Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/SamCoThePug/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
File:                     326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa (raw, json)
Hash identifier:          QJAoFn8kqFHwzdaTsb9e/QFQIwPiMbCWIy2DUN0pOZQ=
Subject key identifier:   C2:C7:C6:B1:3A:B6:07:CC:A5:79:14:F6:50:D9:54:8A:5A:B8:D8:62
Certificate issuer:       /CN=0E7CF30EF572E836782D25681A69E55C2384F941
Certificate serial:       18A3CD3D9D8314EC0B25AD1B25116FA986A5FE45
Authority key identifier: 0E:7C:F3:0E:F5:72:E8:36:78:2D:25:68:1A:69:E5:5C:23:84:F9:41
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/0E7CF30EF572E836782D25681A69E55C2384F941.cer
Subject info access:      rsync://rpki.kitten.network/repo/SamCoThePug/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa
Signing time:             Sat 25 Feb 2023 23:26:03 +0000
ROA not before:           Sat 25 Feb 2023 23:21:03 +0000
ROA not after:            Sat 24 Feb 2024 23:26:03 +0000
asID:                     204857
IP address blocks:        2a07:54c5:1300::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a3:cd:3d:9d:83:14:ec:0b:25:ad:1b:25:11:6f:a9:86:a5:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E7CF30EF572E836782D25681A69E55C2384F941
        Validity
            Not Before: Feb 25 23:21:03 2023 GMT
            Not After : Feb 24 23:26:03 2024 GMT
        Subject: CN=C2C7C6B13AB607CCA57914F650D9548A5AB8D862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:b3:6c:64:84:76:7a:80:d1:63:3e:29:d2:
                    5d:30:31:a6:1d:9e:db:25:be:8c:b1:65:4c:c7:d6:
                    00:38:99:86:d7:98:66:99:25:8b:27:ae:44:9a:eb:
                    7d:62:e0:80:e8:6b:97:b6:52:15:64:16:2f:14:ce:
                    9f:01:a0:b1:e9:fa:74:3f:0f:ea:a9:5f:a9:1c:50:
                    c8:08:c0:f7:cd:d7:ee:60:5f:d8:f3:6b:44:05:65:
                    5a:5e:bc:a3:14:98:12:8d:c4:4f:6a:86:fd:92:b6:
                    7a:b3:ff:78:d3:30:c6:52:ed:5d:2a:de:35:d9:e9:
                    e4:9e:3d:5c:38:68:41:44:3d:79:25:67:ac:c1:f1:
                    84:f5:5c:2a:59:30:28:3c:1b:7f:49:67:28:df:1d:
                    76:71:a7:e3:11:a4:0c:4b:2a:15:b8:7e:4d:f0:c9:
                    1a:17:15:1c:c2:e1:b6:a1:2f:5a:7a:18:2b:dc:57:
                    d6:0a:ab:70:81:c2:cd:53:1a:f4:ba:1e:db:78:0d:
                    05:8d:26:12:0e:ab:85:17:49:52:b6:3b:73:b9:bb:
                    5f:e4:4f:a1:e0:41:9d:e8:70:e1:7f:9c:99:a2:d7:
                    8f:f9:60:df:cb:e0:a8:64:e6:25:48:97:81:f7:a5:
                    86:d1:97:57:cc:00:c7:e5:4c:b7:5a:c6:91:2b:45:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C7:C6:B1:3A:B6:07:CC:A5:79:14:F6:50:D9:54:8A:5A:B8:D8:62
            X509v3 Authority Key Identifier:
                keyid:0E:7C:F3:0E:F5:72:E8:36:78:2D:25:68:1A:69:E5:5C:23:84:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/SamCoThePug/1/0E7CF30EF572E836782D25681A69E55C2384F941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/0E7CF30EF572E836782D25681A69E55C2384F941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/SamCoThePug/1/326130373a353463353a313330303a3a2f34302d3438203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c5:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:af:63:e5:2d:68:b1:90:11:bd:47:ad:12:c4:dd:ee:05:ac:
         65:b8:c7:c1:8f:a6:02:65:d0:11:c4:b4:09:46:80:1b:95:e3:
         32:56:bf:46:f4:f3:15:fa:bb:d5:29:b1:7d:07:a7:11:1e:da:
         55:a2:1c:b2:f8:e9:72:a4:da:b4:98:bb:80:31:2c:1f:d3:93:
         1e:18:14:18:e5:dd:fb:7d:2b:11:e1:23:94:0d:55:5d:fd:e4:
         77:36:43:38:92:e0:d0:89:9c:02:68:e1:1b:4e:9f:31:3f:ad:
         af:1f:35:ca:78:e8:e6:92:ea:cf:57:91:4c:ce:51:e7:dd:d5:
         00:1e:07:b1:61:a8:74:c5:1f:9a:18:d3:9f:bf:94:60:d4:5c:
         8f:9c:92:2f:79:6c:21:22:b4:b8:c3:98:a4:df:bf:a8:d3:40:
         18:fd:ed:cb:34:fe:02:69:60:aa:11:75:c7:19:17:a0:d0:69:
         0d:2a:fd:23:5a:b8:00:62:b1:06:04:08:0b:99:83:72:6d:80:
         45:f8:04:a6:69:63:25:68:d4:11:66:b9:52:15:fb:71:cc:f9:
         89:ac:8f:b2:c8:69:11:c9:ef:ed:af:bf:74:0f:38:df:ad:a9:
         91:1a:28:cb:d2:bd:4b:79:51:73:be:a6:ec:f4:60:5d:8a:42:
         00:4d:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----