Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa
File:                     326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa (raw, json)
Hash identifier:          EoYkG3zbMVtUuf4TvtZkX6a34LhXc8hRBZp30q9maLk=
Subject key identifier:   C5:14:A2:E5:2C:94:E8:34:BC:33:96:B6:0A:A8:23:AB:74:8A:A8:45
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       72ED4F71F87C5A5A7B73085BA461ED3F8A40A688
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa
Signing time:             Tue 06 Aug 2024 06:21:39 +0000
ROA not before:           Tue 06 Aug 2024 06:16:39 +0000
ROA not after:            Tue 05 Aug 2025 06:21:39 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ed:4f:71:f8:7c:5a:5a:7b:73:08:5b:a4:61:ed:3f:8a:40:a6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Aug  6 06:16:39 2024 GMT
            Not After : Aug  5 06:21:39 2025 GMT
        Subject: CN=C514A2E52C94E834BC3396B60AA823AB748AA845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:ef:1b:33:94:74:b8:57:fe:fb:c7:36:17:
                    c1:18:d3:9b:cb:77:03:f7:d7:96:b2:c6:66:de:a9:
                    65:1a:73:4e:78:78:9e:c6:2d:46:5d:13:a4:7d:a6:
                    af:b7:ce:f0:89:fb:fa:08:b6:9f:c5:68:e4:d4:1a:
                    ab:3a:69:51:65:a8:03:94:96:79:40:95:ce:07:04:
                    4f:3f:49:8c:af:98:d7:35:b9:bf:ae:f6:e7:6f:17:
                    0c:31:87:c8:70:16:ac:02:dc:33:98:7d:3e:35:9e:
                    f0:2c:05:e5:b0:24:99:b3:62:95:6e:32:ad:2e:fe:
                    f9:30:39:d2:89:06:82:e4:38:e9:af:d2:54:27:13:
                    0f:5f:fe:7c:35:97:39:7d:b4:dc:4a:54:da:d4:4d:
                    ae:83:ec:94:eb:5a:01:99:ee:c6:da:66:b8:42:f4:
                    16:b0:4e:d7:c3:c5:e1:16:eb:f5:38:ca:87:9d:52:
                    41:9c:88:7b:d2:dc:49:79:78:1e:e3:9f:59:8b:55:
                    e9:1b:d0:71:d0:63:f9:c9:21:ff:35:b9:08:29:20:
                    1e:38:8f:01:9a:26:53:52:a6:26:c9:c9:87:0e:fe:
                    f0:10:30:5b:b2:c9:4b:d8:81:55:46:49:80:28:eb:
                    6d:1b:f2:93:3c:44:0f:83:7b:d9:16:f3:cc:ab:ec:
                    fc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:14:A2:E5:2C:94:E8:34:BC:33:96:B6:0A:A8:23:AB:74:8A:A8:45
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34302d3430203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:3f:29:7e:28:96:02:ef:a2:e3:e5:69:34:05:72:8f:0e:ea:
         de:23:12:d9:54:10:d1:8a:0d:32:72:79:21:ce:ae:54:cf:82:
         8f:51:8b:aa:ca:05:75:83:37:9f:2a:e4:03:73:11:5a:53:70:
         90:c3:3d:73:4a:07:75:de:ca:72:57:3e:2c:10:cb:de:48:25:
