Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
File:                     323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (raw, json)
Hash identifier:          lxs3qqU3iVGitPQAqnS1JkzxaTCQg30p3DE5KPRlfqw=
Subject key identifier:   FD:3F:C4:B1:B0:F4:68:1F:F3:EB:2F:67:95:4C:06:75:9C:3F:CB:E2
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       4394151591CEC867F5FBAE2E7A5131D591394B5D
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     139299
IP address blocks:        2407:cdc0:efff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:94:15:15:91:ce:c8:67:f5:fb:ae:2e:7a:51:31:d5:91:39:4b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=FD3FC4B1B0F4681FF3EB2F67954C06759C3FCBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d6:d8:05:20:ff:9f:b6:8f:da:43:1d:5d:b1:
                    e1:c6:ed:cd:f9:5a:17:40:bc:36:39:57:e3:e5:59:
                    dc:e5:a6:b6:77:f3:df:52:7e:ef:9d:d6:48:f2:a6:
                    f0:90:92:25:5b:0d:9a:e5:3b:28:26:7c:84:23:b3:
                    03:4f:3a:37:dd:c5:e1:61:91:2c:3d:96:8a:5d:1b:
                    ff:65:ac:78:6e:7e:b6:8e:7f:07:b0:97:77:af:c3:
                    53:59:9b:74:b7:cc:a4:fd:b9:c3:d3:62:b5:6c:c9:
                    83:7c:9e:97:e2:06:69:1a:44:e8:84:bf:4e:32:77:
                    76:0a:7d:67:98:06:fb:99:7c:8c:74:59:3e:ee:23:
                    5b:62:a0:07:d0:a5:6f:4a:d3:8c:71:2d:ef:95:4f:
                    08:a5:de:42:30:13:d6:14:ce:ee:86:49:45:4c:3f:
                    3f:8a:14:87:87:90:e3:b2:ec:59:a5:ce:ab:98:86:
                    cb:a3:e4:46:99:8f:ae:2a:c5:f2:d1:a3:15:f6:76:
                    f5:2f:52:de:a8:11:ab:83:1f:85:87:09:ec:a9:0f:
                    03:2c:1f:b3:d8:9a:46:59:78:fe:ed:a8:59:7d:35:
                    46:33:38:53:34:5f:47:34:59:2c:4a:48:47:44:63:
                    8e:dc:4d:5a:0c:34:ff:49:c4:b2:81:57:f5:fa:73:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:C4:B1:B0:F4:68:1F:F3:EB:2F:67:95:4C:06:75:9C:3F:CB:E2
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:cdc0:efff::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:8b:30:b2:09:18:8c:25:54:74:fe:35:95:c0:22:be:1f:32:
         fb:17:9a:73:16:82:bb:43:4c:75:56:4d:37:25:44:5c:50:4b:
         67:e9:51:73:fb:1a:40:46:76:5d:4a:a4:db:0a:19:db:09:96:
         5b:ac:fb:78:74:ec:20:29:ec:73:e1:e5:48:ce:57:47:17:ea:
         72:6f:72:5c:73:53:22:3e:b3:52:20:c1:fa:1e:22:f5:b9:75:
         ea:38:a5:bc:05:5f:07:8d:7b:3d:9e:86:49:0e:d2:a4:78:3a:
         ea:d7:39:47:3a:68:39:05:b7:c9:79:98:94:0f:c2:c3:1f:af:
         e9:e5:b2:78:fd:57:7e:02:40:86:42:71:f4:f7:5d:4c:5f:a3:
         d4:0c:97:25:c4:e4:16:54:89:85:8c:53:31:19:f6:3c:c0:d6:
         95:e0:97:bf:4e:b9:e4:d6:9c:df:2b:e7:db:8d:35:9f:d5:76:
         9d:73:a6:70:a9:4d:93:e3:b1:1e:e9:f9:56:0e:0f:e6:de:2a:
         da:ff:c0:70:70:79:ec:5a:79:fa:d6:62:17:67:61:1b:4d:0b:
         a0:da:20:13:04:b4:d3:5d:45:fd:9c:e0:4b:ea:8e:94:10:64:
         24:e3:df:3c:76:01:e8:04:88:4f:49:19:14:4d:dd:16:46:81:
         29:a9:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:57 2024 by rpki-client on console-ams.rpki-client.org