Route Origin Authorization

$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
File:                     326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          f85DXy8yBiJxNbf/E5hJps9t0vO8sa0Hifs3KBo+kIM=
Subject key identifier:   61:3F:C4:76:DA:C3:8D:EF:F8:C6:4F:2C:AF:E5:4F:18:C3:7B:91:47
Certificate issuer:       /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial:       62FAC5697C29CC696D8F085D6398D8AE40E090E3
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa
Signing time:             Fri 16 Feb 2024 14:46:15 +0000
ROA not before:           Fri 16 Feb 2024 14:41:15 +0000
ROA not after:            Fri 14 Feb 2025 14:46:15 +0000
asID:                     16509
IP address blocks:        2a05:dfc1:8900::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fa:c5:69:7c:29:cc:69:6d:8f:08:5d:63:98:d8:ae:40:e0:90:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
        Validity
            Not Before: Feb 16 14:41:15 2024 GMT
            Not After : Feb 14 14:46:15 2025 GMT
        Subject: CN=613FC476DAC38DEFF8C64F2CAFE54F18C37B9147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:81:b1:bd:9b:a4:67:d7:02:ec:08:bc:85:
                    8e:5d:6c:c1:88:71:61:9a:17:22:16:e6:c2:1a:02:
                    bb:2b:7d:e0:5b:c8:8c:b4:3b:16:92:4f:cc:62:3c:
                    b5:05:26:3a:cd:f0:40:a4:21:1c:dc:bb:7e:33:9f:
                    e2:f9:1b:27:4b:0b:6b:a7:00:68:8b:3e:70:f4:73:
                    c1:31:8e:35:32:97:31:81:73:55:b1:68:cc:ff:85:
                    b2:7f:35:51:9d:26:9b:22:a9:a0:03:f9:11:d2:b0:
                    43:6f:3a:0e:00:60:f8:a0:f1:70:2e:b9:e6:c2:2b:
                    2f:0d:2e:c9:6a:b9:c2:78:2e:cd:13:2f:9d:b3:24:
                    5d:fb:19:78:2c:18:57:12:eb:a6:3a:71:50:39:99:
                    e7:06:04:24:15:47:19:82:13:94:15:05:cf:53:4e:
                    9d:68:14:88:de:6b:9e:a6:33:08:f5:4d:40:53:0a:
                    9e:4c:e1:10:51:9f:c3:66:dd:c4:bf:68:4c:16:a7:
                    2f:8a:19:f0:13:60:19:cb:19:89:24:41:91:ee:2f:
                    ce:f1:0b:7a:dd:c2:fd:2f:cd:b4:5d:dc:47:72:b1:
                    1b:c5:0b:9b:a3:ad:a8:76:10:6a:82:c0:df:7b:96:
                    3b:c3:53:7b:6c:bb:0f:30:08:a2:3a:dd:17:59:c6:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:C4:76:DA:C3:8D:EF:F8:C6:4F:2C:AF:E5:4F:18:C3:7B:91:47
            X509v3 Authority Key Identifier:
                keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8900::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:8c:09:a9:b9:4d:23:1f:2b:77:91:a9:a3:30:f1:fb:82:
         25:d8:2b:68:be:6c:6d:43:87:a6:9e:88:65:da:db:2b:63:91:
         14:a3:7b:fb:64:5f:69:25:96:e6:9f:87:3a:76:27:da:86:4d:
         86:fd:02:3c:83:2d:ed:f0:f2:44:fd:15:87:95:32:a8:94:c5:
         28:b1:f8:e2:a7:26:8a:d6:50:24:a1:44:dc:d2:c9:59:27:21:
         ea:55:ab:b3:b8:19:2e:db:b6:4d:71:23:02:0d:d5:3c:1a:75:
         2f:24:e9:d8:cf:e5:aa:6a:37:d9:ed:46:6c:c8:17:55:42:15:
         7f:06:2b:d6:4c:ec:83:b3:b2:9d:6b:07:48:8c:66:9f:f7:84:
         75:ae:a6:1a:bd:a9:6a:78:dd:53:85:64:1b:8e:e5:96:57:b1:
         ae:4c:02:7f:29:fa:d4:30:43:c5:79:e2:cd:3f:1d:05:cd:c4:
         48:ca:a3:11:66:c9:cf:42:da:60:29:e1:17:2c:42:11:c0:da:
         9d:1b:e9:52:56:71:4b:1e:e7:9a:96:c1:eb:73:d8:24:e2:e3:
         20:42:be:ca:d6:86:d7:04:e3:57:b0:e9:e5:6d:e2:b9:13:63:
         9f:a6:67:fe:e3:a2:e7:20:35:24:9e:52:6d:21:7d:43:f9:50:
         a5:58:b1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:57 2024 by rpki-client on console-fra.rpki-client.org