Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          srW/ARUwDEwylSEJIuan6YC1VmB7YQXubmMdZhzu6xc=
Subject key identifier:   52:F5:D4:5E:B3:4C:C7:46:ED:97:C3:C9:E9:E1:B9:B5:B9:CE:72:87
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       4180FEB1CF41DF322BF49EE829C6A6DA11B639EF
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Thu 30 Mar 2023 19:31:10 +0000
ROA not before:           Thu 30 Mar 2023 19:26:10 +0000
ROA not after:            Thu 28 Mar 2024 19:31:10 +0000
asID:                     48581
IP address blocks:        2a0a:6040:1000::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:80:fe:b1:cf:41:df:32:2b:f4:9e:e8:29:c6:a6:da:11:b6:39:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Mar 30 19:26:10 2023 GMT
            Not After : Mar 28 19:31:10 2024 GMT
        Subject: CN=52F5D45EB34CC746ED97C3C9E9E1B9B5B9CE7287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:7c:43:7a:78:07:15:7a:d3:e5:ff:2a:d7:
                    b6:08:b9:13:ef:b0:6d:eb:eb:d7:7b:27:b2:f8:a7:
                    4f:25:b0:d3:31:24:65:9a:35:53:da:18:dd:47:dd:
                    77:cf:24:5a:54:bd:ee:9a:70:47:d0:ed:ee:d7:90:
                    16:e8:e7:ea:87:64:e8:2f:5c:80:1f:c9:90:f7:e0:
                    79:ba:58:ad:2e:6a:1b:a2:2b:8e:bd:d3:bc:ee:29:
                    16:67:b5:75:3e:4d:49:a8:ff:b4:a5:cd:f5:30:40:
                    87:cf:22:01:48:a0:80:35:62:6e:27:d6:f5:83:1a:
                    02:f6:62:e3:41:46:bb:d9:7d:ec:44:f4:bf:ce:da:
                    21:e2:da:77:f5:20:3e:a6:7b:7f:48:46:75:8b:67:
                    c8:22:4e:1d:ec:b4:22:98:93:da:0e:23:74:71:40:
                    3d:86:07:29:79:6a:29:82:b1:bc:f0:09:75:94:a5:
                    62:3a:c7:d0:c4:e4:8b:2e:35:29:7b:25:d5:51:0c:
                    25:98:21:8a:f2:ee:ae:9b:fa:82:05:f2:08:69:1a:
                    c6:5e:93:b3:e2:54:43:9f:c4:50:d0:f3:b5:d1:88:
                    66:e3:0f:b1:5f:49:c1:8b:b6:c2:54:05:08:61:08:
                    44:1c:1b:7c:1d:d6:9f:2b:c3:da:cf:9c:b7:73:cf:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F5:D4:5E:B3:4C:C7:46:ED:97:C3:C9:E9:E1:B9:B5:B9:CE:72:87
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:19:fc:b9:25:ac:52:88:5c:af:eb:93:90:6a:a8:91:05:
         48:b5:a6:94:10:85:14:27:e2:d1:13:92:bc:08:1d:14:35:fb:
         73:4e:27:9b:58:42:a3:df:93:d8:9a:86:b0:fe:e9:d1:ea:e6:
         98:51:f9:36:fc:20:5a:e5:ad:60:62:a4:2a:db:5f:fc:77:1e:
         f5:4c:02:b6:92:cf:14:27:19:dc:3c:5b:d8:c6:f2:95:b6:4b:
         75:94:0b:c1:60:2d:7c:cd:61:5c:11:53:1c:ce:b7:4d:92:df:
         14:ad:d9:77:ca:7f:72:28:c0:41:00:1d:8a:6b:03:39:f5:f8:
         d8:81:51:29:f7:05:f2:7d:73:2e:10:0d:bc:55:dc:8c:12:ef:
         d8:d1:ee:da:64:89:68:2c:b3:df:06:f1:b3:d8:78:db:ed:0c:
         fc:d5:88:e3:15:f1:dd:d4:c8:85:ab:e0:8c:ef:c4:15:1f:9c:
         16:c5:5a:36:10:dc:f9:db:aa:26:bc:53:43:ab:e6:52:b7:ee:
         a2:a5:fa:1b:2a:46:6b:9d:34:26:56:b0:d4:d2:78:93:f6:4c:
         88:ca:dd:5f:91:f8:5b:5f:85:cf:10:23:84:b5:49:33:50:14:
         31:a5:89:b3:96:d6:30:cb:05:8e:2b:bc:d9:c3:a5:81:1a:df:
         38:98:78:e9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQYD+sc9B3zIr9J7oKcam2hG2Oe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMTAeFw0yMzAzMzAxOTI2MTBaFw0yNDAzMjgxOTMxMTBaMDMxMTAvBgNV
BAMTKDUyRjVENDVFQjM0Q0M3NDZFRDk3QzNDOUU5RTFCOUI1QjlDRTcyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRfnxDengHFXrT5f8q17YIuRPv
sG3r69d7J7L4p08lsNMxJGWaNVPaGN1H3XfPJFpUve6acEfQ7e7XkBbo5+qHZOgv
XIAfyZD34Hm6WK0uahuiK46907zuKRZntXU+TUmo/7SlzfUwQIfPIgFIoIA1Ym4n
1vWDGgL2YuNBRrvZfexE9L/O2iHi2nf1ID6me39IRnWLZ8giTh3stCKYk9oOI3Rx
QD2GByl5aimCsbzwCXWUpWI6x9DE5IsuNSl7JdVRDCWYIYry7q6b+oIF8ghpGsZe
k7PiVEOfxFDQ87XRiGbjD7FfScGLtsJUBQhhCEQcG3wd1p8rw9rPnLdzz7PxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUUvXUXrNMx0btl8PJ6eG5tbnOcocwHwYDVR0j
BBgwFoAUe19KZg2+fmOovebENHSjVF53GzEwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraS5raXR0ZW4ubmV0d29yay9yZXBvL015
dGhpY2FsS2l0dGVuLzEvN0I1RjRBNjYwREJFN0U2M0E4QkRFNkM0MzQ3NEEzNTQ1
RTc3MUIzMS5jcmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzov
L2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzdCNUY0
QTY2MERCRTdFNjNBOEJERTZDNDM0NzRBMzU0NUU3NzFCMzEuY2VyMIGTBggrBgEF
BQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBraS5raXR0ZW4ubmV0
d29yay9yZXBvL015dGhpY2FsS2l0dGVuLzEvMzI2MTMwNjEzYTM2MzAzNDMwM2Ez
MTMwMzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDM0MzgzNTM4MzEucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAqCmBAEDANBgkqhkiG9w0BAQsFAAOCAQEAGlIZ/LklrFKIXK/rk5BqqJEF
SLWmlBCFFCfi0ROSvAgdFDX7c04nm1hCo9+T2JqGsP7p0ermmFH5NvwgWuWtYGKk
Kttf/Hce9UwCtpLPFCcZ3Dxb2MbylbZLdZQLwWAtfM1hXBFTHM63TZLfFK3Zd8p/
cijAQQAdimsDOfX42IFRKfcF8n1zLhANvFXcjBLv2NHu2mSJaCyz3wbxs9h42+0M
/NWI4xXx3dTIhavgjO/EFR+cFsVaNhDc+duqJrxTQ6vmUrfuoqX6GypGa500Jlaw
1NJ4k/ZMiMrdX5H4W1+FzxAjhLVJM1AUMaWJs5bWMMsFjiu82cOlgRrfOJh46Q==
-----END CERTIFICATE-----