
            X509v3 Authority Key Identifier:
                keyid:6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/A7mmPTXLLhAjvGcJ63XVNEhyjwI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:7200::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:27:75:e3:eb:1c:30:62:c8:84:31:04:30:df:54:23:c2:
         cd:3c:5a:28:77:bc:06:91:80:0f:bb:8f:63:a1:47:44:95:1b:
         00:1f:88:39:db:f3:9f:c0:12:f9:c7:37:5b:5b:ca:b6:72:74:
         9d:d7:95:8c:6d:0c:f5:a1:c5:c4:6e:8a:40:ab:32:5a:98:14:
         c0:16:27:c0:d3:c0:1c:73:ce:1d:02:e9:90:71:90:15:ff:92:
         c6:e5:a1:a0:e5:87:b1:8c:c4:57:54:82:68:56:6f:a7:56:66:
         31:a3:f2:02:1b:81:c7:31:b7:a8:04:54:2c:b3:7e:5f:86:35:
         6b:1c:b1:0f:8b:7e:60:bd:38:24:c2:37:91:53:bc:cf:b4:18:
         ba:66:c7:74:69:45:c9:a4:db:d6:1d:85:0e:60:a8:74:31:b8:
         7e:56:42:d5:d5:d4:ee:a8:aa:5f:e6:d3:45:6f:2d:67:77:0c:
         f8:e4:f6:96:26:88:94:a9:bf:fe:72:e3:89:e3:ad:04:ff:4c:
         bf:90:81:df:f4:ad:ce:32:55:9d:77:48:f0:40:05:7b:90:b9:
         ea:f8:93:00:3b:ba:c9:51:5d:3f:a4:62:85:a5:4e:86:a5:e8:
         36:e3:85:c7:d0:b7:ee:5f:a9:eb:8f:ae:0b:a7:bb:37:da:32:
         25:48:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org