Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1w6e2jgYSAG3L-4w8CGS_gj-_MM.roa
File:                     1w6e2jgYSAG3L-4w8CGS_gj-_MM.roa (raw, json)
Hash identifier:          Qo8CrSsensS4h/KH7MkucNzTAQqg3H87RThy5K6Pv+U=
Subject key identifier:   D7:0E:9E:DA:38:18:48:01:B7:2F:EE:30:F0:21:92:FE:08:FE:FC:C3
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       187B17F8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1w6e2jgYSAG3L-4w8CGS_gj-_MM.roa
Signing time:             Thu 21 Apr 2022 09:37:16 +0000
ROA not before:           Thu 21 Apr 2022 09:37:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134478
IP address blocks:        2a06:a005:580::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410720248 (0x187b17f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Apr 21 09:37:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d70e9eda38184801b72fee30f02192fe08fefcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:b8:8d:ae:7f:fc:09:a0:d4:09:d6:1d:0f:
                    a5:2b:1d:5b:a2:78:7f:29:3e:4c:25:10:2f:2d:a9:
                    d5:b7:57:18:87:0e:e6:07:d4:0c:38:62:bc:c7:50:
                    9b:f8:c7:3e:76:16:78:89:c8:9c:d3:05:7d:52:49:
                    32:e9:a1:32:7a:cc:4c:54:a9:1a:c6:35:95:aa:98:
                    7b:11:90:71:4e:f0:ca:11:2e:d3:4f:be:1e:89:47:
                    f9:eb:c0:ac:d8:92:26:33:75:4c:79:f7:96:d8:99:
                    41:26:69:79:65:84:7b:85:0b:69:f5:29:cb:36:fd:
                    72:e3:c9:4b:b9:7f:16:0f:10:ac:40:7c:34:79:79:
                    65:a6:5c:af:3a:9a:14:01:ae:8c:77:38:fd:78:fb:
                    10:4b:f1:e1:29:64:48:3e:f8:e4:20:aa:4d:c5:15:
                    bd:24:cf:1a:8d:f3:da:50:af:ac:aa:a3:53:35:ea:
                    bd:e7:36:06:35:1b:bb:20:7e:bd:a6:33:39:93:21:
                    09:e7:6e:26:38:07:7a:4a:e2:70:4d:8a:1b:62:66:
                    ff:61:ca:03:d1:e1:00:b1:39:ca:7e:1a:8e:53:fb:
                    b7:6b:31:a1:fd:c4:ba:c3:ac:5c:a8:d2:88:66:33:
                    12:ad:f8:27:50:22:52:03:87:b0:5b:16:c3:67:82:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0E:9E:DA:38:18:48:01:B7:2F:EE:30:F0:21:92:FE:08:FE:FC:C3
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/1w6e2jgYSAG3L-4w8CGS_gj-_MM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:580::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:59:9b:a1:55:0d:61:29:9c:8c:14:14:43:37:8b:47:09:
         99:9a:d8:e5:05:3c:bd:fa:96:96:b3:8a:de:87:d4:42:4a:c5:
         e2:ae:ab:d5:74:eb:8c:25:23:2e:44:7c:5f:99:03:e4:b3:17:
         85:74:e3:55:4c:fa:fd:21:f9:82:01:28:11:0a:0e:e6:0b:36:
         e4:28:d5:24:ca:ab:54:4b:5e:95:51:27:52:a5:69:e7:83:bd:
         39:9e:41:ff:e6:80:f3:23:e7:85:62:45:e4:0b:71:72:19:c3:
         c8:31:46:8d:48:90:bb:c7:77:a7:1c:96:a8:a6:a3:1a:92:b9:
         a4:55:a5:16:21:02:04:ee:c5:96:42:3d:e8:2b:b9:bc:d1:39:
         2b:44:77:a0:c4:21:54:8c:b1:3d:b7:55:27:cc:59:c2:01:7b:
         58:00:69:20:27:35:78:50:f6:70:d1:12:6a:60:62:dd:90:2b:
         72:00:e3:7b:e2:26:dc:8d:93:02:a7:5a:91:87:b2:72:59:90:
         04:71:aa:59:ac:69:dc:5f:19:42:2f:82:dd:33:f9:86:8c:20:
         20:ce:a2:b6:28:83:01:ea:5a:9b:aa:84:11:05:3b:43:2b:17:
         14:90:76:8f:6d:40:d6:a3:03:89:50:6d:ec:4b:45:b0:eb:40:
         1b:1e:22:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org