Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/323430373a636463303a3a2f33322d3438203d3e20393833.roa
File:                     323430373a636463303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          ncLn0plIADAnvWPpi4mBtm2bIkvPqoKESIyUTxcNDUM=
Subject key identifier:   BD:DE:26:85:22:BD:AB:EE:D8:84:48:62:85:E6:3F:C4:CC:68:5B:82
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       30B179599196B7EFCC85C63D0392AB62CF988B31
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a3a2f33322d3438203d3e20393833.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     983
IP address blocks:        2407:cdc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b1:79:59:91:96:b7:ef:cc:85:c6:3d:03:92:ab:62:cf:98:8b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=BDDE268522BDABEED884486285E63FC4CC685B82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:9d:c3:32:b9:00:28:cc:b5:1c:1b:3f:2c:
                    52:e3:8a:dd:ed:bb:a0:5f:02:21:48:06:9d:cd:51:
                    45:25:ac:a2:04:60:43:38:28:8e:68:e9:90:3c:e6:
                    00:db:9d:ec:af:96:f6:f1:78:67:2b:b4:84:3f:a7:
                    4b:7f:ec:61:72:98:82:8d:d8:69:d3:b4:8a:3e:0f:
                    61:6a:63:2f:16:d3:08:8d:c3:97:02:ee:c9:0a:8b:
                    55:86:5d:c2:fc:c0:a9:dd:a6:67:b3:e9:79:22:0f:
                    32:50:b7:18:70:5d:da:0f:a7:9c:c0:b0:f4:87:f5:
                    f8:82:5c:c8:00:e3:aa:f3:c3:e4:48:8d:f4:df:04:
                    a0:4c:f1:03:d5:5b:9e:b5:6b:05:8c:5d:77:56:34:
                    c3:ca:0a:cb:83:2a:5e:5d:48:71:f5:a4:a7:60:9b:
                    c3:20:f2:63:bc:fd:03:9d:e5:ad:4f:55:9d:66:cd:
                    ab:24:ca:8e:dd:28:49:5d:96:87:32:a7:39:67:1a:
                    f0:75:fa:65:d9:32:ae:fa:fa:56:9c:29:5b:22:a0:
                    02:20:90:ce:99:13:6c:87:94:cb:0a:6e:41:8b:ac:
                    d8:e9:0a:6c:c5:b3:b6:aa:16:fc:78:94:f2:78:cc:
                    0e:8b:19:ce:6a:34:f1:39:26:d5:70:32:fa:26:44:
                    91:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DE:26:85:22:BD:AB:EE:D8:84:48:62:85:E6:3F:C4:CC:68:5B:82
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:84:b9:f0:a2:d0:71:34:47:90:fb:0b:bd:a2:0d:e3:db:97:
         0d:db:ec:50:e0:01:1a:aa:3b:78:cb:3e:55:20:a7:db:79:97:
         10:ec:2a:79:45:cf:ef:92:eb:be:00:9b:81:a9:fe:de:4e:ed:
         61:2f:a1:93:1c:3e:94:8d:06:86:0a:da:3d:db:0b:b6:8c:c9:
         ee:f8:a6:49:5d:9f:46:12:e8:e4:6e:a9:97:e5:ed:7c:cc:cf:
         77:12:43:02:ac:29:00:5b:a9:7c:eb:b0:93:19:ae:b1:8c:92:
         5f:92:78:5a:73:cd:ac:57:1e:41:86:3b:a3:75:a4:9c:8d:74:
         e2:ef:00:43:46:20:78:2f:4d:43:39:75:02:f9:84:d7:e2:09:
         3b:f0:44:39:c2:c3:35:dd:30:d3:60:b5:0f:c4:07:77:30:c2:
         d2:37:e6:0d:00:1f:b5:c3:48:3f:f5:80:04:34:9c:cb:b7:e8:
         54:58:95:39:eb:f8:37:01:61:70:82:c5:b3:97:76:5a:44:63:
         d4:f3:6e:33:7c:bf:a6:f4:64:0b:3b:de:d9:f8:16:76:4a:82:
         19:4b:53:a3:3a:fc:c6:bb:41:b4:e0:7c:ab:77:3f:99:12:75:
         d2:81:6a:ae:79:fb:99:7d:6a:23:21:f7:4d:e4:fb:71:5e:3b:
         fc:15:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org