Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e20393833.roa
File:                     323430313a323132303a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          iZVhI09n7kdN5BtmPYzAoUmtni7olYKgAMKlkOlLfvo=
Subject key identifier:   AC:E8:A7:5E:8F:53:1A:4F:82:F6:7E:66:D2:A9:68:5A:43:E9:98:2A
Certificate issuer:       /CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
Certificate serial:       65566A80F19F7C5020AD522F609004C857F442CB
Authority key identifier: B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e20393833.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     983
IP address blocks:        2401:2120::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:56:6a:80:f1:9f:7c:50:20:ad:52:2f:60:90:04:c8:57:f4:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91130000000/serialNumber=B70B10266A28A9F2E9DF2F7EFD4399B69E488B34
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=ACE8A75E8F531A4F82F67E66D2A9685A43E9982A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:4f:44:d1:b1:0b:52:28:42:f4:ae:d7:c2:
                    3c:c5:aa:48:ec:3f:0d:be:64:1e:2a:82:0b:18:21:
                    6d:ca:26:77:32:be:44:c1:06:57:80:a4:43:e6:70:
                    e4:64:8b:2d:a3:e8:9b:04:07:96:19:b5:ab:09:d3:
                    3a:ea:55:d8:06:78:01:13:a3:12:7e:c0:ed:82:49:
                    38:9e:39:4e:6e:70:b4:f7:0f:87:92:f1:02:bb:5d:
                    31:79:60:da:6a:be:fd:85:49:85:cf:b5:1a:73:f1:
                    d5:e4:4b:b4:63:a2:ce:86:1a:24:64:2c:f6:2e:e5:
                    cb:44:51:4e:71:8b:15:f9:0e:2b:36:51:37:d8:ce:
                    6e:f8:73:a6:70:b5:ae:14:67:c3:ac:02:65:ac:42:
                    bd:46:f5:ad:e3:94:de:6c:6d:56:9d:f3:70:79:55:
                    6d:56:7b:32:a1:4d:85:c9:94:5d:dd:e3:98:0a:89:
                    e2:45:cc:d3:be:a6:10:52:eb:f1:de:f5:1d:b2:12:
                    02:88:a4:df:cd:6a:a1:bf:6b:a7:a8:20:e2:48:e1:
                    6b:1e:89:42:9f:f5:7e:7d:ce:c0:a8:c0:ce:fc:d3:
                    9c:e8:41:3d:60:9d:0a:f8:df:62:39:21:81:c3:81:
                    b2:5a:0c:9a:ba:08:a9:e7:6a:d7:e3:68:53:d1:aa:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:A7:5E:8F:53:1A:4F:82:F6:7E:66:D2:A9:68:5A:43:E9:98:2A
            X509v3 Authority Key Identifier:
                keyid:B7:0B:10:26:6A:28:A9:F2:E9:DF:2F:7E:FD:43:99:B6:9E:48:8B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/2/B70B10266A28A9F2E9DF2F7EFD4399B69E488B34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/twsQJmooqfLp3y9-_UOZtp5IizQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/2/323430313a323132303a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2120::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:a2:1e:d6:af:92:d4:a0:d3:54:3f:7b:ad:5e:89:ea:d3:b5:
         3f:cd:e0:b1:a0:6d:fc:25:e4:b5:db:ee:42:1d:52:5c:4c:a3:
         0a:10:a0:37:83:ce:17:f5:01:58:0b:0d:51:d8:8b:0d:d3:c2:
         2a:20:41:d5:f7:6b:05:90:ea:52:71:65:e9:61:81:0e:e8:6a:
         07:ba:c5:6f:bf:e3:e4:9e:d4:e7:d1:9e:7c:f0:66:77:5a:4a:
         93:7d:c4:e8:ec:0c:31:62:68:bc:a7:45:8e:74:9d:cf:6f:83:
         0e:38:ce:ae:e4:b7:32:7a:55:a1:e0:43:4d:3f:a6:9b:0a:02:
         a6:93:4c:a2:f7:d1:62:5a:9b:e7:a4:6b:b9:c8:1f:c6:5e:09:
         87:39:92:0d:39:d3:eb:8e:cc:ec:36:11:92:ad:8a:5f:02:9e:
         a4:22:55:63:3c:92:9f:20:b0:a4:cb:22:38:2f:51:f9:e1:dc:
         cf:9e:f2:56:07:f7:bd:47:ca:c2:72:b2:ee:c5:b9:61:d1:64:
         c8:57:76:e4:2d:50:8c:e5:b1:15:4a:5f:ae:b5:b7:a1:ed:11:
         0c:cd:a5:24:fc:b9:dd:2f:fc:2b:57:e5:8c:e9:dd:ca:fe:72:
         22:c7:ad:e5:ba:95:ae:af:9e:0b:af:6d:cc:f5:b4:1c:f0:6d:
         70:3c:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 15:54:35 2024 by rpki-client on console-fra.rpki-client.org