Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/10/323630323a3233343a313a3a2f34382d3438203d3e2037373139.roa
File:                     323630323a3233343a313a3a2f34382d3438203d3e2037373139.roa (raw, json)
Hash identifier:          UK2YdJz5NdYxzsVISTaGgGibVrkjPKVc+umV8v3u7og=
Subject key identifier:   E1:12:27:53:A9:AD:7F:71:70:79:5F:34:B3:88:1D:0E:72:E2:92:84
Certificate issuer:       /CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
Certificate serial:       104378785E8E36BE77F5BCDA1316DE862391A397
Authority key identifier: 9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A
Authority info access:    rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer
Subject info access:      rsync://rpki.co/repo/AS945/10/323630323a3233343a313a3a2f34382d3438203d3e2037373139.roa
Signing time:             Thu 11 Jan 2024 21:14:17 +0000
ROA not before:           Thu 11 Jan 2024 21:09:17 +0000
ROA not after:            Thu 09 Jan 2025 21:14:17 +0000
asID:                     7719
IP address blocks:        2602:234:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:43:78:78:5e:8e:36:be:77:f5:bc:da:13:16:de:86:23:91:a3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A56B600C4466E17D46B3DB80306658A55EB4E3A
        Validity
            Not Before: Jan 11 21:09:17 2024 GMT
            Not After : Jan  9 21:14:17 2025 GMT
        Subject: CN=E1122753A9AD7F7170795F34B3881D0E72E29284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:77:21:f8:0b:4b:8e:d2:13:30:8c:aa:43:
                    cc:23:18:67:76:93:1f:58:0b:00:a3:70:74:53:c5:
                    d3:1a:00:81:f0:fe:7f:1c:d5:8f:ab:fc:f5:c6:2c:
                    b8:53:05:e0:15:36:e7:db:b4:4b:ae:35:ee:25:49:
                    65:dc:2d:53:1a:87:40:41:84:ce:5f:fc:f8:b4:4d:
                    13:f6:41:60:9b:47:48:4d:26:02:71:97:f6:ce:7e:
                    db:45:d5:ca:95:a6:bf:ee:d8:b5:9f:44:9b:10:a5:
                    df:c4:91:4a:81:e7:61:f1:80:b8:76:33:a2:6d:3b:
                    33:24:56:aa:ae:3e:25:25:07:07:8a:02:23:37:c7:
                    3c:13:c4:00:e7:4c:5a:ba:8d:30:2c:96:b0:fa:20:
                    fc:18:49:c4:05:d1:1a:c3:c6:52:ee:80:c5:4d:15:
                    1a:41:8d:31:12:97:62:05:61:39:53:7f:45:ca:6b:
                    c7:2b:40:6c:f2:ae:bd:8c:49:af:98:7f:7e:3b:fc:
                    db:5e:84:29:47:e0:65:51:9b:83:b8:a5:db:4b:fe:
                    78:b1:d1:0b:76:0e:87:b8:53:66:98:dc:85:ff:20:
                    ff:a1:40:fb:f3:e1:8b:a2:90:34:b5:a2:17:96:98:
                    49:bf:16:45:43:b6:2e:48:0f:1d:60:20:8e:1b:92:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:27:53:A9:AD:7F:71:70:79:5F:34:B3:88:1D:0E:72:E2:92:84
            X509v3 Authority Key Identifier:
                keyid:9A:56:B6:00:C4:46:6E:17:D4:6B:3D:B8:03:06:65:8A:55:EB:4E:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/10/9A56B600C4466E17D46B3DB80306658A55EB4E3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/6/9A56B600C4466E17D46B3DB80306658A55EB4E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/10/323630323a3233343a313a3a2f34382d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:69:0c:fa:9f:84:97:a3:98:d4:18:8d:fc:7e:67:70:53:1c:
         02:96:ae:cd:6a:41:e3:01:1e:ea:9a:71:55:5f:58:c3:d1:0b:
         d7:34:e3:4b:56:29:b4:1c:b9:cb:0d:f1:e3:b8:28:bd:18:61:
         1d:02:07:2e:47:b5:3c:6e:f3:e4:6b:c8:dc:b1:d3:44:e8:e3:
         13:65:24:7c:aa:b3:5e:8a:74:08:57:e0:32:2f:93:1c:c6:8d:
         20:de:07:4c:be:88:21:1b:7c:3c:9d:54:75:ed:b9:3d:9a:fa:
         ba:34:ac:76:af:27:b8:20:a3:0a:85:86:b0:d6:4b:7a:57:01:
         ae:97:79:17:c1:12:29:e5:d1:67:69:89:15:e0:c1:53:bd:17:
         3d:23:c0:01:88:cb:30:01:51:75:d9:06:ac:b3:04:7b:3a:cb:
         67:ec:4e:f5:8e:50:b8:c1:9d:1d:66:57:c8:d7:03:c8:87:b6:
         c6:5c:11:36:d5:3a:0d:d5:e0:3d:99:cb:17:da:ac:07:bf:8d:
         60:08:12:ad:40:85:54:ab:a0:12:8d:07:b2:6e:8b:37:2d:16:
         06:0b:26:f5:0e:51:02:05:c0:ff:c3:43:6a:f8:0e:52:58:74:
         48:20:fb:5e:82:83:5e:3d:68:db:b3:88:6d:f9:5a:50:f3:0f:
         85:62:bc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 11:50:22 2024 by rpki-client on console-fra.rpki-client.org