Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa
File:                     SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa (raw, json)
Hash identifier:          gP7artmh6fIWmpukLVqDcjJQWf8ab/rAl4dSn8duGks=
Subject key identifier:   49:B1:E9:45:BF:45:F8:F6:6D:FE:B6:59:62:B0:78:49:A5:77:E1:74
Certificate issuer:       /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial:       018793EAA63A4BD9C4A30A4284ED6A0D623F
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa
Signing time:             Tue 18 Apr 2023 10:30:41 +0000
ROA not before:           Tue 18 Apr 2023 10:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29491
IP address blocks:        2a06:fc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:93:ea:a6:3a:4b:d9:c4:a3:0a:42:84:ed:6a:0d:62:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
        Validity
            Not Before: Apr 18 10:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49b1e945bf45f8f66dfeb65962b07849a577e174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:b8:23:5e:60:5d:8e:e4:19:e0:55:9f:23:
                    32:01:6f:f2:0b:cd:d0:46:8a:21:d2:02:e4:e5:e0:
                    e2:1a:ef:49:a1:14:3c:16:5c:9d:6c:00:8c:e0:a3:
                    de:b1:db:18:b3:15:54:45:11:23:eb:e1:52:3b:23:
                    24:96:2e:16:05:0f:ea:4c:20:5a:61:4d:9b:35:2c:
                    d2:98:eb:ed:fc:e4:15:de:6a:eb:1d:c3:8a:9b:22:
                    72:3b:14:0b:3d:cf:13:fa:6b:aa:c5:bc:91:59:b7:
                    92:b4:f9:c7:e6:a3:1b:c9:6d:ec:22:c2:3c:e8:c7:
                    e8:65:54:a1:81:b2:c7:a5:08:e7:82:0c:a5:f1:d3:
                    18:0c:5c:54:5a:3c:a5:65:1d:f9:95:c2:9d:90:c8:
                    b8:ca:93:70:6a:d8:4e:e5:21:db:bb:db:50:d1:21:
                    18:9f:1f:c1:38:af:e2:1e:89:04:5c:6e:16:4c:5f:
                    6f:6c:33:ff:82:2d:ce:0d:be:f3:dd:e1:00:48:40:
                    02:f7:ae:96:bc:6f:ff:f9:ff:2e:16:32:8e:e4:ba:
                    36:8a:18:3a:1f:1b:5d:83:b0:99:07:1f:d1:b9:8e:
                    14:d1:03:ae:08:1c:67:a6:30:8b:cf:70:96:09:54:
                    04:29:e2:fa:ad:8e:ce:f3:03:4d:c2:50:39:86:f9:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:E9:45:BF:45:F8:F6:6D:FE:B6:59:62:B0:78:49:A5:77:E1:74
            X509v3 Authority Key Identifier:
                keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:fc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:a7:26:02:f8:3f:78:01:0c:3a:73:3c:4e:9a:e4:92:c4:
         6c:74:07:ec:51:26:c4:2d:92:62:db:3d:1e:5e:80:48:9d:da:
         eb:0a:25:01:a8:fc:53:61:42:94:74:3e:59:ee:88:dd:d5:61:
         67:89:1a:8c:75:e8:da:b8:18:4e:59:c1:8f:ec:fb:ef:ca:5f:
         ef:86:c1:85:0f:0f:37:2a:57:a8:b6:9a:cc:42:9c:1d:5c:3c:
         f1:2c:47:38:1f:9d:a7:9f:19:62:a1:b6:4c:c8:ed:a9:54:3f:
         3a:b8:28:2e:de:93:4e:43:b3:b6:d0:f6:76:d4:8d:0b:6a:24:
         58:cd:fd:95:e8:2d:77:bb:8e:92:7b:1c:a0:1e:53:8d:07:42:
         a6:27:c4:f4:94:6a:c3:08:0f:bc:3f:d2:a8:ec:a2:53:81:1b:
         87:61:d3:a2:cb:53:30:c6:87:a5:67:bf:4a:a7:6d:f2:7b:55:
         43:54:59:0a:56:41:a2:46:98:75:f5:b9:88:fb:27:02:20:67:
         88:2b:31:07:6b:92:d3:28:be:5b:5a:56:ea:c1:ba:3f:b1:21:
         66:3a:8e:b3:07:91:88:3d:f1:19:f0:68:f8:32:28:72:a5:d5:
         70:71:b0:8f:d8:20:ef:d5:32:9a:df:9d:10:d5:7f:be:b1:11:
         28:c3:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org