         55:7b:ad:11:16:21:2d:d3:ff:cd:bf:a3:51:8d:54:48:a6:3e:
         71:d2:4d:3d:0b:98:a6:ce:00:99:b5:81:c3:e3:d4:da:ca:a0:
         04:3f:11:a3:54:19:84:ad:a1:4d:8e:29:90:8a:21:f8:79:63:
         5c:5c:38:02:21:58:3e:f1:7c:e5:dd:be:b5:47:52:45:b0:e6:
         df:55:84:9b:0c:fc:eb:ba:d5:dd:ae:b9:dd:72:82:a2:02:83:
         05:b0:2a:02:9d:a0:ec:01:46:a1:eb:b6:0d:f4:14:90:76:87:
         fa:34:e3:40:c0:f9:04:1c:f1:70:90:6e:66:5a:c3:09:1e:0d:
         cc:5b:14:f6:e4:5f:73:57:e0:54:2c:48:67:11:e6:15:b6:6a:
         f7:97:21:1d:71:0e:55:a9:c8:46:d9:5f:54:28:66:a5:15:e5:
         3d:cd:e9:b0:1d:c7:96:78:27:ef:bc:9c:d5:8f:50:fb:c9:f7:
         31:ff:e3:72
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIUcu1Pcfh8Wlp7cwhbpGHtP4pApogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFFOEJGMDRGODcyMjA0RDdCQUY5NjI2RjE2Q0RCMDM5
RTNBMjQ0MzAeFw0yNDA4MDYwNjE2MzlaFw0yNTA4MDUwNjIxMzlaMDMxMTAvBgNV
BAMTKEM1MTRBMkU1MkM5NEU4MzRCQzMzOTZCNjBBQTgyM0FCNzQ4QUE4NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNO8bM5R0uFf++8c2F8EY05vL
dwP315ayxmbeqWUac054eJ7GLUZdE6R9pq+3zvCJ+/oItp/FaOTUGqs6aVFlqAOU
lnlAlc4HBE8/SYyvmNc1ub+u9udvFwwxh8hwFqwC3DOYfT41nvAsBeWwJJmzYpVu
Mq0u/vkwOdKJBoLkOOmv0lQnEw9f/nw1lzl9tNxKVNrUTa6D7JTrWgGZ7sbaZrhC
9BawTtfDxeEW6/U4yoedUkGciHvS3El5eB7jn1mLVekb0HHQY/nJIf81uQgpIB44
jwGaJlNSpibJyYcO/vAQMFuyyUvYgVVGSYAo620b8pM8RA+De9kW88yr7PxFAgMB
AAGjggIAMIIB/DAdBgNVHQ4EFgQUxRSi5SyU6DS8M5a2Cqgjq3SKqEUwHwYDVR0j
BBgwFoAUUei/BPhyIE17r5Ym8WzbA546JEMwDgYDVR0PAQH/BAQDAgeAMFkGA1Ud
HwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5jby9yZXBvL1BvbmcvMS81MUU4QkYw
NEY4NzIyMDREN0JBRjk2MjZGMTZDREIwMzlFM0EyNDQzLmNybDCBkwYIKwYBBQUH
AQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0
L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS81
MUU4QkYwNEY4NzIyMDREN0JBRjk2MjZGMTZDREIwMzlFM0EyNDQzLmNlcjB8Bggr
BgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnBraS5jby9yZXBvL1Bv
bmcvMS8zMjYxMzEzMjNhNjQ2NDM0MzczYTM1MzIzMDMwM2EzYTJmMzQzMDJkMzQz
MDIwM2QzZTIwMzIzMDMwMzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR1IwDQYJKoZIhvcN
AQELBQADggEBAI0/KX4olgLvouPlaTQFco8O6t4jEtlUENGKDTJyeSHOrlTPgo9R
i6rKBXWDN58q5ANzEVpTcJDDPXNKB3XeynJXPiwQy95IJVV7rREWIS3T/82/o1GN
VEimPnHSTT0LmKbOAJm1gcPj1NrKoAQ/EaNUGYStoU2OKZCKIfh5Y1xcOAIhWD7x
fOXdvrVHUkWw5t9VhJsM/Ou61d2uud1ygqICgwWwKgKdoOwBRqHrtg30FJB2h/o0
40DA+QQc8XCQbmZawwkeDcxbFPbkX3NX4FQsSGcR5hW2aveXIR1xDlWpyEbZX1Qo
ZqUV5T3N6bAdx5Z4J++8nNWPUPvJ9zH/43I=
-----END CERTIFICATE-----
Generated at Thu Oct 3 23:28:34 2024 by rpki-client on console-ams.rpki-client.org