Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          nvBFtxvRfTApiVdY49RxPqOPhBNpsCTh5C1dQdJ7BJY=
Subject key identifier:   8A:EB:04:9F:96:60:2D:2C:B3:DA:8D:16:2A:CC:74:6A:E5:1C:13:19
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       0A51F40A8C58AF3DEFAB07E0CC8C0BCEC790A0CC
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 28 Feb 2025 00:58:42 +0000
ROA not before:           Fri 28 Feb 2025 00:53:42 +0000
ROA not after:            Fri 27 Feb 2026 00:58:42 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c32::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:51:f4:0a:8c:58:af:3d:ef:ab:07:e0:cc:8c:0b:ce:c7:90:a0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Feb 28 00:53:42 2025 GMT
            Not After : Feb 27 00:58:42 2026 GMT
        Subject: CN=8AEB049F96602D2CB3DA8D162ACC746AE51C1319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:04:b6:2c:3f:f7:b7:49:6a:92:a8:71:91:
                    ac:7f:ad:34:a0:24:f1:b0:04:eb:c5:a0:3e:c3:6c:
                    19:1d:c1:d3:09:b5:54:9d:b3:ea:b7:c5:09:ff:f1:
                    19:c7:a2:fd:84:e5:3f:f5:c3:b2:ef:9e:8d:eb:18:
                    6f:98:bd:fb:e8:2b:f8:4e:07:0b:6d:1f:d3:8b:85:
                    17:42:fa:a6:fe:85:95:f0:bb:ab:c4:2d:96:28:b0:
                    40:2d:d1:f7:d0:f5:c1:66:73:99:1e:75:cd:ea:c9:
                    d6:d4:76:fc:3c:3f:13:8f:06:e6:f2:77:67:fc:48:
                    25:d2:62:b1:34:96:c3:e8:be:ba:e3:fd:cb:62:a5:
                    c9:fa:cc:45:e3:fc:e9:b9:4d:72:19:4c:e5:db:19:
                    37:e8:c2:67:91:c6:5f:9e:eb:82:53:09:ba:53:0b:
                    ec:1e:26:0e:d1:30:82:42:f5:4b:76:5f:07:3f:45:
                    7b:f0:99:78:fb:8e:ec:63:65:e2:13:e1:f0:65:7c:
                    82:ea:c4:3c:a3:90:6e:cf:75:5a:ec:eb:c8:a7:be:
                    45:42:3c:39:b9:a9:79:8f:90:73:7e:aa:be:2d:99:
                    bd:91:cd:ca:4e:34:79:ca:9b:e0:ae:c4:af:ca:57:
                    0c:9f:15:51:c6:06:e3:f6:d7:bf:9d:48:fb:c3:8e:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:04:9F:96:60:2D:2C:B3:DA:8D:16:2A:CC:74:6A:E5:1C:13:19
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386333323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c32::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:d2:ce:6d:43:a7:7d:97:28:c9:34:0f:6f:6f:35:96:62:b8:
         78:38:5a:7b:33:c6:2c:54:cf:dd:cf:26:d6:fa:0c:b3:4e:87:
         7d:83:cd:0d:fb:c7:08:34:ae:ec:c9:29:a4:82:0d:b6:e6:e6:
         ff:a0:9c:ae:16:7c:fb:07:77:ff:09:4d:a5:03:d2:11:6b:24:
         41:e0:2e:a9:01:e1:d2:b7:cb:ab:f4:6c:b1:34:bd:63:43:1b:
         2e:a0:51:f2:b9:41:46:6c:c5:ec:ae:dd:77:a4:cc:9d:de:80:
         c9:8d:81:29:0f:22:f0:2e:fb:27:bd:6f:46:66:12:62:48:7c:
         23:40:11:fd:dc:5b:7b:db:ac:d7:41:c4:f4:84:c3:54:b1:04:
         21:56:cc:6c:43:b0:d7:c4:62:b9:9d:71:31:34:b2:d2:1b:52:
         18:11:93:df:d1:ac:83:99:1b:86:af:66:dd:8d:5b:ad:de:7c:
         18:e5:8f:92:4d:7e:8b:22:e6:90:f9:0c:dc:c2:34:49:3b:b1:
         c6:83:6c:49:f9:3b:cb:f8:1e:22:70:4a:27:d4:c8:27:25:ee:
         1a:e6:0a:cc:3b:19:cf:b5:0d:71:3e:22:f5:e2:de:82:e1:4d:
         12:e7:8f:2a:fb:0a:92:28:a3:5b:86:3b:17:8a:15:c5:49:41:
         c3:2c:2d:73
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUClH0CoxYrz3vqwfgzIwLzseQoMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNTAyMjgwMDUzNDJaFw0yNjAyMjcwMDU4NDJaMDMxMTAvBgNV
BAMTKDhBRUIwNDlGOTY2MDJEMkNCM0RBOEQxNjJBQ0M3NDZBRTUxQzEzMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihwS2LD/3t0lqkqhxkax/rTSg
JPGwBOvFoD7DbBkdwdMJtVSds+q3xQn/8RnHov2E5T/1w7Lvno3rGG+YvfvoK/hO
BwttH9OLhRdC+qb+hZXwu6vELZYosEAt0ffQ9cFmc5kedc3qydbUdvw8PxOPBuby
d2f8SCXSYrE0lsPovrrj/ctipcn6zEXj/Om5TXIZTOXbGTfowmeRxl+e64JTCbpT
C+weJg7RMIJC9Ut2Xwc/RXvwmXj7juxjZeIT4fBlfILqxDyjkG7PdVrs68invkVC
PDm5qXmPkHN+qr4tmb2RzcpONHnKm+CuxK/KVwyfFVHGBuP217+dSPvDjq8RAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUiusEn5ZgLSyz2o0WKsx0auUcExkwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODYzMzMzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzAz
OTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqB1TBjDIwDQYJKoZIhvcNAQELBQADggEBAGbSzm1D
p32XKMk0D29vNZZiuHg4WnszxixUz93PJtb6DLNOh32DzQ37xwg0ruzJKaSCDbbm
5v+gnK4WfPsHd/8JTaUD0hFrJEHgLqkB4dK3y6v0bLE0vWNDGy6gUfK5QUZsxeyu
3XekzJ3egMmNgSkPIvAu+ye9b0ZmEmJIfCNAEf3cW3vbrNdBxPSEw1SxBCFWzGxD
sNfEYrmdcTE0stIbUhgRk9/RrIOZG4avZt2NW63efBjlj5JNfosi5pD5DNzCNEk7
scaDbEn5O8v4HiJwSifUyCcl7hrmCsw7Gc+1DXE+IvXi3oLhTRLnjyr7CpIoo1uG
OxeKFcVJQcMsLXM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:54 2025 by rpki-client