Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
File:                     323430313a323132303a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          t118UsUia154a2junCibxS+449FENRu7zv55NmFZ6T8=
Subject key identifier:   32:50:02:F2:60:DB:65:F7:4F:DC:C1:2A:D1:DC:C8:10:08:2E:B1:A6
Certificate issuer:       /CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
Certificate serial:       62FD7E18D3965822B03FC0E573753C9BE1F090EB
Authority key identifier: B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e203338313336.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     38136
IP address blocks:        2401:2120::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fd:7e:18:d3:96:58:22:b0:3f:c0:e5:73:75:3c:9b:e1:f0:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=325002F260DB65F74FDCC12AD1DCC810082EB1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:4c:74:c5:c1:3b:41:1d:79:a1:6c:1b:93:
                    42:2a:8f:f8:3c:05:5d:dc:8a:be:fd:78:9a:79:94:
                    c4:02:bd:6c:2c:e5:72:c9:68:ac:e3:3a:78:da:49:
                    1d:e7:67:61:a8:d6:27:d6:05:6b:d7:3f:01:70:b6:
                    8a:46:71:8b:4d:65:2f:78:d9:ce:4d:a1:08:05:02:
                    a7:59:17:8c:18:59:a9:a7:b5:7f:15:76:8a:da:b6:
                    fe:35:20:12:2b:d0:a5:9b:a6:ac:1d:41:1f:48:80:
                    8a:b4:db:74:35:8a:7a:aa:1d:37:cc:08:6a:5e:dc:
                    b7:28:23:52:08:27:76:89:99:ef:a3:af:0a:5f:94:
                    d9:ba:0b:c9:63:48:49:b1:1e:89:51:34:5e:4e:ab:
                    00:e2:97:9d:d3:4f:1a:23:30:70:30:f0:37:94:35:
                    60:b1:d5:30:94:a1:43:79:73:8b:a5:e7:8b:71:d8:
                    08:b5:a2:12:b8:69:11:8e:34:f4:f2:8f:ad:1c:1f:
                    26:b0:e5:91:e5:55:87:4a:e9:42:c2:bb:64:3d:d6:
                    6e:f4:88:b7:38:f2:13:4e:26:ca:18:09:6b:53:d1:
                    e5:0f:67:2b:de:a2:21:3c:2c:75:ca:14:91:ae:95:
                    8e:7f:2b:07:5a:34:dd:85:91:8f:b4:fe:5a:c3:26:
                    ee:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:50:02:F2:60:DB:65:F7:4F:DC:C1:2A:D1:DC:C8:10:08:2E:B1:A6
            X509v3 Authority Key Identifier:
                keyid:B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/2/B70B10266A28A9F2E9DF2F7EFD4399B69E488B34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:1e:f7:56:3f:c0:d1:eb:d5:79:a7:7c:cd:c6:90:6e:b9:bc:
         af:b3:1d:cc:03:0a:fd:51:b4:27:22:b0:ba:92:3c:23:bc:84:
         f1:f5:82:82:6f:5a:01:92:55:6a:3a:1f:1d:43:6e:aa:02:1d:
         a5:5e:1a:ce:19:e6:03:f9:f6:e2:53:7a:9c:c9:11:2e:64:b6:
         94:a1:2e:8c:01:01:ef:2a:ff:64:31:9d:25:41:58:04:57:4f:
         f3:ed:83:6d:27:c9:01:4f:8d:da:bb:b6:1b:59:ea:52:23:91:
         ce:68:1d:de:14:0f:87:4a:a1:31:60:e1:db:ab:9b:45:83:df:
         32:d2:ee:08:cf:ef:dc:bb:02:27:c4:ac:fc:14:ff:e4:58:a5:
         cc:44:fb:ce:7b:b4:e9:4f:b1:d2:e2:4a:ad:fc:69:06:21:e6:
         04:59:44:c9:90:01:46:2c:02:dc:47:5f:72:e6:37:4f:c0:5d:
         fe:53:e8:83:85:d0:dc:55:53:b5:4e:3d:ee:cb:6c:79:b3:ec:
         04:23:c3:1c:31:f9:37:a1:c2:17:32:47:9c:44:e2:b1:6f:a4:
         87:64:9a:b6:3f:86:40:28:85:fa:3c:10:e2:49:fb:6f:86:bc:
         cd:10:68:8d:45:27:8f:4e:66:84:92:df:13:08:36:cc:8e:99:
         51:65:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 15:54:35 2024 by rpki-client on console-fra.rpki-client.org