Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa
File:                     ZnrqCTKVBOjchbZV_1SzTxtaItw.roa (raw, json)
Hash identifier:          04SK+sglM1eRaA8Tb+fmPa9teChKyUyfOZzUykskqwc=
Subject key identifier:   66:7A:EA:09:32:95:04:E8:DC:85:B6:55:FF:54:B3:4F:1B:5A:22:DC
Certificate issuer:       /CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Certificate serial:       01856D0ADC7BF3CE29611E9256149EAF33BF
Authority key identifier: F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa
Signing time:             Sun 01 Jan 2023 11:15:06 +0000
ROA not before:           Sun 01 Jan 2023 11:15:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42926
IP address blocks:        2a0a:e2c5::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:0a:dc:7b:f3:ce:29:61:1e:92:56:14:9e:af:33:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
        Validity
            Not Before: Jan  1 11:15:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=667aea09329504e8dc85b655ff54b34f1b5a22dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:41:b6:2c:78:d5:a2:0b:37:bd:cc:d5:cd:c1:
                    8a:b0:ab:7f:3c:a4:49:38:b8:72:dc:d0:a3:ea:ed:
                    70:5b:35:15:06:de:7d:96:57:d5:d3:64:c4:27:39:
                    d0:2f:cd:c7:51:e1:21:28:80:bc:68:19:fa:4e:e9:
                    92:da:44:fb:0e:78:0d:a3:98:a1:d2:30:df:38:56:
                    91:1f:ca:0e:6b:bd:c4:2e:50:05:c1:32:c4:05:1a:
                    48:e8:9f:32:fd:8a:2a:72:35:bd:95:f4:a7:38:95:
                    17:4b:a7:df:d3:f8:8c:0d:c4:e9:31:c5:e4:65:98:
                    63:59:f5:4f:19:b2:fa:cd:24:85:88:04:dd:24:78:
                    e2:ef:1f:5c:c8:3a:1f:97:58:bb:36:2a:7a:46:8a:
                    3b:3c:86:14:08:55:ad:6e:fc:15:39:91:a5:b7:42:
                    7e:af:75:77:d9:26:bc:c7:12:84:78:78:dc:4a:41:
                    ae:5e:16:63:75:8a:1d:5b:f3:9c:81:17:59:ba:e7:
                    c0:8e:03:96:8a:e0:eb:ed:64:02:76:f9:72:d0:e0:
                    f9:ea:0d:1d:fe:a3:04:bd:a7:5e:a5:10:b5:56:f6:
                    cd:78:28:37:e3:74:19:6f:d6:4a:8b:9d:4c:34:96:
                    33:6e:3e:19:c7:7e:d2:9e:34:5c:b5:1b:c8:a2:a5:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:EA:09:32:95:04:E8:DC:85:B6:55:FF:54:B3:4F:1B:5A:22:DC
            X509v3 Authority Key Identifier:
                keyid:F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/ZnrqCTKVBOjchbZV_1SzTxtaItw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/93wDW6cLR1cBiKwQ7p85bKuy6Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:e2c5::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:13:6c:cf:f0:db:01:89:22:60:e3:d1:1c:5d:31:71:30:
         c0:d4:88:81:43:e7:29:fb:fd:5e:6f:f2:dd:44:af:aa:f1:52:
         55:b1:a4:2f:b1:ce:d7:69:8b:3a:5d:d9:c2:64:46:4f:3f:a8:
         f9:8a:a9:2f:e2:18:09:1a:ad:ab:e3:9e:c1:bf:97:c7:b7:04:
         a9:96:61:2d:6b:c8:29:6f:19:5e:a7:2a:b8:97:d6:e7:7b:d9:
         6f:54:8b:4d:03:27:dd:1d:b6:12:0f:56:24:72:c9:94:12:4f:
         07:a5:07:1e:1b:81:0f:a3:de:73:2c:47:0b:cd:66:f4:64:86:
         a3:24:ca:64:49:37:3f:12:22:85:51:6f:ca:c6:2f:cb:a1:99:
         7f:5d:c6:12:5a:81:0b:30:23:92:f2:21:0f:e7:7f:ae:ed:45:
         71:c0:94:25:b1:11:ed:78:58:84:f5:5a:a5:e2:1f:3d:66:f6:
         17:b7:45:e1:4f:8f:1d:57:6e:3f:f1:2f:4a:7f:91:96:aa:7c:
         d1:79:c1:9d:d6:f3:31:74:86:83:98:48:fb:48:9e:4b:05:bb:
         c5:dc:76:2d:57:36:b1:47:8b:81:ac:6f:fc:d6:d5:a8:36:5a:
         82:f0:f0:2e:bd:2f:ae:10:2f:b7:87:f4:f1:31:1a:79:2e:6f:
         4c:1f:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:46 2024 by rpki-client on console-fra.rpki-client.org