Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DjGLNxlCd8Af0xANOFRtkTIZdpk.roa
File:                     DjGLNxlCd8Af0xANOFRtkTIZdpk.roa (raw, json)
Hash identifier:          QSMdVedbqSaJfnt/VKnM1nitkEs0xmhFI4fmPUN9cK8=
Subject key identifier:   0E:31:8B:37:19:42:77:C0:1F:D3:10:0D:38:54:6D:91:32:19:76:99
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1A3BB659
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DjGLNxlCd8Af0xANOFRtkTIZdpk.roa
Signing time:             Sun 29 May 2022 06:27:58 +0000
ROA not before:           Sun 29 May 2022 06:27:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134666
IP address blocks:        2a06:a005:a70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440120921 (0x1a3bb659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 29 06:27:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e318b37194277c01fd3100d38546d9132197699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:c7:05:02:3b:20:80:d8:ff:3a:19:cc:d9:
                    92:b0:6a:0c:f7:dd:da:a1:cf:00:a7:cc:ba:0b:81:
                    75:2a:43:ed:aa:6c:6b:be:71:09:76:c8:14:87:8a:
                    26:8e:ae:76:00:c6:e0:a6:82:06:c2:fc:f7:2d:e8:
                    65:92:8d:f7:6d:a5:51:0f:d6:77:78:dc:0b:fd:c4:
                    6f:3b:52:8c:de:a9:5a:a5:d9:e5:b0:09:f0:ab:bf:
                    68:3b:9d:85:a5:9d:54:8d:2e:04:a3:9e:bd:02:6c:
                    31:ef:b5:dd:7c:ba:d5:db:6c:93:9b:19:1e:d7:90:
                    8d:f5:fd:b8:8e:bd:59:ed:42:19:6d:ed:7b:d1:7f:
                    17:af:cd:98:64:d6:ce:3a:53:af:be:24:68:30:4e:
                    b9:fe:b8:28:81:e7:73:db:b5:2f:b4:8a:27:29:89:
                    75:0b:3e:a4:76:ed:dd:31:74:0e:ef:2a:14:59:d8:
                    60:4c:db:e9:20:46:19:bf:77:52:44:ec:63:5a:e8:
                    cc:0f:06:7d:62:3c:8c:39:65:d2:bd:7d:68:b9:30:
                    df:f9:ac:fe:87:24:4f:a9:42:68:b8:d1:d3:7c:17:
                    e6:e3:7f:22:c7:ca:6e:2a:87:62:b2:47:7b:ed:26:
                    c0:d5:5e:ca:e6:65:55:fc:67:11:1f:9b:8b:53:0b:
                    6d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:8B:37:19:42:77:C0:1F:D3:10:0D:38:54:6D:91:32:19:76:99
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/DjGLNxlCd8Af0xANOFRtkTIZdpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a70::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:f9:25:af:8f:5f:68:c1:2a:19:ac:cc:8e:fb:12:01:91:
         3b:16:33:2a:9a:2a:ff:0f:89:29:7a:7d:a4:12:cd:b8:d9:5f:
         29:d7:56:01:6d:9d:bb:46:e5:df:9f:1a:d6:8b:da:33:ec:be:
         e3:24:33:43:55:79:f5:bd:2c:c4:da:fc:cc:b9:fe:2f:1a:22:
         c5:3c:de:05:6d:40:ee:ca:e7:2f:55:9e:ed:32:68:f9:6a:12:
         d8:69:72:71:2d:2f:4a:fc:1f:6c:a3:f4:1e:a4:9b:cd:bc:07:
         8d:10:60:5e:4b:90:82:d3:35:4c:f4:6b:0c:19:b2:62:e5:0f:
         28:50:15:3c:92:92:01:92:5e:43:4e:42:4f:c7:9d:24:89:54:
         ca:f2:68:d6:33:19:8a:b4:67:f1:0b:e4:7f:2e:b9:aa:69:88:
         ea:ad:c7:c6:ae:7d:d0:e7:dc:1f:15:c2:86:1d:cc:59:5a:7e:
         44:67:11:a6:c3:7a:50:a8:f5:a0:79:0a:5c:7f:71:80:17:1e:
         9b:97:15:76:50:24:e0:34:e3:1e:fc:25:dd:57:b1:9a:fe:11:
         1a:2c:ac:42:08:e9:8a:13:62:ee:0d:0e:36:2d:2b:3c:ca:b0:
         68:3e:34:05:29:89:4e:08:3e:82:a3:7f:6d:0d:dc:0f:b7:b8:
         be:84:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org