Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa
File:                     PBDkC4SbPTysw62GDgb0q2MWSxk.roa (raw, json)
Hash identifier:          yZ+3bhqdipnXMhqnOuP/eSOeVYyjF7tE9VO8kfVLbHk=
Subject key identifier:   3C:10:E4:0B:84:9B:3D:3C:AC:C3:AD:86:0E:06:F4:AB:63:16:4B:19
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0183F2682A54F7628FD4A229DFBE0B5B25FD
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa
Signing time:             Wed 19 Oct 2022 22:40:56 +0000
ROA not before:           Wed 19 Oct 2022 22:40:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1018
IP address blocks:        2a06:a005:5f8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f2:68:2a:54:f7:62:8f:d4:a2:29:df:be:0b:5b:25:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 19 22:40:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c10e40b849b3d3cacc3ad860e06f4ab63164b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:32:8a:9a:d1:83:56:eb:1e:49:ce:64:32:
                    d0:c1:5a:71:59:30:f7:2a:c1:7e:9c:bf:2c:8e:6e:
                    a6:65:45:04:d5:2f:ea:9b:28:9d:02:57:1c:c2:38:
                    9a:55:d8:39:f6:90:1f:7a:e5:bd:ec:89:14:bf:7d:
                    83:6d:06:7b:61:d3:ec:ae:b8:1c:2d:56:70:dd:a7:
                    68:91:aa:79:a2:98:9e:81:07:94:e1:31:f0:03:be:
                    24:0d:19:df:18:ff:16:47:0d:d5:21:78:fb:db:28:
                    97:1c:98:0f:01:91:02:09:68:6b:41:e1:cb:65:65:
                    6c:b6:03:05:6d:66:88:4c:48:54:0d:05:d3:8f:b5:
                    a6:e0:23:17:c7:7c:43:b3:fb:ae:ed:59:6c:fa:03:
                    6f:84:19:3f:fe:fa:d3:4a:17:4a:8b:fa:01:19:7f:
                    90:4d:d5:43:f6:6c:53:18:13:a2:47:5f:db:f1:7a:
                    6f:a5:c4:04:2a:5a:05:6a:32:4c:22:b5:eb:97:db:
                    26:82:fd:39:3e:2a:9d:98:9e:07:90:4e:92:69:44:
                    5c:08:90:f8:3c:03:57:c2:4f:9f:c2:fe:54:6e:b7:
                    10:b0:25:0b:23:5e:64:1c:ee:c2:16:f6:fa:5b:10:
                    27:3c:83:ea:96:e2:67:90:03:aa:bd:2f:a4:27:a9:
                    2a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:10:E4:0B:84:9B:3D:3C:AC:C3:AD:86:0E:06:F4:AB:63:16:4B:19
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/PBDkC4SbPTysw62GDgb0q2MWSxk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:d1:9e:29:ce:a1:4c:3b:08:42:91:62:85:d5:55:fb:74:bc:
         49:64:9e:f8:74:82:a4:88:bc:53:83:ec:90:0d:2b:8e:02:73:
         3d:ad:e7:39:0f:51:b8:30:7f:1d:af:18:c5:97:e4:a5:59:e0:
         14:08:bb:90:a3:22:5c:a0:12:d0:bc:00:78:83:73:f5:74:f7:
         dc:78:42:7a:81:fa:43:3b:d9:ac:7c:53:7a:f0:5c:15:ca:5b:
         32:0e:eb:8b:0a:c6:74:fc:a5:3a:b8:0a:89:49:14:6a:d3:a3:
         bd:fb:51:49:d9:44:9a:ed:f3:65:fb:65:37:f2:4c:71:6b:6e:
         9e:72:5c:ab:ef:66:03:fa:dd:8e:23:d8:65:23:27:fb:03:0a:
         19:15:5d:b1:5e:87:06:0d:0f:7f:10:0e:10:2f:b4:43:34:78:
         eb:33:8e:c0:9d:44:5b:0d:4d:8f:b2:31:ab:b3:4b:2e:9e:12:
         41:81:7c:3b:64:26:e8:49:4a:ce:fa:f2:0f:d7:1b:9f:14:a7:
         d6:ce:30:e1:59:89:15:98:dd:74:25:3c:53:35:6e:2a:fc:38:
         65:9d:38:7e:72:7b:ea:73:1a:05:c4:18:e8:d7:a7:2a:0b:64:
         d9:18:0a:3a:15:8d:5f:e8:36:ed:54:38:14:68:5b:34:ef:9d:
         46:35:02:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org