Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666633a3a2f34382d3438203d3e20323037383332.roa
File:                     326131313a663263303a666666633a3a2f34382d3438203d3e20323037383332.roa (raw, json)
Hash identifier:          du1G6doYwdNMNyM0F90Xen+6LqwW0NMYTahQpsOogS4=
Subject key identifier:   E0:F7:F7:94:49:45:CE:FF:00:C1:84:AA:8B:06:1A:3E:BC:BD:73:D0
Certificate issuer:       /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial:       05BE58A011AD38732D67280793732D8D36D1E4BE
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666633a3a2f34382d3438203d3e20323037383332.roa
Signing time:             Tue 06 Dec 2022 14:47:15 +0000
ROA not before:           Tue 06 Dec 2022 14:42:15 +0000
ROA not after:            Tue 05 Dec 2023 14:47:15 +0000
asID:                     207832
IP address blocks:        2a11:f2c0:fffc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:58:a0:11:ad:38:73:2d:67:28:07:93:73:2d:8d:36:d1:e4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
        Validity
            Not Before: Dec  6 14:42:15 2022 GMT
            Not After : Dec  5 14:47:15 2023 GMT
        Subject: CN=E0F7F7944945CEFF00C184AA8B061A3EBCBD73D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:bb:60:9e:e1:90:d1:7e:a0:5d:bf:aa:50:
                    f7:e1:86:9b:9a:46:9c:7c:ed:b5:f1:0f:e3:47:ef:
                    dc:3c:b4:0d:9b:b2:0c:20:0d:bc:1c:40:c4:f6:70:
                    55:b1:4d:a8:03:ed:16:70:3d:b0:b2:e3:f1:86:cf:
                    8f:e2:7e:dd:05:ee:53:3b:04:ce:20:51:24:4c:e5:
                    81:c4:31:d6:f1:31:65:27:8e:d9:ab:9b:26:79:10:
                    97:75:bf:f6:7f:2a:a3:21:d7:04:80:f8:48:57:f1:
                    93:90:8a:96:03:a2:1e:24:3d:c9:78:7b:ad:84:fb:
                    2d:07:ba:4a:fa:43:9e:a4:39:40:f2:d1:66:45:8b:
                    fb:fc:fb:99:f4:e2:d1:b6:c5:44:e0:0e:ec:eb:f3:
                    45:15:12:68:97:84:bf:e7:1c:89:42:be:6f:8f:1d:
                    ed:a0:36:5f:69:20:e6:14:a6:ac:01:80:bc:e9:06:
                    31:a2:02:24:20:e3:92:88:7a:04:82:31:df:3e:ff:
                    fd:08:72:6d:ba:b3:cb:ca:84:e9:82:d5:40:49:be:
                    bb:7a:33:93:e4:ea:60:fe:3e:6d:54:e4:b0:4a:03:
                    be:0b:3f:a8:47:48:42:e3:31:23:3f:fb:fa:eb:4f:
                    a0:6d:de:e0:79:b4:21:a2:f8:0a:eb:91:22:44:af:
                    c0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F7:F7:94:49:45:CE:FF:00:C1:84:AA:8B:06:1A:3E:BC:BD:73:D0
            X509v3 Authority Key Identifier:
                keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666633a3a2f34382d3438203d3e20323037383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:72:2d:9d:20:41:da:ce:db:a3:bd:95:b9:00:00:d0:28:
         d0:a4:e3:83:75:b0:5c:c7:e8:00:3c:4e:e2:9a:c7:1d:09:57:
         7c:79:28:71:e6:74:c1:50:35:79:71:5a:d6:72:03:74:8d:d0:
         c3:2d:c2:09:a5:30:c4:56:8f:9c:90:6b:58:81:ac:a4:02:7c:
         7a:c3:b2:01:8a:f6:4d:76:27:2a:2f:0d:47:f0:91:db:ba:e2:
         1c:67:5e:39:15:ab:ee:84:d0:b5:39:a8:53:1d:34:3c:1c:19:
         d9:02:18:59:89:76:2b:31:2f:ff:e6:0b:9e:28:1a:64:e8:a8:
         04:0e:e4:7a:b0:66:61:0f:20:ed:f1:a3:4a:5f:5b:74:ef:04:
         ce:3b:cf:4b:c9:7b:2c:6a:b4:75:6b:76:e8:32:09:09:8a:37:
         6d:f9:61:3b:56:ac:f8:77:a7:0a:58:90:e3:58:b8:bd:06:e3:
         af:a3:d0:85:08:ca:cd:9a:36:fa:84:8a:88:21:cc:46:3d:7a:
         da:04:34:02:d0:fd:26:a6:0c:81:c5:04:59:58:2f:2d:a0:f1:
         90:49:84:16:8f:fe:2b:2f:f6:df:ed:f8:e4:3e:c1:b1:3e:9c:
         e5:ef:46:d7:84:80:0b:fb:e3:88:ba:ae:5b:f1:6e:09:e3:c9:
         d0:d4:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org