Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0o9z5PzVmpolHCHU2CYFys-9iM.roa
File:                     G0o9z5PzVmpolHCHU2CYFys-9iM.roa (raw, json)
Hash identifier:          yyNlGfU0WmDBg1sQxwAog9idqnlYZb/ozaBgQkmnaxk=
Subject key identifier:   1B:4A:3D:CF:93:F3:56:6A:68:94:70:87:53:60:98:17:2B:3E:F6:23
Certificate issuer:       /CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
Certificate serial:       03
Authority key identifier: 2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0o9z5PzVmpolHCHU2CYFys-9iM.roa
Signing time:             Tue 23 Feb 2021 18:36:06 +0000
ROA not before:           Tue 23 Feb 2021 18:36:06 +0000
ROA not after:            Fri 01 Jul 2022 00:00:00 +0000
asID:                     0
IP address blocks:        2a0e:b240::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cab0df157fb5ca0554f27b676023140ab3d89f5
        Validity
            Not Before: Feb 23 18:36:06 2021 GMT
            Not After : Jul  1 00:00:00 2022 GMT
        Subject: CN=1B4A3DCF93F3566A68947087536098172B3EF623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:7a:d1:6d:55:83:ad:da:6b:1a:37:3a:93:
                    55:ec:5f:43:e5:c1:80:d2:c5:e4:29:44:7b:ea:c3:
                    57:a4:b6:91:c6:56:9e:a1:f9:38:f7:0e:b5:df:d5:
                    66:36:10:a0:8a:5f:d1:29:8b:a1:9e:ff:97:3f:db:
                    c4:d8:bc:e4:58:53:c3:11:95:6d:f2:63:93:00:3f:
                    fe:c7:52:3b:7b:f9:d2:a8:21:ab:51:c7:bd:db:ac:
                    86:d2:24:4b:8c:38:e5:3d:3c:03:bf:3e:4e:66:d6:
                    8e:d1:42:80:8b:06:7c:95:2f:85:a4:d4:63:2f:e4:
                    37:cb:11:42:6f:7c:3b:06:6a:23:36:6f:0c:40:ff:
                    96:ad:3f:b9:96:e3:76:b0:3f:9a:5f:7a:74:92:c5:
                    f0:4b:dc:a8:98:8c:15:fa:bd:e0:e2:eb:74:4f:72:
                    6d:43:7a:58:12:83:d2:6a:c3:f8:85:22:b5:c7:93:
                    a0:ad:4c:dd:88:43:20:67:c1:2b:f0:88:14:ab:af:
                    91:4a:6b:d2:e7:b1:02:0c:00:09:50:20:35:f4:9a:
                    a1:93:17:f5:5c:94:85:ca:7d:79:37:75:86:d9:c8:
                    42:e6:94:59:c6:be:2a:84:f2:1e:18:2b:72:2e:4a:
                    5a:39:79:d5:ff:9a:43:28:50:19:bd:34:f4:6b:31:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4A:3D:CF:93:F3:56:6A:68:94:70:87:53:60:98:17:2B:3E:F6:23
            X509v3 Authority Key Identifier:
                keyid:2C:AB:0D:F1:57:FB:5C:A0:55:4F:27:B6:76:02:31:40:AB:3D:89:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/LKsN8Vf7XKBVTye2dgIxQKs9ifU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKsN8Vf7XKBVTye2dgIxQKs9ifU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/G0o9z5PzVmpolHCHU2CYFys-9iM.roa
                RPKI Notify - URI:https://chloe.sobornost.net/rpki/news.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b240::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:09:57:37:b6:26:47:c9:59:2b:51:97:7c:94:36:32:b7:35:
         3c:f9:9e:27:46:d5:1a:56:20:4a:81:a8:a1:1f:bc:65:74:3a:
         8b:1b:96:96:39:c0:33:00:7d:9f:ea:42:af:e3:5b:6e:17:af:
         78:84:19:fa:2c:b2:35:52:d3:6e:9b:3b:a9:d4:9b:9c:e7:23:
         4f:d5:07:91:20:19:eb:05:d7:0c:22:82:40:7c:3c:fc:c4:22:
         36:ab:b2:b6:1a:9b:2e:fa:45:d2:48:8f:3e:6d:da:05:7d:16:
         79:8f:7b:6d:7e:34:56:f7:7b:70:3f:62:f3:07:52:7a:4f:78:
         c3:ce:a3:0e:c8:56:e8:45:aa:06:b5:b8:c1:ec:17:bc:2b:33:
         16:6e:5d:b6:6c:07:df:e0:a7:ec:2b:6a:7d:8f:6f:e1:d0:24:
         9b:d8:4b:1a:80:5e:93:30:c7:cb:75:8a:96:2b:92:ed:18:fa:
         fc:f5:67:9b:0e:29:f4:f1:22:62:5f:37:a7:1f:45:ee:f2:c0:
         93:c7:5d:2c:eb:21:4a:5d:10:9b:9b:96:c2:20:5d:1d:51:7b:
         49:8b:66:c8:f5:e0:f4:8b:00:a8:75:5d:aa:d5:5b:65:c0:b5:
         43:b7:c4:36:8a:a4:d2:29:77:c8:1a:0c:57:34:6e:de:85:4c:
         c6:7f:32:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org