Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa
File:                     m0gCK6p47EbynJETYt-r3yetuas.roa (raw, json)
Hash identifier:          uby+tl0/tnOrePvk48+VS7c8cZRWf/6wBPNsKq217Mg=
Subject key identifier:   9B:48:02:2B:AA:78:EC:46:F2:9C:91:13:62:DF:AB:DF:27:AD:B9:AB
Certificate issuer:       /CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Certificate serial:       019DE4FE
Authority key identifier: 33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa
Signing time:             Sat 01 Jan 2022 02:55:07 +0000
ROA not before:           Sat 01 Jan 2022 02:55:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:1080::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27124990 (0x19de4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
        Validity
            Not Before: Jan  1 02:55:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b48022baa78ec46f29c911362dfabdf27adb9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:eb:fc:90:1b:c9:2d:29:db:e6:49:9c:0e:
                    50:2e:ec:1d:c9:bc:2b:d2:64:a2:bf:88:a0:de:77:
                    e9:e9:3b:3f:27:4d:30:c0:f4:ff:a9:5d:07:53:2d:
                    49:0c:79:db:7f:c0:1d:f5:ce:9d:20:9a:34:b8:43:
                    ce:4c:12:ee:52:88:bd:68:02:49:9a:1c:fa:ef:a5:
                    7a:83:0e:e1:6a:f7:4a:af:48:f0:89:fc:c3:96:93:
                    53:38:62:3d:99:72:02:64:2d:e3:97:5f:91:f0:14:
                    d7:f7:4a:57:71:88:15:79:cd:af:71:37:4b:6c:60:
                    f5:cb:1f:f2:8d:f2:d5:5b:78:ff:0b:88:69:90:0c:
                    df:bc:51:ac:a5:41:12:22:60:3b:3e:c2:b2:f0:36:
                    7d:d3:87:ab:2a:56:43:be:84:d5:18:28:64:9d:9c:
                    0d:8e:5b:1a:b1:06:59:4d:62:6c:bf:eb:7d:d8:af:
                    e1:73:6c:d8:67:ca:c2:98:79:f4:5b:dc:af:a6:c4:
                    1e:92:80:36:bd:41:f2:0a:ea:61:f7:99:41:05:8b:
                    32:9b:8a:8e:be:4a:51:40:30:4d:2f:f1:52:5e:08:
                    fd:94:44:c4:36:ec:54:70:5e:2a:51:bf:24:de:2a:
                    77:5a:2f:d0:30:a7:48:11:8b:06:00:35:43:f9:a7:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:48:02:2B:AA:78:EC:46:F2:9C:91:13:62:DF:AB:DF:27:AD:B9:AB
            X509v3 Authority Key Identifier:
                keyid:33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/m0gCK6p47EbynJETYt-r3yetuas.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:1080::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:48:b4:7d:ba:aa:77:48:5a:1b:5a:d1:c1:9a:ee:38:3e:88:
         91:e0:57:45:2c:2e:20:f0:1f:29:f7:9f:06:5a:7f:ff:a2:1a:
         c0:77:28:26:4a:1b:59:34:29:00:c3:12:f5:5f:22:7c:56:52:
         ef:06:7e:0a:0a:e7:f1:3f:f9:dd:20:97:2a:f0:ba:1b:a0:dd:
         f9:2a:41:70:df:18:a3:b6:14:7c:18:39:70:70:ee:7c:4a:d7:
         b8:e4:6d:2f:b1:24:86:f7:0e:49:23:66:8f:96:44:dd:17:e3:
         02:a7:c3:46:7d:bd:bc:bf:3c:02:a9:f3:0d:3f:40:cd:d3:77:
         cc:e2:08:03:95:36:29:8a:b7:77:35:8e:a4:cb:81:a3:eb:18:
         2f:22:5b:93:88:49:11:61:ca:b6:e4:fe:ee:e8:32:69:d1:bd:
         fe:1e:48:31:27:ff:48:5a:34:48:37:40:86:d3:45:8a:32:de:
         45:bb:ca:29:64:b4:d8:0c:f6:af:2f:e0:05:4c:17:02:e2:3f:
         32:9a:04:f1:6f:12:c5:a4:d1:43:9e:92:cd:7b:b3:c1:63:93:
         cb:25:d0:5d:95:f4:3e:4a:78:b9:cb:c7:ea:b7:b4:35:a3:fd:
         e0:48:12:48:a0:94:ff:44:c4:f0:1c:ab:0e:70:71:1d:04:fe:
         20:1d:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:15 2024 by rpki-client on console-fra.rpki-client.org