Route Origin Authorization

$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa
File:                     326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier:          c70k0m7aTSAJwFcinFXyPOaj4q2FyzY1cAVHVzkaldM=
Subject key identifier:   10:ED:A1:07:B4:C0:26:91:D8:0E:29:4A:77:B5:30:63:56:1E:38:30
Certificate issuer:       /CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Certificate serial:       5222C0E783304771E561CF3801D29C7568861866
Authority key identifier: 48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority info access:    rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject info access:      rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa
Signing time:             Sat 23 Jul 2022 18:25:49 +0000
ROA not before:           Sat 23 Jul 2022 18:20:49 +0000
ROA not after:            Sat 22 Jul 2023 18:25:49 +0000
asID:                     50555
IP address blocks:        2a12:dd47:8606::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:22:c0:e7:83:30:47:71:e5:61:cf:38:01:d2:9c:75:68:86:18:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Validity
            Not Before: Jul 23 18:20:49 2022 GMT
            Not After : Jul 22 18:25:49 2023 GMT
        Subject: CN=10EDA107B4C02691D80E294A77B53063561E3830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:02:0c:21:0c:d8:b0:58:72:36:cc:fe:2a:
                    0e:db:b7:42:23:0c:4d:75:09:7c:ff:53:d7:05:5c:
                    92:b2:cb:d5:ca:1c:89:8f:bf:f8:a0:a9:59:89:15:
                    2f:82:cd:50:f3:8b:75:63:95:c2:53:e0:2a:55:26:
                    fc:45:7f:8a:58:7a:38:8d:64:32:ee:8c:d6:42:17:
                    7c:27:a9:25:ac:16:21:82:36:d4:7a:09:cb:02:ea:
                    96:c3:0a:7d:f7:36:e5:47:34:88:8f:cc:4e:9f:cb:
                    91:d6:49:3b:c2:6a:7d:17:c6:15:5e:7a:eb:81:0f:
                    2a:a8:71:0d:b7:01:28:49:0f:d3:b2:f7:a3:5e:7c:
                    c8:00:d7:4e:a7:8e:3f:8e:ef:42:92:1d:79:e6:ed:
                    d3:1f:59:c5:05:1d:fa:be:bd:6a:98:f1:85:95:1a:
                    8d:cc:4a:c1:18:7c:b0:ee:22:66:b2:a0:b8:32:a0:
                    42:4f:ab:4b:2c:23:fe:e1:3d:ca:6b:09:06:34:a6:
                    66:41:3e:bb:09:32:ff:ef:2e:53:33:08:27:b9:6a:
                    99:b7:42:0f:2a:d1:73:d0:7d:cb:d7:6e:d5:0b:8f:
                    28:81:6c:cd:72:d6:1b:7c:8f:af:46:c4:fb:1e:1d:
                    c0:9d:2a:b2:55:30:02:6f:e8:86:9d:49:11:f2:22:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:A1:07:B4:C0:26:91:D8:0E:29:4A:77:B5:30:63:56:1E:38:30
            X509v3 Authority Key Identifier:
                keyid:48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8606::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:4a:a7:94:73:f1:63:11:36:05:fb:a7:b9:20:12:ea:92:
         72:59:75:9e:5b:f1:ff:d4:21:9f:a6:e7:fe:35:4a:66:22:50:
         54:56:74:c6:cc:ab:66:32:2f:5c:91:63:f7:81:3e:35:1c:a9:
         f6:70:94:0b:6b:0b:f7:2b:83:48:d7:1c:1f:ac:39:87:a2:98:
         08:f3:91:a6:a3:18:4a:b3:d8:4b:c5:e4:40:3f:5d:7b:9c:70:
         fd:5f:a1:f3:e3:f7:aa:40:46:02:d1:b5:ac:99:77:de:50:fc:
         84:00:90:21:4e:7c:85:86:f9:2d:7c:3c:2a:a6:9d:25:e0:74:
         80:d9:5d:c1:9d:2d:80:77:0d:39:7a:a6:e6:96:a8:84:94:e8:
         98:61:21:3b:0c:85:dc:6b:f2:df:6f:3b:da:39:e4:42:35:1b:
         4a:c5:d2:fb:a8:cc:b4:ce:75:66:20:a8:c8:8a:f1:92:03:e6:
         aa:48:33:d2:ce:48:84:77:95:6e:a8:dd:8e:af:87:be:1d:7f:
         79:99:27:28:55:40:a1:7c:64:bf:3c:3c:89:0e:f8:58:8c:a5:
         c0:ae:b9:66:5b:64:8b:77:79:c2:0e:59:5e:35:77:1d:4b:20:
         bc:6c:80:cd:ce:6f:2a:c7:a0:72:3c:2c:7c:96:db:e4:e5:8d:
         d7:9a:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:04 2024 by rpki-client on console-fra.rpki-client.org