Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e2031303132.roa
File:                     323030313a3530343a3133303a3a2f34382d3438203d3e2031303132.roa (raw, json)
Hash identifier:          IzYySPi+bieSc3nn75mPob+0q4cSKf5H2rLjr3xbONY=
Subject key identifier:   26:9B:F6:25:39:4C:51:40:2D:70:C2:75:FA:51:62:2D:2A:5A:FF:97
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       3341E14D282F35095B140CA1221BB0B6F894B449
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e2031303132.roa
Signing time:             Sat 05 Aug 2023 00:00:26 +0000
ROA not before:           Fri 04 Aug 2023 23:55:26 +0000
ROA not after:            Sat 03 Aug 2024 00:00:26 +0000
asID:                     1012
IP address blocks:        2001:504:130::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:41:e1:4d:28:2f:35:09:5b:14:0c:a1:22:1b:b0:b6:f8:94:b4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Aug  4 23:55:26 2023 GMT
            Not After : Aug  3 00:00:26 2024 GMT
        Subject: CN=269BF625394C51402D70C275FA51622D2A5AFF97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:93:ec:54:c9:96:fb:84:ee:04:fe:9d:90:
                    7c:5c:3b:7f:04:9c:a8:52:53:44:3a:ba:78:6b:e9:
                    9f:52:26:7b:7c:4b:45:23:57:cf:16:8d:fb:a1:5e:
                    70:ef:69:53:ed:f2:37:f7:ea:e4:27:d9:a0:f3:c7:
                    68:97:66:2e:35:66:fe:d2:61:19:34:00:32:88:0c:
                    88:ae:b7:ea:f8:88:bb:84:74:0d:ca:56:f9:ea:1a:
                    08:e4:0c:80:78:4d:03:38:ad:50:a8:67:3d:2b:53:
                    4c:71:d6:9c:5a:f1:25:e0:e7:59:10:b7:f4:84:e3:
                    4c:1d:4c:bd:c2:5c:64:4b:c7:73:80:c7:37:5c:ee:
                    76:29:eb:41:c8:f6:82:d0:32:dc:3c:6a:37:9e:0f:
                    d0:ae:28:83:08:8b:29:b3:d2:d5:af:25:82:d6:79:
                    32:89:a4:ea:64:26:f5:16:33:ac:36:8a:3e:7a:40:
                    58:8c:19:22:13:00:fc:2e:f7:16:e3:fb:f1:d8:a2:
                    00:ba:bd:df:50:8f:7e:0b:16:06:e7:b1:ff:1d:de:
                    ce:db:dc:9e:12:83:e9:56:a6:f2:b8:ab:9a:9d:ac:
                    96:d6:9a:60:a5:4d:66:0d:7d:c4:63:44:c1:d1:d5:
                    db:f6:b5:3e:5c:bf:9f:0c:eb:d1:ec:c8:69:b5:c1:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9B:F6:25:39:4C:51:40:2D:70:C2:75:FA:51:62:2D:2A:5A:FF:97
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323030313a3530343a3133303a3a2f34382d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:130::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:68:55:f7:80:ad:80:1c:65:2d:5d:a7:6e:fe:a6:f3:25:1b:
         69:ae:6f:62:b0:e9:92:11:23:60:5b:61:d5:c6:6c:b4:39:5b:
         07:da:03:37:4e:6f:b9:75:e1:94:7f:5b:82:b7:6e:03:9f:2d:
         f4:7a:12:ab:fa:6b:b1:7e:25:74:df:ee:a2:f2:09:04:a1:1a:
         a0:26:06:d0:64:d1:83:3e:13:bd:6b:e5:a1:dd:1d:6d:02:41:
         59:cf:fe:5b:88:9e:09:5b:fc:fc:70:b3:05:01:a2:94:67:33:
         6d:a8:e7:d9:7c:c6:8b:38:96:21:26:20:2e:30:3b:9f:9b:56:
         41:d4:0b:d6:1a:8c:7d:2c:7d:5a:73:aa:43:64:1d:85:56:59:
         78:63:bc:bd:d2:b9:ef:9a:e3:ec:ce:8f:05:a6:9c:65:5b:df:
         9f:66:62:b5:97:64:dd:f6:9e:ad:33:36:87:51:7d:a1:19:c8:
         eb:a7:a5:21:95:ce:78:68:f9:f6:7c:5d:aa:c0:88:2f:c1:7f:
         36:50:63:1b:3e:03:fa:ee:36:7b:15:3a:98:1a:f3:64:d7:94:
         a6:d4:8e:12:b6:8e:a8:bb:fb:ee:6d:29:f2:b4:75:d0:e8:22:
         51:24:43:04:ea:f7:f6:42:03:a8:a3:24:b6:2d:15:a2:ff:2c:
         31:cb:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:37 2025 by rpki-client