Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
File:                     323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa (raw, json)
Hash identifier:          6ONBkevyT1V/yt1U4xPL0xoTwGushOkBHQN9EfoN0TY=
Subject key identifier:   BF:2E:60:7E:49:1B:1A:D2:6C:76:A9:E2:33:F7:13:81:A4:85:82:CD
Certificate issuer:       /CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
Certificate serial:       2994DECD662E32CF1CB2950C9E2958E7F1F72C2A
Authority key identifier: AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75
Authority info access:    rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer
Subject info access:      rsync://rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa
Signing time:             Fri 07 Jul 2023 04:26:12 +0000
ROA not before:           Fri 07 Jul 2023 04:21:12 +0000
ROA not after:            Fri 05 Jul 2024 04:26:12 +0000
asID:                     51818
IP address blocks:        2001:7f8:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:94:de:cd:66:2e:32:cf:1c:b2:95:0c:9e:29:58:e7:f1:f7:2c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4A224A9565F67E4914E6F8C2B3C34303C9C875
        Validity
            Not Before: Jul  7 04:21:12 2023 GMT
            Not After : Jul  5 04:26:12 2024 GMT
        Subject: CN=BF2E607E491B1AD26C76A9E233F71381A48582CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:c1:90:fe:12:61:14:ce:e1:37:f1:42:45:
                    57:10:74:01:98:6e:30:bd:75:f4:9b:c1:c1:12:7f:
                    85:9b:a1:00:56:3d:0c:ab:45:14:b7:fe:bd:a9:74:
                    c6:b7:94:5f:b9:50:90:00:73:3d:5c:a5:7f:b5:98:
                    d7:fd:b6:86:cd:32:ff:64:71:55:03:de:d4:3c:21:
                    69:eb:99:ab:fe:4e:d9:60:73:ce:2c:07:58:76:1e:
                    79:8e:14:e6:2a:1e:bc:0e:17:5a:f6:4b:d0:b8:fd:
                    8e:95:7d:4a:58:4b:07:8a:cc:e4:22:69:25:d3:c4:
                    88:65:e3:0a:52:d1:51:32:85:20:0f:7a:1b:a2:9e:
                    8f:eb:3f:5a:d0:c6:e6:0e:9c:bf:9b:9e:b5:0a:fd:
                    0b:d7:03:91:16:f4:c0:98:ae:f0:b9:fd:c2:5e:81:
                    12:6e:1b:92:37:00:8f:04:48:1d:cf:38:6c:2f:52:
                    fe:a4:81:07:88:46:48:f1:09:23:92:64:f7:d7:d2:
                    8e:ac:44:7a:56:9a:1b:c9:ae:44:4a:01:12:33:97:
                    97:27:80:39:f1:eb:ec:0c:f8:4b:bf:42:61:02:2b:
                    d9:57:ec:79:c4:8c:3a:b0:4d:f6:a2:70:c9:41:fd:
                    a3:04:6b:e3:6d:b0:7d:35:93:18:6e:1d:57:fc:62:
                    60:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:60:7E:49:1B:1A:D2:6C:76:A9:E2:33:F7:13:81:A4:85:82:CD
            X509v3 Authority Key Identifier:
                keyid:AD:4A:22:4A:95:65:F6:7E:49:14:E6:F8:C2:B3:C3:43:03:C9:C8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/5/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/1/AD4A224A9565F67E4914E6F8C2B3C34303C9C875.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/5/323030313a3766383a323a3a2f34382d3438203d3e203531383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7f8:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:da:c2:6b:59:ae:79:44:d8:6d:8a:c3:fe:22:d7:8f:de:c7:
         59:7c:0b:1e:dc:26:a0:80:b6:e5:9e:d2:b1:e9:96:52:a1:14:
         e4:5d:77:96:69:96:59:59:c8:1c:ef:7f:d2:19:62:cb:e9:84:
         59:71:09:63:7d:4a:e8:be:86:d9:c2:35:4b:aa:31:e9:31:2e:
         26:c6:e2:97:50:55:db:bb:06:64:b6:b6:8a:1a:71:c1:b0:f8:
         29:b0:4b:fe:2e:8b:f9:41:cf:db:0a:e3:b3:12:72:03:b1:9f:
         8d:ee:2c:cf:fe:63:d4:68:dc:88:b5:95:d0:82:22:45:43:de:
         40:be:92:3c:61:70:e5:d9:db:3c:d1:43:ac:a9:8d:63:47:94:
         5a:ee:7c:9b:a6:ea:27:ce:cf:5e:09:40:ac:c8:19:f7:3c:97:
         29:b9:84:fc:9b:f2:8a:40:31:d0:01:51:47:36:38:be:22:3d:
         d5:63:d6:69:12:11:1b:79:dc:7e:e9:38:49:fd:8b:d6:05:6c:
         b7:44:99:0f:29:86:8c:ce:50:2b:c5:01:27:2f:26:42:97:36:
         7f:a7:23:82:25:83:cb:e5:59:ce:3f:26:d2:fa:16:12:16:52:
         1b:e3:d4:46:57:31:7f:0c:d1:1c:a6:69:78:2d:2d:45:4d:7c:
         a1:00:9b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 04:07:50 2023 by rpki-client on console-ams.rpki-client.org