Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2033323538.roa
File:                     326131323a613330303a3a2f32392d3438203d3e2033323538.roa (raw, json)
Hash identifier:          TzdyWxTuYwegkjWxCXDAP01o293RSbHXEvkRIopM8oE=
Subject key identifier:   C5:0F:B2:9C:14:AC:48:C8:49:21:3C:4E:05:7D:C5:80:E7:D2:4B:F1
Certificate issuer:       /CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
Certificate serial:       236B97927577B9F5C94C5648F0E97EC1EE61F13A
Authority key identifier: B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer
Subject info access:      rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2033323538.roa
Signing time:             Fri 09 Jun 2023 08:24:24 +0000
ROA not before:           Fri 09 Jun 2023 08:19:24 +0000
ROA not after:            Fri 07 Jun 2024 08:24:24 +0000
asID:                     3258
IP address blocks:        2a12:a300::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6b:97:92:75:77:b9:f5:c9:4c:56:48:f0:e9:7e:c1:ee:61:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dbabfd927400709bf42ca6bd5b61cfe63d1bc0
        Validity
            Not Before: Jun  9 08:19:24 2023 GMT
            Not After : Jun  7 08:24:24 2024 GMT
        Subject: CN=C50FB29C14AC48C849213C4E057DC580E7D24BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:26:1b:6a:18:6f:6f:e8:81:62:6b:91:17:
                    1a:83:1d:86:54:0c:5f:7c:1a:a0:97:4d:5d:ad:b8:
                    c0:30:9a:01:2e:a6:34:89:a4:d9:c8:2b:56:7c:70:
                    29:de:be:76:8e:05:04:41:c7:51:b1:93:f4:b3:69:
                    f3:c7:98:84:f1:88:00:ff:e1:cf:0a:e7:6e:84:25:
                    ad:b1:7d:d5:6b:b0:12:44:b9:39:eb:c7:54:05:77:
                    8a:6a:b4:17:c4:0f:78:c3:ac:fb:39:00:37:6f:d6:
                    cd:cd:60:05:0e:34:f5:84:ef:9f:76:1c:5e:58:2d:
                    42:d8:1e:23:1a:83:32:da:bb:27:ee:6f:34:df:33:
                    fa:0c:5b:06:c9:eb:9f:4d:16:22:88:71:49:43:4a:
                    ba:c4:0b:a8:00:fe:0f:33:39:26:48:f6:c4:3e:a6:
                    df:11:a1:24:c0:81:0a:77:c9:15:22:48:40:37:f8:
                    58:c3:b7:e5:40:07:16:f3:ea:d9:81:f0:6f:b9:80:
                    79:70:52:de:06:6c:a5:74:4c:86:3b:ef:34:86:af:
                    a0:c2:d2:63:3f:a1:b8:c4:9b:d6:10:b6:85:88:d3:
                    d0:42:02:81:f8:86:6c:c1:bd:be:ba:c6:f3:79:80:
                    84:4b:58:90:66:3f:3a:31:7d:90:6b:28:3e:e1:f6:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:B2:9C:14:AC:48:C8:49:21:3C:4E:05:7D:C5:80:E7:D2:4B:F1
            X509v3 Authority Key Identifier:
                keyid:B8:DB:AB:FD:92:74:00:70:9B:F4:2C:A6:BD:5B:61:CF:E6:3D:1B:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/2/B8DBABFD927400709BF42CA6BD5B61CFE63D1BC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNur_ZJ0AHCb9CymvVthz-Y9G8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/2/326131323a613330303a3a2f32392d3438203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:a300::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:60:03:4b:ed:57:b4:6b:a2:64:be:f4:9a:68:d8:b0:03:05:
         8b:79:c6:dd:93:e0:5b:69:55:2e:e9:e9:02:24:87:d1:a1:9c:
         4d:e6:16:4e:eb:6b:38:d4:66:bd:04:c8:1b:e0:8f:f1:db:92:
         0c:d2:75:48:d3:99:b2:0b:cf:e9:d3:51:5c:4c:83:17:33:53:
         72:36:35:cd:7a:d3:e9:52:bc:96:ae:4d:f4:a3:b1:80:35:5f:
         d3:cb:bf:df:0f:2b:f9:00:55:43:3d:ba:f9:22:75:e9:f3:af:
         16:28:b7:1f:cc:42:4a:dc:1d:bb:f7:f5:37:0d:95:59:4b:25:
         70:4b:61:3d:12:2d:34:f3:b4:41:0e:61:b2:c5:b1:02:65:e4:
         f3:f5:dd:c3:2e:c9:fc:96:e5:19:7a:2f:39:db:c2:fa:5a:2f:
         e0:52:ed:41:2e:04:64:8a:e7:1e:9f:64:90:f3:cd:02:7b:6d:
         7a:20:1e:e4:a0:49:b5:29:33:d5:fc:9b:68:4e:51:8f:95:44:
         90:f1:90:e1:46:50:b3:c0:33:9d:8d:de:8c:61:06:55:f6:5a:
         50:2d:bc:70:b8:11:20:fc:3e:a1:14:59:34:af:04:fa:cb:96:
         d9:f6:f4:02:2c:4c:df:91:75:a5:38:d0:70:5f:5f:eb:2b:02:
         73:24:0e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org