Route Origin Authorization

$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa
File:                     326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier:          ewhu9tMss3VDWtJ5GP/7bhHduGrWcHF6/HqqV7t3lsQ=
Subject key identifier:   71:C0:44:A9:1A:53:BB:C3:70:16:3D:30:8A:D7:8A:41:E0:E9:75:5D
Certificate issuer:       /CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Certificate serial:       3809B273BF24528CA972F31994019D1A5978628F
Authority key identifier: 48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority info access:    rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject info access:      rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa
Signing time:             Sat 23 Jul 2022 18:25:45 +0000
ROA not before:           Sat 23 Jul 2022 18:20:45 +0000
ROA not after:            Sat 22 Jul 2023 18:25:45 +0000
asID:                     50555
IP address blocks:        2a12:dd47:8605::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:09:b2:73:bf:24:52:8c:a9:72:f3:19:94:01:9d:1a:59:78:62:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Validity
            Not Before: Jul 23 18:20:45 2022 GMT
            Not After : Jul 22 18:25:45 2023 GMT
        Subject: CN=71C044A91A53BBC370163D308AD78A41E0E9755D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:eb:78:09:2b:32:8d:0c:7b:ce:2b:62:4c:
                    31:49:13:93:58:e7:0c:02:a9:dd:63:6b:78:79:4f:
                    0f:1f:3a:b3:21:bb:67:5c:87:55:e5:5d:fa:e9:a5:
                    12:e2:ef:a5:28:e5:21:bc:87:2b:bf:0e:9b:47:2c:
                    b0:1f:2f:6a:10:03:ba:86:34:2d:92:41:df:70:80:
                    ed:66:41:99:be:57:5d:f4:3f:c8:c6:64:2f:fd:5c:
                    90:a4:ea:44:e5:bc:a9:b7:47:0a:a1:89:eb:70:71:
                    08:e4:b8:e4:77:3f:15:58:b6:97:e8:3f:ee:2b:11:
                    75:ad:75:c7:4b:6f:6d:96:f7:af:de:4c:8e:bc:f5:
                    d0:3d:25:df:02:76:64:73:99:d6:e0:e6:57:30:1d:
                    bf:6b:9c:fd:f9:1d:4a:f9:6e:3c:56:95:c9:01:0d:
                    ca:ea:e2:5a:6b:63:4c:7f:e1:f3:4e:07:f7:a0:ff:
                    39:37:30:3e:19:d5:b6:35:15:6c:40:f9:74:97:dc:
                    b6:83:89:be:ee:1c:33:ea:ff:04:60:00:7a:91:bd:
                    0c:c7:30:ce:e1:26:71:70:8e:1a:38:29:04:7d:fd:
                    a9:47:9d:11:90:ae:9a:e2:fc:15:bc:c1:2c:45:ac:
                    0e:4e:f0:2e:22:9d:4f:88:e9:06:04:f0:4d:db:c0:
                    35:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:44:A9:1A:53:BB:C3:70:16:3D:30:8A:D7:8A:41:E0:E9:75:5D
            X509v3 Authority Key Identifier:
                keyid:48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8605::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:d4:41:23:53:82:1a:01:82:66:a1:64:5b:b8:ca:0c:51:61:
         2d:7f:c7:7a:7d:d1:26:84:02:46:1f:21:36:d2:b5:e4:b1:0c:
         d5:b6:9f:a4:b8:c8:ea:87:c1:03:b1:39:03:a7:95:3e:47:28:
         89:bf:25:03:80:39:dd:5d:13:13:c1:99:17:26:eb:9b:11:76:
         45:db:8f:90:94:68:2c:9c:12:fa:7b:4b:76:0c:71:35:4b:d5:
         70:b2:20:b6:d0:39:b3:b7:44:c5:a5:62:ff:96:13:e6:c7:96:
         f6:80:ee:a4:a3:16:3d:4d:42:02:b3:d7:c2:41:3e:00:33:2e:
         ea:ec:4e:2e:49:aa:8c:ad:b3:15:35:9a:98:6a:12:a7:c4:15:
         1f:6e:52:10:05:92:b3:df:37:d6:68:72:b9:59:66:07:e9:17:
         89:32:2a:58:5e:ed:11:b7:a8:1f:4c:92:ab:31:48:4b:11:81:
         6c:f0:a3:05:38:28:7e:05:cb:f8:8c:cb:21:cd:72:08:77:13:
         53:e4:43:74:7a:1b:ca:ed:40:81:cf:ab:db:4f:da:5b:d4:66:
         4e:0d:fc:09:77:47:f4:db:2c:5d:78:cf:15:66:de:0c:5a:60:
         1f:25:0e:0d:0a:83:ac:dd:9c:c0:0c:19:12:8c:69:02:f9:4d:
         63:a7:0a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:04 2024 by rpki-client on console-fra.rpki-client.org