Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID2xU12CWfs9aUuLpwJy7hBbhRU.roa
File:                     ID2xU12CWfs9aUuLpwJy7hBbhRU.roa (raw, json)
Hash identifier:          dzgii10vrdvc629ntQmSuRR+bVR+9ph5kgz6Tr0Z6w0=
Subject key identifier:   20:3D:B1:53:5D:82:59:FB:3D:69:4B:8B:A7:02:72:EE:10:5B:85:15
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15E843D9
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID2xU12CWfs9aUuLpwJy7hBbhRU.roa
Signing time:             Tue 04 Jan 2022 02:29:57 +0000
ROA not before:           Tue 04 Jan 2022 02:29:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207740
IP address blocks:        2a06:a005:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367543257 (0x15e843d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  4 02:29:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=203db1535d8259fb3d694b8ba70272ee105b8515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:03:67:03:ee:4f:e0:30:1b:bc:96:eb:eb:bc:
                    de:e6:ee:a2:64:3d:69:dd:e1:20:14:a8:1f:bf:28:
                    95:5c:91:88:a6:7b:96:4c:df:d7:0d:4a:20:82:0a:
                    bc:5e:b2:2e:71:33:8d:29:20:38:f0:27:a2:6c:e4:
                    26:42:4d:09:83:5a:15:04:1c:0c:f6:9d:b1:36:b8:
                    5f:61:f7:17:fe:86:f0:38:84:4a:0a:9a:e3:95:7e:
                    41:80:cb:ca:ba:36:09:b9:f0:9f:29:43:76:7b:16:
                    3b:4a:33:8a:a3:9c:2d:03:85:1d:84:11:4c:02:fb:
                    31:3b:0c:58:8e:20:8b:38:58:72:21:44:0a:40:20:
                    5d:47:6f:76:8a:c5:ff:82:c8:1e:7a:e2:ed:1e:b5:
                    e7:f6:50:72:b3:7e:ac:61:e0:a0:18:28:96:88:cd:
                    cc:8b:f1:22:28:ca:3f:08:58:e8:01:96:d9:26:d7:
                    cc:50:85:76:98:ae:ee:2c:10:6c:8d:a0:06:a1:21:
                    92:17:3d:e4:90:7e:e4:82:0d:81:28:9d:c1:54:29:
                    56:1f:66:f1:9f:fc:1d:56:a3:7f:3a:66:8b:30:69:
                    19:b6:59:92:0b:ca:20:23:8f:28:4f:cd:e0:d8:61:
                    28:9b:df:b2:27:a2:0f:aa:a3:de:b9:01:55:fe:18:
                    58:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:B1:53:5D:82:59:FB:3D:69:4B:8B:A7:02:72:EE:10:5B:85:15
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/ID2xU12CWfs9aUuLpwJy7hBbhRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:b8:6f:2c:b2:ec:d8:f2:c8:bb:5f:a4:2a:0a:0c:1f:36:
         27:63:c0:df:c8:0c:98:ef:b8:1d:2c:ae:45:75:14:3c:cf:24:
         6a:75:f2:0f:e1:a4:d8:96:f5:e2:1c:13:1c:0e:39:b5:e9:cb:
         6b:03:0f:96:c2:fb:04:60:94:86:f3:c6:f3:3d:b0:4e:c0:9a:
         9c:fd:31:5e:d4:76:04:f4:6a:cd:c8:4e:25:a3:16:4f:47:2e:
         8b:8f:2c:48:ac:0e:f6:fb:26:68:a5:ed:22:20:5c:1a:cd:5c:
         9d:8a:80:c5:a4:bd:87:05:05:f0:c3:b7:42:5f:9e:31:31:d6:
         16:d2:fd:88:bb:c2:63:36:37:59:88:0e:77:41:fb:47:fc:86:
         9b:79:c8:86:65:1d:b1:fc:65:cd:a2:51:08:60:81:ab:75:4c:
         3c:de:a8:65:78:74:68:7e:2d:a9:1e:f7:73:cb:77:29:67:58:
         28:9c:98:df:11:95:33:dc:75:42:ac:5a:bc:5c:5c:df:ea:1b:
         13:09:f8:db:e2:7b:48:b3:45:23:e3:88:f2:8c:7c:0d:12:fa:
         1c:48:8f:df:4d:31:46:44:fd:a2:ab:05:0c:bb:73:93:99:40:
         6a:da:77:35:a5:e2:68:5f:b9:9e:92:b2:86:67:ed:ba:aa:43:
         b4:17:e5:c7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFehD2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NDkxNDU0MWZkMWI5NWU3YzBhZmM4NzVmYmVmNzg3OTRmNTUzODZiMB4XDTIyMDEw
NDAyMjk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjAzZGIxNTM1ZDgy
NTlmYjNkNjk0YjhiYTcwMjcyZWUxMDViODUxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPsDZwPuT+AwG7yW6+u83ubuomQ9ad3hIBSoH78olVyRiKZ7
lkzf1w1KIIIKvF6yLnEzjSkgOPAnomzkJkJNCYNaFQQcDPadsTa4X2H3F/6G8DiE
Sgqa45V+QYDLyro2CbnwnylDdnsWO0oziqOcLQOFHYQRTAL7MTsMWI4gizhYciFE
CkAgXUdvdorF/4LIHnri7R615/ZQcrN+rGHgoBgolojNzIvxIijKPwhY6AGW2SbX
zFCFdpiu7iwQbI2gBqEhkhc95JB+5IINgSidwVQpVh9m8Z/8HVajfzpmizBpGbZZ
kgvKICOPKE/N4NhhKJvfsieiD6qj3rkBVf4YWLkCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQgPbFTXYJZ+z1pS4unAnLuEFuFFTAfBgNVHSMEGDAWgBRUkUVB/RuV58Cv
yHX773h5T1U4azAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZKRkZRZjBibGVmQXI4aDEtLTk0ZVU5Vk9Hcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvNDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8x
L0lEMnhVMTJDV2ZzOWFVdUxwd0p5N2hCYmhSVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
NDY0NjMxLWNhOGUtNGM2YS1iMDkxLWQ5ZjZkOTY0MjUzNy8xL1ZKRkZRZjBibGVm
QXI4aDEtLTk0ZVU5Vk9Hcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGoAUABzANBgkqhkiG9w0BAQsF
AAOCAQEAHQy4byyy7NjyyLtfpCoKDB82J2PA38gMmO+4HSyuRXUUPM8kanXyD+Gk
2Jb14hwTHA45tenLawMPlsL7BGCUhvPG8z2wTsCanP0xXtR2BPRqzchOJaMWT0cu
i48sSKwO9vsmaKXtIiBcGs1cnYqAxaS9hwUF8MO3Ql+eMTHWFtL9iLvCYzY3WYgO
d0H7R/yGm3nIhmUdsfxlzaJRCGCBq3VMPN6oZXh0aH4tqR73c8t3KWdYKJyY3xGV
M9x1QqxavFxc3+obEwn42+J7SLNFI+OI8ox8DRL6HEiP300xRkT9oqsFDLtzk5lA
atp3NaXiaF+5npKyhmftuqpDtBflxw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org