Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pudu/0/36342e3138372e3230392e302f32342d3234203d3e20323130373631.roa
File:                     36342e3138372e3230392e302f32342d3234203d3e20323130373631.roa (raw, json)
Hash identifier:          dh5alYzMgQmuiYLybwuW8w/VM8lyz51cfQ7uppTDI1k=
Subject key identifier:   91:8F:C9:F2:CF:3F:D1:D2:6C:A7:42:79:CE:74:76:0F:CF:19:D9:E5
Certificate issuer:       /CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
Certificate serial:       798D2AB161973388E2E778C1D820ACC7ECA316B6
Authority key identifier: EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer
Subject info access:      rsync://rpki.co/repo/Pudu/0/36342e3138372e3230392e302f32342d3234203d3e20323130373631.roa
Signing time:             Sat 29 Jul 2023 05:28:08 +0000
ROA not before:           Sat 29 Jul 2023 05:23:08 +0000
ROA not after:            Sat 27 Jul 2024 05:28:08 +0000
asID:                     210761
IP address blocks:        64.187.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8d:2a:b1:61:97:33:88:e2:e7:78:c1:d8:20:ac:c7:ec:a3:16:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead264c4a27c6bf24ae80e57c50bd86d4b72b06e
        Validity
            Not Before: Jul 29 05:23:08 2023 GMT
            Not After : Jul 27 05:28:08 2024 GMT
        Subject: CN=918FC9F2CF3FD1D26CA74279CE74760FCF19D9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:2b:08:16:04:49:cf:d4:30:a1:79:4c:96:
                    31:5f:0c:cd:8d:b1:34:8c:41:46:3f:06:d7:ec:55:
                    33:41:13:34:fd:1c:9f:db:2a:f4:9f:61:15:8e:df:
                    d2:38:fd:05:b6:18:0c:ec:23:4a:58:17:a5:be:6e:
                    9c:3e:17:10:de:a6:c2:98:da:57:31:af:95:7d:8c:
                    a4:10:74:d3:2a:e3:b1:0c:b7:52:c7:43:f4:5f:c4:
                    f5:af:a7:d7:13:13:18:56:1a:98:3f:fc:24:f7:83:
                    37:a9:d7:bf:d7:a1:99:c0:af:1e:8a:ca:87:81:94:
                    85:c6:be:80:dd:5a:a8:87:cd:5e:d9:94:7b:12:97:
                    f3:72:33:74:d8:4a:55:18:cd:3a:69:52:e9:2c:58:
                    c3:d1:e6:cf:59:d1:ea:66:6f:c5:0e:e6:f1:ef:d3:
                    ea:37:de:81:36:ce:82:7b:8f:bb:42:2e:e5:73:42:
                    74:55:5a:ed:6a:a0:a0:3b:b0:ba:d6:f6:5f:20:7b:
                    83:03:c3:ee:ce:db:41:c5:0a:95:47:11:60:de:ba:
                    72:a5:38:dc:a8:44:b8:ec:a2:c8:c2:fc:8b:2a:2b:
                    01:b7:df:f7:70:fa:ca:67:80:d8:a8:2d:1a:fa:41:
                    04:bc:0e:05:11:1a:ad:92:84:11:f8:cc:d4:71:00:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8F:C9:F2:CF:3F:D1:D2:6C:A7:42:79:CE:74:76:0F:CF:19:D9:E5
            X509v3 Authority Key Identifier:
                keyid:EA:D2:64:C4:A2:7C:6B:F2:4A:E8:0E:57:C5:0B:D8:6D:4B:72:B0:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pudu/0/EAD264C4A27C6BF24AE80E57C50BD86D4B72B06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tJkxKJ8a_JK6A5XxQvYbUtysG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pudu/0/36342e3138372e3230392e302f32342d3234203d3e20323130373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f2:db:99:34:67:8c:41:b9:89:e5:fd:1b:2f:3b:fe:76:91:
         4f:83:10:0a:71:32:17:4d:60:a0:19:78:1a:64:50:43:b7:f0:
         e7:6b:5f:cc:5a:9c:c2:27:5e:cb:d9:8d:83:7b:6b:42:fc:3b:
         a0:52:fc:91:6a:ca:fa:6a:bf:2d:2b:f8:36:d0:c9:3c:67:63:
         94:17:f0:4a:61:96:44:bf:0d:91:f2:85:ff:16:f8:28:32:46:
         0b:a7:d8:08:a9:52:44:6b:0e:12:2e:f9:87:32:0f:b0:b0:84:
         b4:e6:fb:b2:76:bb:ac:7b:45:63:d7:ee:b2:99:80:fb:7b:79:
         64:31:a8:43:35:ee:a0:0f:4a:0d:f4:a9:0b:d0:09:26:1e:91:
         b8:dd:54:71:82:b5:2b:82:e3:ee:12:a5:58:e9:4a:6d:9a:24:
         da:08:9e:c4:4b:d2:3f:2c:5a:2f:28:6a:fb:f8:d0:61:a7:57:
         61:4d:54:48:fd:ca:aa:4d:23:fd:9f:72:7e:2e:f6:bf:8a:72:
         bd:99:50:7c:ef:4f:74:96:97:44:6e:26:61:f0:59:39:7f:80:
         8f:b4:47:d4:94:c2:76:81:d4:76:10:aa:b2:19:4f:17:cc:32:
         fa:ac:57:c2:75:75:e8:d7:9f:53:e9:98:2c:d3:e1:c8:bc:72:
         af:a5:c0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 20:29:41 2023 by rpki-client on console-fra.rpki-client.org