Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/14/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
File:                     326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa (raw, json)
Hash identifier:          WlO64OHFq2Dv5njundXhE3uy3nNfN0jNNyhLPKQDH4c=
Subject key identifier:   11:5D:7C:91:A4:04:20:63:72:25:4E:BC:05:53:1D:9B:EE:6A:D5:5B
Certificate issuer:       /CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
Certificate serial:       4ADFE3C63276A547C8DA927CB1BB0E3E38ABC97C
Authority key identifier: F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer
Subject info access:      rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa
Signing time:             Sat 08 Apr 2023 03:25:52 +0000
ROA not before:           Sat 08 Apr 2023 03:20:52 +0000
ROA not after:            Sat 06 Apr 2024 03:25:52 +0000
asID:                     61368
IP address blocks:        2a13:c007:8010::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:df:e3:c6:32:76:a5:47:c8:da:92:7c:b1:bb:0e:3e:38:ab:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55ccdfa5fc81b342c9888772db31e6c4fdb2622
        Validity
            Not Before: Apr  8 03:20:52 2023 GMT
            Not After : Apr  6 03:25:52 2024 GMT
        Subject: CN=115D7C91A404206372254EBC05531D9BEE6AD55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:53:d5:f8:8e:ae:63:59:6e:2d:dc:52:96:
                    f7:51:09:af:37:4b:cd:c4:6f:42:2f:f0:89:5e:07:
                    d6:f1:8f:46:ad:69:ac:f9:2f:d3:a6:b5:0e:ab:d4:
                    cd:43:6f:14:72:ef:a4:ed:e7:d8:16:44:44:20:c0:
                    d9:dc:33:33:38:1e:2a:24:e5:7c:18:d9:cc:da:fe:
                    43:4f:43:d8:78:fe:ab:d4:00:86:3b:75:cb:f0:d2:
                    b3:64:a1:25:41:f0:1d:24:e6:23:01:ee:df:91:5d:
                    f9:f6:39:62:08:e5:83:b5:33:10:0e:ca:46:cd:90:
                    71:0d:14:6d:17:8d:0c:c5:6f:6f:2c:a9:12:03:ae:
                    1c:a1:d5:90:f3:5a:ee:bb:27:66:d5:27:2b:fb:59:
                    6a:ab:90:85:28:bb:14:1a:08:13:79:13:56:b0:1c:
                    9f:0a:25:3d:a7:86:3e:41:df:a2:54:df:2e:09:cc:
                    d7:cf:9a:70:ef:8f:c3:dd:57:ef:42:ef:cd:68:df:
                    37:e1:ec:ad:4e:84:ed:10:5a:89:47:0c:ad:44:5b:
                    5a:cf:70:99:cc:df:8b:24:26:2a:05:a6:18:1d:e5:
                    87:fd:f9:b9:20:eb:20:5a:42:1d:cc:7e:71:e7:5a:
                    e3:84:41:05:b3:fc:96:65:8b:af:de:fc:20:9e:30:
                    db:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5D:7C:91:A4:04:20:63:72:25:4E:BC:05:53:1D:9B:EE:6A:D5:5B
            X509v3 Authority Key Identifier:
                keyid:F5:5C:CD:FA:5F:C8:1B:34:2C:98:88:77:2D:B3:1E:6C:4F:DB:26:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/14/F55CCDFA5FC81B342C9888772DB31E6C4FDB2622.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VzN-l_IGzQsmIh3LbMebE_bJiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/14/326131333a633030373a383031303a3a2f34382d3438203d3e203631333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8010::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:25:ad:22:91:1f:61:05:bf:9a:02:5a:c2:f2:64:80:38:d1:
         c9:04:23:cf:01:e6:be:24:46:2a:9d:4a:0f:44:91:c1:87:f5:
         57:b1:60:2c:cd:37:dd:dd:44:1f:f6:17:a1:5a:4f:b5:c8:b3:
         ac:43:19:e4:2e:74:48:89:6f:f3:c7:32:b7:aa:be:fb:1e:4c:
         f5:46:2f:d4:7b:b4:ec:9c:a4:2c:69:02:ae:42:4f:b2:87:31:
         ef:50:ec:51:cb:a7:0f:97:a4:4e:44:8d:bb:af:79:43:8f:51:
         80:cd:ae:e7:96:e8:53:b7:ab:86:18:50:32:b1:6e:50:6c:3f:
         56:0d:d0:9a:02:32:3e:54:1d:ee:3b:90:cf:a1:31:62:5e:21:
         dd:96:f0:9a:e1:46:84:48:38:c8:48:3b:a7:80:ef:69:90:52:
         e9:04:6f:2a:b5:e4:e5:10:05:33:9f:fd:1a:12:43:15:88:df:
         41:89:04:f9:c1:02:b8:52:d2:e8:6f:0e:3b:36:a2:c0:47:76:
         7a:14:bb:11:bc:64:70:eb:8a:a8:a3:08:3a:04:66:44:89:82:
         40:ec:7d:5c:df:60:24:1a:a1:b0:64:6d:c7:0f:0e:94:ec:a6:
         4b:f9:c4:e7:3a:da:fc:67:18:2e:a2:75:fc:c0:95:22:f0:b2:
         a6:55:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org