Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E_FXhTOaZ-wFzOt_K5yJV-s5ce0.roa
File:                     E_FXhTOaZ-wFzOt_K5yJV-s5ce0.roa (raw, json)
Hash identifier:          6nqQni5MHHiNWM2iOZ+vNnoRHmv6luhQ8EauI80YYMQ=
Subject key identifier:   13:F1:57:85:33:9A:67:EC:05:CC:EB:7F:2B:9C:89:57:EB:39:71:ED
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       163EA8AC
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E_FXhTOaZ-wFzOt_K5yJV-s5ce0.roa
Signing time:             Sat 22 Jan 2022 10:26:25 +0000
ROA not before:           Sat 22 Jan 2022 10:26:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147028
IP address blocks:        2a06:a005:4::/48 maxlen: 48
                          2a06:a005:5::/48 maxlen: 48
                          2a06:a005:6::/48 maxlen: 48
                          2a06:a005:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373205164 (0x163ea8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan 22 10:26:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13f15785339a67ec05cceb7f2b9c8957eb3971ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:a9:ac:a5:10:e3:42:83:60:84:26:7b:2d:
                    bf:e2:d9:de:cd:17:1f:62:86:fd:11:76:8f:d7:2a:
                    d4:81:61:be:cd:e8:24:cf:92:32:c2:82:98:1b:a9:
                    b2:f3:14:b1:76:9d:4c:63:13:f3:46:b3:7b:37:08:
                    a7:6d:b3:bb:7f:15:d6:cc:64:47:31:3d:fb:32:6a:
                    2d:33:00:0f:03:c3:51:3f:c2:c0:12:81:09:cf:c2:
                    a9:17:84:ac:69:e6:c7:89:9f:4f:f1:63:42:aa:0b:
                    82:a2:83:c3:8f:d5:f2:19:d3:e3:78:83:4e:ce:15:
                    33:11:15:c4:be:7e:b7:8a:f6:4f:f3:52:bf:30:16:
                    94:1d:bc:37:6d:89:5d:93:86:42:0c:f9:13:ea:01:
                    07:a7:e3:a8:15:13:7b:58:19:41:a0:f3:95:52:68:
                    0e:e9:7c:ec:55:bf:d8:cd:69:c0:14:8d:65:28:3b:
                    30:79:f0:50:0c:87:3d:43:bf:8b:e5:e6:00:b0:f7:
                    cd:f6:18:76:fb:49:28:07:75:f0:3f:ed:d2:94:57:
                    84:85:ef:fc:2e:e3:d9:11:7e:38:04:b0:42:b1:5d:
                    4e:4e:73:c7:7c:9f:45:ce:69:e5:be:67:73:e0:c7:
                    b5:5f:e2:6f:63:ec:9d:cb:c6:a0:98:27:f4:98:e5:
                    68:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:57:85:33:9A:67:EC:05:CC:EB:7F:2B:9C:89:57:EB:39:71:ED
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/E_FXhTOaZ-wFzOt_K5yJV-s5ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:3::-2a06:a005:6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         03:94:c7:c0:da:88:9f:83:64:82:2f:22:7b:63:73:aa:cc:80:
         05:e0:36:81:4f:5c:02:31:73:9e:48:6f:a3:42:b0:2e:99:8a:
         d8:11:f2:48:bc:61:1b:1d:20:10:05:9c:bf:54:6d:eb:f8:1e:
         ad:97:de:f7:db:30:3e:7b:9e:b8:42:3a:bc:01:3e:fe:e1:d9:
         7f:32:b3:ef:aa:8e:44:87:68:56:6d:22:12:14:4f:1e:71:84:
         00:43:1e:78:87:60:42:ee:7a:00:49:5a:62:27:b7:be:d2:fa:
         66:c6:05:12:e6:bd:d5:8b:77:91:27:a9:0f:99:8b:19:ad:d1:
         61:f0:61:b5:32:86:9d:f3:be:99:20:81:f4:bf:43:8a:71:91:
         14:c8:2e:1e:3b:55:1e:34:54:c7:2a:0a:54:b2:af:88:05:e1:
         a5:68:14:ec:a3:24:e9:80:66:47:b3:f2:90:dc:31:6b:25:73:
         d1:a6:0c:49:e8:10:c9:e0:40:6a:8a:88:fa:d5:67:1b:ff:27:
         f8:cf:3f:50:43:0c:82:e1:30:81:51:1f:94:dc:a3:12:7e:30:
         d6:1d:92:0b:e5:7d:17:8e:b1:ab:47:f0:04:5e:f5:2a:d8:4e:
         7e:01:cd:b2:69:9c:18:b8:f1:c2:88:00:8e:ff:c1:6a:7b:86:
         1c:4c:4d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org