Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/5/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa
File:                     326130373a316334303a3a2f32392d3438203d3e20323130383833.roa (raw, json)
Hash identifier:          TR/UDchIuOAbiA63ZzqsZXuR32URgl8Oqpez9Sgx1R4=
Subject key identifier:   19:02:40:C0:35:FE:E6:69:C7:BA:5E:4E:58:44:0F:10:16:66:69:AC
Certificate issuer:       /CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
Certificate serial:       55BE14175C8CE12EE8150CBDCF30F147FABDCB
Authority key identifier: A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer
Subject info access:      rsync://0.sb/repo/sb/5/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa
Signing time:             Fri 21 Oct 2022 09:58:38 +0000
ROA not before:           Fri 21 Oct 2022 09:53:38 +0000
ROA not after:            Fri 20 Oct 2023 09:58:38 +0000
asID:                     210883
IP address blocks:        2a07:1c40::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:be:14:17:5c:8c:e1:2e:e8:15:0c:bd:cf:30:f1:47:fa:bd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a14d4fcb0b0fbe1be86f0287772f87a90082f7e4
        Validity
            Not Before: Oct 21 09:53:38 2022 GMT
            Not After : Oct 20 09:58:38 2023 GMT
        Subject: CN=190240C035FEE669C7BA5E4E58440F10166669AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:24:3c:f4:11:72:07:b1:72:0b:8f:87:a7:
                    12:2e:60:3b:e9:1c:f2:79:c1:fd:dd:1a:18:3f:32:
                    fb:da:a0:c0:c8:4c:4a:5a:c1:f5:33:19:2e:f6:0e:
                    06:fc:67:b0:21:d5:33:e7:94:da:55:86:c9:c1:e6:
                    43:99:41:c8:3b:81:32:03:26:bb:9b:ec:2a:24:d2:
                    cc:73:e5:5a:07:f3:f1:fd:18:c5:fa:67:e5:05:1e:
                    01:bd:e8:7d:aa:5e:ef:2d:9b:d3:e7:b1:14:7d:09:
                    b0:bd:55:ca:ac:5a:a8:23:94:da:f0:9c:bf:41:f5:
                    a5:e0:db:5b:0d:96:22:98:03:9b:35:2b:d1:3f:d8:
                    25:a0:f5:f3:bc:91:3c:51:52:68:70:d8:6f:bf:d6:
                    35:44:77:ec:fd:30:b2:1c:92:0a:5c:89:cf:e4:0b:
                    21:32:da:cc:1c:0a:23:61:bf:31:e7:46:1a:b6:00:
                    b2:97:5e:59:20:a0:01:82:c2:8c:ec:b2:5e:1f:15:
                    88:61:f8:72:a9:e9:89:c6:68:77:fc:0b:f2:cd:ed:
                    c0:f2:8e:47:03:0c:22:40:17:23:0a:2b:4f:fb:1b:
                    b4:d6:e5:31:b9:9a:47:91:20:43:25:f1:e3:b0:64:
                    d8:9a:a7:a8:1e:e7:75:6f:ff:fe:99:aa:d2:2f:8a:
                    37:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:02:40:C0:35:FE:E6:69:C7:BA:5E:4E:58:44:0F:10:16:66:69:AC
            X509v3 Authority Key Identifier:
                keyid:A1:4D:4F:CB:0B:0F:BE:1B:E8:6F:02:87:77:2F:87:A9:00:82:F7:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/5/A14D4FCB0B0FBE1BE86F0287772F87A90082F7E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU1PywsPvhvobwKHdy-HqQCC9-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/5/326130373a316334303a3a2f32392d3438203d3e20323130383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:1c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:f2:ba:9c:34:72:67:2b:eb:90:1f:3b:51:93:b4:f2:bd:
         52:81:c3:ef:3a:c6:1f:cc:22:83:9c:54:86:1b:25:f1:d8:c1:
         5a:08:e3:d6:3a:a7:07:14:1d:9c:cc:84:75:9b:59:47:ce:9d:
         40:5b:8f:22:c0:53:52:f0:08:75:63:6d:1c:3a:9d:23:4c:c2:
         82:2d:06:c5:d9:31:42:67:64:ba:05:5f:d2:a0:09:83:3b:8f:
         76:91:0d:6c:41:67:3d:91:ba:18:10:ee:fc:aa:60:d5:62:66:
         8e:65:4e:72:90:31:4f:ae:b0:b3:8f:81:d6:ac:20:b6:df:f2:
         00:fa:75:13:cc:fb:16:e9:ff:72:26:d1:88:67:02:64:95:95:
         97:49:61:66:0c:ae:25:b4:63:77:b8:cd:9f:ad:0c:72:3c:85:
         35:c3:6e:2e:b8:e9:e4:10:ca:2b:fa:fb:59:47:b9:54:40:ef:
         4d:dd:e9:ac:eb:18:31:46:5c:ae:7e:a0:88:85:f0:3b:32:04:
         b6:cf:b1:41:82:1c:a2:34:27:41:66:6f:e1:4c:db:0f:7f:05:
         d4:9e:9e:96:51:57:2d:a9:d7:30:99:a2:14:ee:f1:68:75:00:
         ab:d7:43:f3:84:8b:7f:ce:ad:e9:6c:b9:a9:90:55:26:cc:2c:
         f2:e7:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:52 2024 by rpki-client on console-fra.rpki-client.org