Route Origin Authorization

$ rpki-client -vvf rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa
File:                     326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (raw, json)
Hash identifier:          SoM0Rvwuxs/CkC43wFvZIUeH8oDRAXAe8HFu5iJq7ek=
Subject key identifier:   5A:DF:41:5F:EC:AA:26:1E:DA:54:55:63:30:57:9E:AF:47:01:53:EB
Certificate issuer:       /CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
Certificate serial:       147972B72200C18368DC4FD18BADFFDB3438F5BD
Authority key identifier: 48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9
Authority info access:    rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer
Subject info access:      rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa
Signing time:             Sat 23 Jul 2022 18:25:58 +0000
ROA not before:           Sat 23 Jul 2022 18:20:58 +0000
ROA not after:            Sat 22 Jul 2023 18:25:58 +0000
asID:                     50555
IP address blocks:        2a12:dd47:8609::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:79:72:b7:22:00:c1:83:68:dc:4f:d1:8b:ad:ff:db:34:38:f5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481A02B656EE0C3E72635BDEAD3114AB7461A2E9
        Validity
            Not Before: Jul 23 18:20:58 2022 GMT
            Not After : Jul 22 18:25:58 2023 GMT
        Subject: CN=5ADF415FECAA261EDA54556330579EAF470153EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:31:76:de:64:83:03:96:6e:4d:e9:b0:14:
                    f1:a4:46:2e:20:15:a5:bc:e2:02:a8:92:0d:62:1f:
                    ba:5c:90:c1:c1:d2:a7:a8:dd:b5:63:02:c6:36:b1:
                    36:4f:e8:98:04:8e:5a:e2:c2:4e:30:a9:10:c0:2c:
                    1d:3b:c6:ad:af:fd:85:f8:78:da:8e:82:53:42:9f:
                    45:fc:6a:71:cd:43:73:f8:e3:49:b7:d2:5e:fc:94:
                    70:c7:8a:d3:02:ad:e2:86:23:df:6a:12:f6:42:18:
                    ed:49:b8:4f:69:1c:46:7f:4b:22:41:f7:d6:50:f8:
                    19:a3:94:21:5e:db:34:fb:09:46:13:64:4a:48:e1:
                    f0:5d:ae:cd:ef:91:f8:72:5e:b3:4b:ba:89:96:f8:
                    58:33:e5:77:77:fd:4d:89:8d:e7:82:24:38:86:79:
                    2c:fa:e9:ce:60:e3:50:0f:49:f0:4b:99:41:97:a1:
                    07:dc:30:bc:d9:c7:6d:43:5f:01:ae:b7:db:b5:d6:
                    77:3c:37:b0:85:77:f1:f2:06:38:91:77:7c:84:17:
                    01:78:91:2a:8d:6a:49:e6:2d:dc:cf:f3:fb:60:f3:
                    6e:07:cc:3c:ac:aa:ee:28:f1:25:f8:c9:11:a5:01:
                    53:86:a2:cb:c2:2b:2c:50:2c:e1:33:4f:a1:fb:57:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DF:41:5F:EC:AA:26:1E:DA:54:55:63:30:57:9E:AF:47:01:53:EB
            X509v3 Authority Key Identifier:
                keyid:48:1A:02:B6:56:EE:0C:3E:72:63:5B:DE:AD:31:14:AB:74:61:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.august.tw/repo/localname/6/481A02B656EE0C3E72635BDEAD3114AB7461A2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-test-repo.net.kagl.me/repo/KeatonAGLair-RPKI-TEST/1/326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8609::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:f8:75:4d:e2:40:b4:0e:75:15:28:90:8c:09:83:35:fa:
         2e:b7:94:fb:ab:8a:78:7c:c8:6a:66:86:16:79:08:91:f3:ec:
         63:ba:59:5b:95:d2:3a:e8:d7:c0:4c:78:b6:03:c6:53:09:d6:
         8f:d1:6e:26:1a:2e:04:01:c7:50:8f:f6:de:d7:3d:6e:b7:9e:
         ed:d8:ca:ad:e3:e0:02:e5:d4:65:19:96:89:99:35:0a:6b:74:
         00:f9:a0:f5:03:82:ca:34:e2:c9:a2:6b:ca:ad:bc:11:51:7e:
         db:f2:e1:b4:d2:78:a7:0b:28:e6:48:d0:64:85:1e:ab:5c:dc:
         66:ba:d0:de:53:50:c0:02:df:00:06:aa:6d:c0:18:4c:e6:91:
         90:2e:a9:ec:4d:b9:a7:f2:45:72:5c:82:8f:f7:de:5c:5e:b6:
         bb:d7:dc:ad:59:dc:22:78:3f:09:12:f4:07:f2:0d:f3:b2:ef:
         1a:11:d7:9e:9b:16:5a:e4:0b:56:ef:b6:da:96:97:c6:3b:00:
         67:d0:f7:df:f3:02:d8:72:08:de:f9:7b:83:6e:c7:5e:75:2f:
         36:c1:6b:fe:b9:c8:78:a0:17:50:51:b7:f5:72:0e:6a:99:b0:
         f6:ee:2d:7c:bb:26:e7:57:9c:24:45:75:2d:46:27:b5:df:d6:
         1c:c6:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:47:04 2024 by rpki-client on console-fra.rpki-client.org