Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Matt/2/326131323a646434373a623030303a3a2f33362d3336203d3e203439353932.roa
File:                     326131323a646434373a623030303a3a2f33362d3336203d3e203439353932.roa (raw, json)
Hash identifier:          tAiZleAlyBU5LpLhPqIXTdiCMG7XyYPMeTAF3hBKSkM=
Subject key identifier:   09:E7:1B:03:E4:10:78:B0:9E:17:C0:39:C8:0D:43:F4:C0:4B:8C:03
Certificate issuer:       /CN=FDA07574EA362EFB2E46B3038EE05A6ACA0BF301
Certificate serial:       3102D046D0D4A9B77B4862AA96C16C3FD13D93EA
Authority key identifier: FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer
Subject info access:      rsync://rpki.co/repo/Matt/2/326131323a646434373a623030303a3a2f33362d3336203d3e203439353932.roa
Signing time:             Fri 28 Jun 2024 22:20:21 +0000
ROA not before:           Fri 28 Jun 2024 22:15:21 +0000
ROA not after:            Fri 27 Jun 2025 22:20:21 +0000
asID:                     49592
IP address blocks:        2a12:dd47:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:02:d0:46:d0:d4:a9:b7:7b:48:62:aa:96:c1:6c:3f:d1:3d:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDA07574EA362EFB2E46B3038EE05A6ACA0BF301
        Validity
            Not Before: Jun 28 22:15:21 2024 GMT
            Not After : Jun 27 22:20:21 2025 GMT
        Subject: CN=09E71B03E41078B09E17C039C80D43F4C04B8C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:81:3c:f2:47:28:29:3c:e5:2c:be:f2:8e:
                    f0:17:65:c1:98:d8:b2:67:6e:70:e0:4f:1f:51:a3:
                    6c:86:7c:9e:7e:e8:37:c7:3b:a5:1e:fb:1a:89:4b:
                    8d:bb:c4:0d:d5:7d:fa:b5:de:e6:5a:44:1b:cc:d2:
                    56:e2:8e:f0:05:c9:67:b1:2f:23:48:f7:2a:db:d3:
                    c9:a0:87:0d:12:dd:6b:59:1a:ac:85:69:67:4a:c4:
                    ad:08:3d:45:16:6c:df:99:97:f0:24:c8:c2:52:d2:
                    9e:e8:14:5d:dc:c0:06:71:90:f9:f0:89:1a:dc:d2:
                    75:06:53:cd:06:93:2d:b8:13:43:7d:45:e7:73:d5:
                    9c:6c:79:4b:4c:f1:fb:2e:3e:8a:73:6a:b6:33:80:
                    77:5f:72:78:b2:7d:67:e0:c8:93:1f:e9:e7:39:26:
                    77:3e:f8:13:2a:6f:ab:0b:29:79:cb:bf:e6:65:51:
                    7e:fe:c3:6a:66:be:4a:e4:ef:97:e3:a9:f4:6d:d6:
                    8c:03:3b:b9:a1:37:6e:e0:32:0f:57:99:97:cc:f5:
                    06:fb:ca:a5:28:42:0b:92:66:15:b1:3d:bb:83:0d:
                    0a:07:51:94:22:ad:24:42:01:2a:ac:ba:a9:fc:17:
                    03:0d:b6:d2:4f:6f:f6:a4:ff:ff:97:84:d0:5d:48:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:1B:03:E4:10:78:B0:9E:17:C0:39:C8:0D:43:F4:C0:4B:8C:03
            X509v3 Authority Key Identifier:
                keyid:FD:A0:75:74:EA:36:2E:FB:2E:46:B3:03:8E:E0:5A:6A:CA:0B:F3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Matt/2/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/FDA07574EA362EFB2E46B3038EE05A6ACA0BF301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Matt/2/326131323a646434373a623030303a3a2f33362d3336203d3e203439353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:5d:46:6f:98:de:5d:30:8d:0d:e5:c8:cb:5e:81:a1:0b:de:
         8d:36:ab:da:7e:54:0b:9e:de:0f:31:20:60:a3:ee:5e:46:c2:
         77:9e:15:7a:69:1e:01:b9:ff:cb:82:e4:65:c7:9b:eb:43:0a:
         22:22:31:da:d6:3f:59:18:da:f5:55:f9:35:d0:47:90:7f:0f:
         e0:99:39:ee:27:77:06:7d:4a:b2:c8:6e:c1:68:ca:77:1a:7a:
         99:df:d9:aa:b4:38:e7:cf:fb:57:5a:15:cd:8b:8b:d8:d3:88:
         9a:a0:1d:e9:80:da:0a:02:d3:05:08:81:8f:06:a6:9b:46:d4:
         16:6a:aa:3e:48:3e:e4:c0:7d:81:bf:71:94:0e:cf:6c:db:fd:
         b3:41:50:ca:64:6c:a8:2b:ae:e8:7e:b5:ff:ed:7a:cb:5a:7a:
         b3:f4:59:41:8e:a5:3f:02:cd:41:8f:bf:48:c0:69:09:95:b2:
         85:6f:cd:85:40:d2:af:88:26:ab:3b:af:94:f2:2d:54:7c:41:
         e3:20:79:94:e6:1d:e0:9f:e3:29:49:71:0e:71:31:c5:42:8e:
         1c:3a:21:26:af:63:31:6d:40:be:57:c1:cd:01:6a:34:2b:47:
         1c:0a:80:15:b2:54:ce:06:83:5f:62:90:14:10:9b:0b:0f:bb:
         2e:07:ca:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:06 2024 by rpki-client on console-fra.rpki-client.org