Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          gzc9OXMLf3IOfIC4q8ZydZA4/tqPU9T4uNMoXg/pmRQ=
Subject key identifier:   EE:2B:D3:AD:D3:3A:7C:AA:C4:66:32:6A:67:5F:B4:03:CB:9D:5F:A5
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       18CAD0AE4C66DEEFF63B542D41AD5E2778E79168
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Fri 10 Feb 2023 10:45:11 +0000
ROA not before:           Fri 10 Feb 2023 10:40:11 +0000
ROA not after:            Fri 09 Feb 2024 10:45:11 +0000
asID:                     204857
IP address blocks:        2a0a:6040:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ca:d0:ae:4c:66:de:ef:f6:3b:54:2d:41:ad:5e:27:78:e7:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Feb 10 10:40:11 2023 GMT
            Not After : Feb  9 10:45:11 2024 GMT
        Subject: CN=EE2BD3ADD33A7CAAC466326A675FB403CB9D5FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b2:79:af:9c:36:05:c9:87:d7:3f:24:1a:f3:
                    ce:f9:2b:5b:7e:8f:c4:b4:9b:9b:c0:65:63:77:62:
                    ce:df:94:fd:d8:39:6b:6e:de:42:9e:77:66:8b:a4:
                    b9:8c:54:ef:46:ed:15:5a:a7:70:4a:cc:dd:dd:7c:
                    56:aa:fa:86:a5:c7:a3:7e:6b:a2:41:1a:7d:76:7c:
                    2b:89:fd:4c:36:d0:79:3a:01:25:31:b2:9a:b8:16:
                    cd:01:64:22:9c:f5:1a:11:df:24:ad:72:17:79:0c:
                    32:bb:66:41:cf:12:c5:df:90:10:90:ab:c7:31:48:
                    ae:58:24:5a:c1:ec:d8:84:49:8d:81:db:22:0d:09:
                    88:a7:18:62:61:44:d5:ce:55:09:d0:f6:7b:e9:08:
                    93:a4:01:07:a2:2e:66:cc:d0:f2:a1:69:54:c1:e2:
                    26:40:6f:cc:05:54:1e:28:70:0a:30:d9:bc:5a:9c:
                    d7:e7:ed:e8:ad:41:25:a3:bd:ac:c3:e4:46:cb:52:
                    1c:8b:b8:f6:33:e0:24:c3:d4:d1:e0:ec:6a:b2:a1:
                    8e:f2:40:15:d5:7e:eb:48:e1:0b:c0:60:5f:fe:8d:
                    66:d4:e5:01:68:9e:b9:22:8e:c0:6f:ba:ae:cf:49:
                    50:c4:3f:3d:16:fe:6e:b2:27:27:17:14:40:2d:4b:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:D3:AD:D3:3A:7C:AA:C4:66:32:6A:67:5F:B4:03:CB:9D:5F:A5
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:a4:5e:e4:c6:66:33:69:c8:41:91:3c:be:3c:7f:a2:ab:51:
         31:c5:c4:a0:af:f1:ce:d3:fe:1d:b5:86:c5:78:53:84:99:ab:
         0a:c6:db:1d:3f:f4:a9:5b:4c:2c:c7:ce:26:96:dd:4d:1a:38:
         f8:4a:e2:54:31:e3:ca:3f:5e:97:40:b6:e7:51:64:0e:99:bb:
         0a:28:f6:f9:68:0f:0e:e1:fd:f1:71:f5:57:cd:07:43:b7:e5:
         4e:3a:d4:df:c1:74:ee:b7:6e:23:d3:c1:99:6a:80:47:e7:82:
         17:a6:d8:dc:8d:8b:4b:18:33:ea:34:79:91:84:77:79:fc:00:
         a4:92:84:2b:9c:4f:46:81:3a:e5:8c:66:15:f9:ad:3c:1b:8e:
         d0:66:09:d8:7e:2f:d9:8b:cd:bd:b9:0d:e9:15:25:13:b4:a1:
         2b:b8:3f:02:cf:d3:c2:1f:c0:ad:58:38:8b:8a:30:be:f8:39:
         5f:12:60:b3:d4:2a:71:7b:d0:85:aa:88:fd:7a:5b:23:53:44:
         2f:b7:8f:22:5b:4c:6c:a1:e5:7c:7b:01:65:1e:49:4f:25:9f:
         4e:5a:9b:ed:40:c8:1d:4a:1e:a1:61:e2:dd:4b:37:dd:d4:21:
         a9:66:aa:da:e1:44:77:b3:73:50:22:83:d7:85:06:ae:9b:dd:
         82:33:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----