Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
File:                     326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          R+ledAYDyH327wPq2+JyOSZS4IBEG0+DDb5E+9Wz2J4=
Subject key identifier:   F4:F0:6B:9F:98:EB:B0:6B:1D:AC:C3:87:9B:BA:45:B4:4C:AF:E8:F8
Certificate issuer:       /CN=99f58610ba131baaddf206f11447164205b23be4
Certificate serial:       359A79F817F9C955ABED2DCDDA4305DD4B9D827D
Authority key identifier: 99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Tue 06 Dec 2022 14:47:15 +0000
ROA not before:           Tue 06 Dec 2022 14:42:15 +0000
ROA not after:            Tue 05 Dec 2023 14:47:15 +0000
asID:                     205789
IP address blocks:        2a11:f2c0:fffd::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:79:f8:17:f9:c9:55:ab:ed:2d:cd:da:43:05:dd:4b:9d:82:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f58610ba131baaddf206f11447164205b23be4
        Validity
            Not Before: Dec  6 14:42:15 2022 GMT
            Not After : Dec  5 14:47:15 2023 GMT
        Subject: CN=F4F06B9F98EBB06B1DACC3879BBA45B44CAFE8F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:79:c0:fc:e9:f4:77:a7:eb:5e:58:42:0e:
                    68:44:0c:4f:71:eb:b3:94:6e:37:8b:1e:dd:85:d7:
                    35:ee:1e:89:39:65:a1:8a:f7:7a:7b:2c:fb:d1:d6:
                    4c:42:4a:b9:34:19:38:d9:53:99:b6:c0:93:70:ed:
                    d4:7c:6a:aa:b0:2a:eb:61:af:c3:67:cb:5d:76:c6:
                    81:8c:41:be:1a:f6:17:c1:af:0d:be:5c:31:8c:bd:
                    29:fd:2f:ad:a0:00:b5:9e:6b:97:ce:e0:3c:40:e6:
                    2c:97:d5:95:9b:a2:c6:ec:6d:c7:75:db:d8:07:51:
                    02:eb:c3:9d:65:2e:f1:34:77:ab:31:4c:fb:44:ce:
                    d3:a4:0e:ff:a1:e9:94:d4:18:f4:36:34:cc:bb:e5:
                    83:8e:db:1b:32:0d:e7:87:89:b5:d2:49:e5:88:d5:
                    84:8c:41:a9:fc:5d:05:f6:62:63:18:70:0f:56:04:
                    ad:b6:0d:3a:b6:26:0e:88:51:0f:fc:2f:4e:a0:fe:
                    b4:86:66:04:24:bf:a4:17:60:dd:6b:cb:63:f5:57:
                    26:53:01:b7:32:6a:cc:98:09:2e:9e:db:fb:9f:eb:
                    f1:04:25:0c:6b:16:83:a7:ce:ae:3b:b2:0b:16:be:
                    d6:b5:3c:a7:46:c4:c5:94:20:b8:75:32:bc:9a:51:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F0:6B:9F:98:EB:B0:6B:1D:AC:C3:87:9B:BA:45:B4:4C:AF:E8:F8
            X509v3 Authority Key Identifier:
                keyid:99:F5:86:10:BA:13:1B:AA:DD:F2:06:F1:14:47:16:42:05:B2:3B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/99F58610BA131BAADDF206F11447164205B23BE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfWGELoTG6rd8gbxFEcWQgWyO-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/as207960-rpki-ca/7/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:2a:71:02:6e:37:1d:cd:38:59:e2:38:e1:58:1f:24:13:96:
         79:81:92:9d:1f:9f:85:6e:37:50:6a:2e:d8:39:c7:dc:20:7b:
         f3:66:f6:be:20:ee:90:e1:66:54:44:6f:b6:9f:79:2a:80:db:
         be:21:19:4e:23:64:b0:2d:5e:29:3a:f1:be:9c:ee:a5:7e:16:
         34:1c:f4:60:2a:fe:f0:e2:31:81:90:07:84:ef:af:2f:bc:7e:
         1b:20:98:08:d5:30:da:10:63:a7:65:06:ab:95:14:80:be:12:
         3c:fc:ed:54:9e:55:2f:d1:79:80:65:23:e0:ac:f8:dd:3d:e6:
         21:49:22:f9:10:99:9e:34:37:01:e9:e5:8e:64:34:59:4f:c0:
         37:7f:c0:f3:a8:d6:f5:10:c3:5b:92:96:4a:99:db:78:41:6e:
         25:25:c9:17:5b:94:a7:a7:77:1e:89:3a:3c:9e:c6:57:70:35:
         e1:9a:00:4c:f6:f0:6a:19:4b:7f:2a:b1:9b:83:54:98:02:00:
         61:7b:3f:1a:7c:57:99:33:e6:70:bc:63:3c:8f:1c:5c:16:35:
         5b:fa:81:7e:8c:a6:81:41:e8:b9:8b:d5:b7:d9:be:16:ce:74:
         2f:66:36:72:e3:96:93:16:d2:a8:73:e3:f3:03:c9:8f:8d:02:
         ab:78:b0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-ams.rpki-client.org