Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
File:                     323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (raw, json)
Hash identifier:          lINlWoMXUQLrok2MmXtrUtABWHhckyr69BiVa2Nkt4E=
Subject key identifier:   EB:0C:BC:E7:7C:00:99:E6:45:2B:6D:E0:DC:D6:73:19:69:18:09:60
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       2D7D60CEDF9BEDBDF1716591897401966014A175
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     148982
IP address blocks:        2407:cdc0:c010::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:60:ce:df:9b:ed:bd:f1:71:65:91:89:74:01:96:60:14:a1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=EB0CBCE77C0099E6452B6DE0DCD6731969180960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:99:ec:a7:3e:c1:b3:1c:7c:c1:c8:ea:ca:
                    da:e9:9c:03:f4:2a:4b:18:9a:8d:97:17:b9:7a:fc:
                    b0:ea:eb:dc:9b:2e:30:59:99:46:c2:0c:5d:53:02:
                    58:9f:96:63:b4:21:b2:ab:6b:df:3f:4d:d2:54:91:
                    3c:73:0d:3d:ac:a2:e5:0a:06:d8:d3:4d:72:b6:4f:
                    40:a6:6a:01:04:99:8d:30:c4:46:22:13:25:e5:2e:
                    90:0c:00:fb:9f:ef:a9:ad:d5:d1:52:20:3b:12:03:
                    0b:1f:f5:82:96:86:0b:f6:07:2d:5c:9e:a5:fa:7e:
                    41:00:ff:3b:ed:5b:a6:76:2e:1f:88:ab:fc:bb:e2:
                    db:3c:6f:15:bb:2c:a7:79:54:59:d9:1e:45:f1:65:
                    87:7e:3f:62:a3:21:11:9d:ea:1a:81:e8:dd:4b:f1:
                    de:b6:a5:f5:e3:c2:51:fd:94:4d:be:9c:8a:e4:15:
                    81:bd:39:dd:12:22:97:16:9c:d7:ea:0c:41:b9:77:
                    ac:14:13:98:a2:e7:05:88:95:40:e2:bc:cf:af:03:
                    e1:be:9f:6d:18:43:26:63:7d:41:25:6b:6f:98:42:
                    b9:32:17:d0:fb:ba:b2:ca:29:2f:22:e7:4a:d4:56:
                    88:b0:a2:e0:79:a8:41:37:06:7f:a6:9d:fa:65:e4:
                    11:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:BC:E7:7C:00:99:E6:45:2B:6D:E0:DC:D6:73:19:69:18:09:60
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:75:6d:18:16:db:31:95:d4:73:80:a8:9e:71:b9:38:7c:
         4d:6f:55:18:74:e9:ed:85:59:5f:87:00:b7:09:53:48:26:f9:
         0a:00:f1:40:a4:e9:30:f0:9d:98:85:09:87:80:b5:27:fb:68:
         c7:44:36:b1:b4:c2:5c:f8:57:fe:77:62:25:7f:42:d7:6f:44:
         87:80:8a:f6:14:bd:c8:b7:6f:ee:f4:99:bf:e3:36:62:23:41:
         69:5b:d9:ef:64:b6:21:93:fb:81:0c:ad:3c:1a:33:7c:a0:b4:
         fb:ed:3c:cf:db:41:ec:8a:d5:6e:dc:e8:20:88:b1:44:11:45:
         92:8d:3b:2b:cc:cd:12:02:31:28:62:c5:95:a5:97:55:d0:32:
         3d:47:de:60:00:6e:c4:06:73:63:6e:ff:39:52:c6:26:d2:0f:
         13:b7:e8:a8:45:b3:2a:bc:75:8b:c1:82:4f:e4:8f:75:7d:87:
         89:d8:fc:4a:23:f0:e6:65:48:c8:2e:74:d9:09:3e:f9:98:73:
         83:cd:92:93:c0:d6:b6:cf:14:de:42:c6:72:ff:53:8c:4a:94:
         08:38:d0:e2:67:cd:e0:91:db:81:02:77:6c:00:e0:2c:63:b2:
         66:01:2a:c0:99:94:ad:18:7d:88:25:4d:3a:1b:6a:b2:b7:62:
         29:b2:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org