Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/uTCPG0QQULo1HR-dqvz08RZu3R0.roa
File:                     uTCPG0QQULo1HR-dqvz08RZu3R0.roa (raw, json)
Hash identifier:          0YPOnTKKATKTskMON1B8MN2T7J7z3z3r9xVENfVXPNM=
Subject key identifier:   B9:30:8F:1B:44:10:50:BA:35:1D:1F:9D:AA:FC:F4:F1:16:6E:DD:1D
Certificate issuer:       /CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
Certificate serial:       0185CB7E817BE455B6C55A424CC71CE9420A
Authority key identifier: 55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/uTCPG0QQULo1HR-dqvz08RZu3R0.roa
Signing time:             Thu 19 Jan 2023 19:25:43 +0000
ROA not before:           Thu 19 Jan 2023 19:25:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56884
IP address blocks:        2a05:f300::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:cb:7e:81:7b:e4:55:b6:c5:5a:42:4c:c7:1c:e9:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55de7c1b5c5265bcb90c144c563076fdcfab6a1e
        Validity
            Not Before: Jan 19 19:25:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b9308f1b441050ba351d1f9daafcf4f1166edd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2e:97:28:75:be:fe:c3:47:42:94:ca:7b:72:
                    dd:e5:98:50:f7:6e:67:e1:fb:9a:71:4a:f7:ff:18:
                    73:e8:93:4f:11:8c:62:83:90:c3:ae:b9:a2:74:e2:
                    5f:5c:48:c4:0c:5f:df:67:c6:8b:fd:8c:4f:e7:67:
                    d0:c4:35:d3:6b:93:0f:8d:00:e9:b1:82:c2:bd:c6:
                    f4:db:03:d3:1e:8f:76:b9:5d:e0:21:43:3f:9f:ce:
                    61:31:06:5d:02:7e:d6:b3:06:b5:c4:8f:05:32:33:
                    98:60:62:3a:fb:e7:c4:24:00:23:78:e5:26:a1:53:
                    19:16:65:52:de:71:41:60:f4:6b:fe:f0:61:6a:66:
                    00:ab:ef:a7:f6:d7:41:61:d0:e9:20:af:3d:01:4e:
                    87:79:9f:cb:89:0c:77:17:cf:92:f8:d1:3f:4f:94:
                    8c:08:3f:3a:ae:35:a5:3e:34:cc:dc:81:56:7c:3d:
                    03:6d:9d:da:d9:05:1d:2a:5c:d1:cf:26:ef:4f:fe:
                    70:02:21:9f:28:ea:1c:7f:8e:a3:fb:2a:57:68:9e:
                    c9:b5:b9:e6:04:18:33:cf:03:6e:cc:6a:6e:e6:d2:
                    48:b4:27:fa:50:e1:33:e0:21:64:4d:2f:59:ec:69:
                    b2:83:35:4d:25:2b:41:3e:2c:3e:f5:fe:08:70:10:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:30:8F:1B:44:10:50:BA:35:1D:1F:9D:AA:FC:F4:F1:16:6E:DD:1D
            X509v3 Authority Key Identifier:
                keyid:55:DE:7C:1B:5C:52:65:BC:B9:0C:14:4C:56:30:76:FD:CF:AB:6A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd58G1xSZby5DBRMVjB2_c-rah4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/uTCPG0QQULo1HR-dqvz08RZu3R0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c158da-c3fe-4862-8ee1-93daa6319b9a/1/Vd58G1xSZby5DBRMVjB2_c-rah4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:f300::/29

    Signature Algorithm: sha256WithRSAEncryption
         a9:5d:40:bd:7d:f7:1f:b0:23:35:08:15:31:0d:48:f2:b0:ae:
         89:2e:b8:a5:ad:06:23:55:43:d4:52:1f:2e:73:c8:7e:27:c4:
         20:82:b6:99:63:9d:2f:20:32:96:c7:c2:ea:6b:de:8f:a4:c0:
         e5:de:39:05:f0:45:1d:66:35:e0:62:f9:1e:7a:fb:f8:d1:c0:
         79:59:ad:77:1b:68:33:9d:fa:e8:9c:5e:c1:d9:34:9d:2b:79:
         18:e4:5b:a1:9e:76:56:84:a8:06:e6:f5:e8:95:c6:b1:ce:3c:
         ba:04:77:46:ca:06:9e:75:3a:3b:55:27:05:14:c6:0c:00:c0:
         ec:21:b3:b1:77:06:1b:9c:ed:8a:4a:1a:04:b3:d1:ea:4a:ac:
         90:5f:30:ff:6c:c5:86:74:c6:51:f8:c2:e8:b1:22:62:02:19:
         bb:7c:7b:fb:9d:09:60:ad:ed:54:e2:b1:13:7d:8f:ba:a1:80:
         47:e0:83:77:52:71:a0:61:64:78:42:43:7f:16:04:91:26:a3:
         a8:a7:e7:52:75:51:13:59:97:34:cd:08:9c:99:4f:32:8d:b4:
         bd:28:83:8b:bb:78:60:f1:95:32:ad:9f:29:b6:7d:5f:b3:d9:
         3a:c0:90:88:3a:a6:3f:4f:85:fb:da:e3:03:b4:8e:e5:35:79:
         33:47:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:18 2024 by rpki-client on console-ams.rpki-client.org