Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa
File:                     9zp1H2RKmNY1QeA2QKc5FEycL-8.roa (raw, json)
Hash identifier:          hBkLnme8LbI0vqfj1RbYiMXJcKqrDmKPtqNH65oTDFI=
Subject key identifier:   F7:3A:75:1F:64:4A:98:D6:35:41:E0:36:40:A7:39:14:4C:9C:2F:EF
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181DBAC31B925E138FEAAF83C08169B6F33
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa
Signing time:             Fri 08 Jul 2022 02:38:23 +0000
ROA not before:           Fri 08 Jul 2022 02:38:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139989
IP address blocks:        2a06:a005:a10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:db:ac:31:b9:25:e1:38:fe:aa:f8:3c:08:16:9b:6f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  8 02:38:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f73a751f644a98d63541e03640a739144c9c2fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:91:91:f8:43:8c:54:92:3a:2e:84:a1:03:
                    98:ff:f3:f8:03:bf:04:8b:55:57:1a:fc:11:6c:81:
                    f7:48:fc:e0:25:eb:31:c1:d0:55:1d:14:e3:9d:29:
                    2b:0a:65:7c:7f:f1:c7:db:7c:2d:08:ff:1d:89:4a:
                    ee:6d:76:69:4a:83:25:76:1d:2b:cd:cb:f6:ad:5f:
                    38:8e:c7:16:ac:d3:4a:d4:05:24:80:96:9e:58:e9:
                    f5:d8:d9:4e:81:69:89:65:68:42:57:fb:b8:57:b0:
                    c4:4d:f0:48:4b:05:7f:4d:02:d2:3d:6d:c4:be:5a:
                    e7:5f:84:6d:63:f3:d2:4f:09:a8:16:25:de:2b:b5:
                    24:75:bf:f8:d2:48:fb:b5:7f:3d:33:3e:ba:12:39:
                    d9:bf:19:34:06:6d:ff:13:67:c5:1c:46:d6:1b:ec:
                    d4:9f:38:f8:28:7d:d4:b0:64:86:e8:85:d0:d6:68:
                    c0:4e:37:38:09:d9:96:1d:0e:39:2f:33:f9:67:c8:
                    55:99:4d:f9:82:bd:8f:9f:ff:4a:99:6b:05:f6:ed:
                    09:44:bc:f5:87:10:2e:ea:1b:f7:06:89:46:dc:7f:
                    32:c8:34:a1:63:14:ee:08:8c:56:11:00:f9:8d:2a:
                    4f:5c:94:dd:0b:45:e7:30:f5:d1:3c:e5:cb:a2:09:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3A:75:1F:64:4A:98:D6:35:41:E0:36:40:A7:39:14:4C:9C:2F:EF
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/9zp1H2RKmNY1QeA2QKc5FEycL-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a10::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:1c:89:33:c0:71:cb:dd:30:df:83:18:c3:48:8c:bd:b8:4b:
         bc:4f:7d:a6:c8:0f:9b:71:3d:3a:b6:b0:f1:81:24:80:ff:2d:
         2f:83:54:a4:8d:e2:29:51:97:15:9f:1e:8b:9c:ef:00:dd:57:
         77:e7:8f:7f:65:83:c6:fa:41:f5:2b:a7:ed:cb:2e:24:f6:90:
         fd:5c:0a:6c:bc:6f:c0:e5:97:63:58:d9:03:0c:aa:7a:15:02:
         04:45:20:eb:cb:48:e8:3c:9a:99:76:fb:11:b4:41:70:20:05:
         09:76:df:27:31:99:bc:4e:e1:16:c3:a6:cd:9c:73:75:74:f2:
         a0:f4:f9:3b:39:21:4b:69:04:49:57:7e:0f:b3:d2:2a:05:28:
         89:cd:ee:25:ee:19:92:01:52:ea:a6:33:ae:30:be:c4:c3:72:
         fe:cb:14:f5:2b:46:60:d4:ce:d3:32:a3:d9:a9:c7:21:1f:5f:
         9c:39:81:43:a8:d4:a7:bb:f8:ca:02:b9:2f:76:6a:fc:f5:29:
         8a:1a:9b:33:fc:e5:3b:0f:6e:3f:58:c4:96:32:fc:3a:68:fa:
         c6:bb:ca:3c:18:7e:ac:cf:05:6d:25:49:34:5a:58:8c:64:76:
         cd:6e:36:73:54:31:86:76:4d:32:0f:64:6c:74:1d:f4:f3:4d:
         43:f9:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org