Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-JTTVlSd5S41TdWZ5SAl0YmgKH8.roa
File:                     1-JTTVlSd5S41TdWZ5SAl0YmgKH8.roa (raw, json)
Hash identifier:          J8ofGZDnqxYnnRoZMCSXLA81Dx+A82R/rkcVbg+YUBc=
Subject key identifier:   F8:94:D3:56:54:9D:E5:2E:35:4D:D5:99:E5:20:25:D1:89:A0:28:7F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A81A22A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-JTTVlSd5S41TdWZ5SAl0YmgKH8.roa
Signing time:             Thu 02 Jun 2022 09:23:20 +0000
ROA not before:           Thu 02 Jun 2022 09:23:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203857
IP address blocks:        2a06:a005:5ec::/48 maxlen: 48
                          2a06:a005:11::/48 maxlen: 48
                          2a06:a005:851::/48 maxlen: 48
                          2a06:a005:a02::/48 maxlen: 48
                          2a06:a005:856::/48 maxlen: 48
                          2a06:a005:4d6::/48 maxlen: 48
                          2a06:a005:5e9::/48 maxlen: 48
                          2a06:a005:2df::/48 maxlen: 48
                          2a06:a005:5ee::/48 maxlen: 48
                          2a06:a005:4d3::/48 maxlen: 48
                          2a06:a005:a01::/48 maxlen: 48
                          2a06:a005:4d2::/48 maxlen: 48
                          2a06:a005:432::/48 maxlen: 48
                          2a06:a005:12::/48 maxlen: 48
                          2a06:a005:4d7::/48 maxlen: 48
                          2a06:a005:10::/48 maxlen: 48
                          2a06:a005:850::/48 maxlen: 48
                          2a06:a005:4d5::/48 maxlen: 48
                          2a06:a005:5eb::/48 maxlen: 48
                          2a06:a005:4d4::/48 maxlen: 48
                          2a06:a005:2d4::/48 maxlen: 48
                          2a06:a005:5ea::/48 maxlen: 48
                          2a06:a005:5ef::/48 maxlen: 48
                          2a06:a005:5e8::/48 maxlen: 48
                          2a06:a005:5ed::/48 maxlen: 48
                          2a06:a005:5e3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444703274 (0x1a81a22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun  2 09:23:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f894d356549de52e354dd599e52025d189a0287f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:db:db:d2:be:60:82:32:56:e6:10:1f:4f:
                    1c:f4:84:8a:87:6e:06:91:24:20:08:3c:c8:19:d3:
                    dd:fc:bb:6b:66:0a:4e:18:19:f2:6c:f8:f8:9f:56:
                    ae:0f:3e:63:38:89:31:31:13:89:0f:ec:c6:a3:13:
                    f5:20:3d:e5:13:39:18:88:21:aa:63:93:cf:a6:80:
                    18:ab:a1:17:77:85:7d:7e:a0:0d:f9:77:21:76:dd:
                    39:60:e9:5c:f6:3b:26:f1:4b:11:ff:76:86:8c:95:
                    e0:2b:9f:05:25:98:7f:c2:8a:6f:ee:de:6e:9e:8c:
                    8e:07:60:6a:06:a9:4b:d9:03:0a:e4:76:58:c5:ee:
                    04:70:3c:e3:a9:0c:0c:a6:34:0c:c6:ba:f5:1d:2f:
                    9c:83:86:d0:c0:59:25:76:0a:e3:96:f5:bb:85:ff:
                    44:bd:04:9f:9f:90:aa:ab:00:cb:a7:44:90:ce:8b:
                    81:61:10:d7:3a:89:c6:3b:50:e7:29:25:eb:26:1e:
                    0d:92:60:e2:cf:c1:07:58:88:75:5c:e2:1c:ae:a5:
                    f7:24:5a:f0:90:5d:e4:12:b7:dd:77:5b:67:59:30:
                    e2:6a:45:ae:a0:72:2e:d5:96:6a:2a:93:a2:f6:48:
                    71:0a:74:82:65:a3:56:23:33:c2:1a:87:0a:b4:63:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:94:D3:56:54:9D:E5:2E:35:4D:D5:99:E5:20:25:D1:89:A0:28:7F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1-JTTVlSd5S41TdWZ5SAl0YmgKH8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:10::-2a06:a005:12:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2d4::/48
                  2a06:a005:2df::/48
                  2a06:a005:432::/48
                  2a06:a005:4d2::-2a06:a005:4d7:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:5e3::/48
                  2a06:a005:5e8::/45
                  2a06:a005:850::/47
                  2a06:a005:856::/48
                  2a06:a005:a01::-2a06:a005:a02:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         48:4e:c5:7f:f4:67:ff:30:6b:15:08:66:47:21:fb:47:a0:7f:
         7f:03:d6:e5:15:a7:d0:6c:85:ea:ab:ea:cb:85:ae:f5:ca:86:
         be:ba:d0:21:b6:e1:f5:13:0b:fe:a6:14:f3:42:8d:4d:9d:14:
         75:29:16:9e:84:09:5e:49:a0:63:64:34:c0:a9:c4:91:3d:fa:
         fb:1d:0a:f8:f2:26:f1:f0:02:c6:3c:af:99:02:b7:a2:b5:79:
         48:27:76:b6:f3:f2:e4:f4:1f:a8:ad:35:bc:1d:7f:2c:ef:aa:
         61:cc:60:9f:01:0f:8b:38:da:32:1b:f1:82:26:f8:4f:3f:9f:
         8e:ab:20:06:77:3c:d6:63:3a:29:c6:3f:a0:9c:9f:ea:08:e8:
         93:0f:91:10:2a:1d:63:85:24:78:30:61:8a:f4:28:73:ed:88:
         a1:fc:cb:68:a3:0e:12:be:76:c5:cc:d4:73:3a:55:c4:a9:8a:
         bf:4e:fa:bf:43:d0:e6:07:3c:02:2b:16:60:43:a9:ae:6a:50:
         71:92:27:02:b6:c3:90:4f:a2:69:e8:ca:e2:cd:c7:67:14:dc:
         bc:da:b4:ff:86:1e:be:86:2c:9e:b0:6f:06:85:69:94:1f:f9:
         ea:41:a8:e1:da:a5:63:53:15:d5:2e:e5:cb:6c:ca:7a:fe:61:
         27:c1:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org