Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3130303a3a2f34342d3434203d3e20393435.roa
File:                     323630323a666332333a3130303a3a2f34342d3434203d3e20393435.roa (raw, json)
Hash identifier:          tzicBIF1cMjv7MuWIDNubxf2wI5V6XvifuztioSTCM4=
Subject key identifier:   2A:2C:59:08:69:87:82:70:4D:34:01:71:F1:1B:F2:62:99:AE:58:A7
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       3C34B96834A06843DD259E6EDAA55F893AC4F274
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3130303a3a2f34342d3434203d3e20393435.roa
Signing time:             Wed 24 May 2023 06:23:57 +0000
ROA not before:           Wed 24 May 2023 06:18:57 +0000
ROA not after:            Wed 22 May 2024 06:23:57 +0000
asID:                     945
IP address blocks:        2602:fc23:100::/44 maxlen: 44

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:34:b9:68:34:a0:68:43:dd:25:9e:6e:da:a5:5f:89:3a:c4:f2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: May 24 06:18:57 2023 GMT
            Not After : May 22 06:23:57 2024 GMT
        Subject: CN=2A2C5908698782704D340171F11BF26299AE58A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7c:52:0b:24:d1:cd:9e:90:c2:bb:17:0c:25:
                    25:d7:b9:79:55:5c:5c:51:f2:0f:f0:f5:f5:9c:ce:
                    8a:ea:9e:24:3b:80:e8:c3:b2:3a:47:da:30:f5:18:
                    3d:57:81:b5:46:e1:8c:fc:40:f7:23:33:ea:87:1a:
                    e2:e6:cf:9f:db:97:51:71:32:25:57:6d:a8:2b:9e:
                    9b:7f:31:b4:10:50:e9:0d:89:b8:8b:50:00:e3:00:
                    8c:05:14:38:0d:44:8a:ae:51:72:5c:e0:ca:57:17:
                    58:12:4d:52:ea:a3:3d:f7:2e:8b:3c:52:17:a7:0a:
                    05:77:92:0f:d1:25:5d:d7:ca:79:b5:db:cf:77:41:
                    5a:4e:b4:1e:f4:bf:2e:29:3c:a6:91:ed:71:c3:88:
                    eb:2f:ad:78:17:3e:9c:03:4b:0e:e4:b2:cc:9b:a5:
                    b3:05:26:2b:a9:6c:59:29:a3:33:53:20:d9:a9:20:
                    1e:e8:44:fa:fa:38:16:12:b2:8f:fb:a1:0e:83:d8:
                    a3:cf:fa:7c:56:b4:3e:98:bc:01:f8:32:cb:6d:50:
                    4a:2a:24:4d:cd:7b:d4:ab:84:00:77:0b:8b:6c:d2:
                    1d:40:7d:18:e5:b0:0f:6f:1d:10:46:77:ed:38:af:
                    cd:ce:f1:26:0a:51:47:c7:22:fc:fa:fe:57:8a:a7:
                    a4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2C:59:08:69:87:82:70:4D:34:01:71:F1:1B:F2:62:99:AE:58:A7
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3130303a3a2f34342d3434203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:49:20:e6:e2:f3:e5:a6:a9:e2:07:e8:4d:dd:cc:9a:58:b3:
         46:ab:90:cf:87:1e:fd:14:e6:1e:d5:79:f3:55:17:fc:ac:36:
         8b:91:88:5d:46:24:bf:4c:bf:26:54:a3:a3:98:68:2f:f1:bb:
         10:45:71:e8:6a:fc:6c:50:84:3d:3a:43:b1:81:ee:e9:2b:27:
         88:8a:a0:cb:80:20:50:52:e3:6c:c3:d9:82:59:a5:e7:cf:07:
         89:c5:2a:22:a7:68:8e:33:aa:e9:7e:0f:ef:c7:d4:55:c5:a0:
         a5:b4:c6:a1:43:2d:01:1b:0e:34:52:5a:a0:30:16:09:54:67:
         23:06:5e:99:d8:e3:bb:d8:7d:2d:27:06:69:c5:48:93:d2:a2:
         c9:dc:cc:c6:8e:52:d2:d2:96:74:15:70:1f:7f:3d:ff:9d:2f:
         e0:85:6d:a3:d3:91:76:b4:34:e2:31:94:ac:fb:cc:89:77:98:
         5a:67:f8:65:81:31:6f:46:54:ce:3f:fe:27:e9:66:fb:f4:f8:
         77:8f:03:f4:02:87:d9:ff:6d:d4:c9:d0:be:47:85:bd:8f:6c:
         28:8c:02:d0:0d:d5:da:37:24:d1:cf:ca:a5:c4:3e:b1:65:98:
         32:6e:23:af:5f:0d:51:82:78:fe:68:71:bc:86:18:c1:41:c1:
         8e:0b:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 14 02:36:39 2023 by rpki-client on console-fra.rpki-client.org