Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa
File:                     T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa (raw, json)
Hash identifier:          ObcnO7cUdVw5X415lonXVbX6602eNQQIW0///uRaCJ0=
Subject key identifier:   4F:E5:A7:1A:6E:77:7D:89:99:CA:66:84:66:74:F7:43:D9:28:D8:FC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184102380F77672776BB46769AEDDE80854
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa
Signing time:             Tue 25 Oct 2022 17:14:32 +0000
ROA not before:           Tue 25 Oct 2022 17:14:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204508
IP address blocks:        2a06:a005:d29::/48 maxlen: 48
                          2a06:a005:5f2::/48 maxlen: 48
                          2a06:a005:f50::/44 maxlen: 48
                          2a06:a005:1930::/44 maxlen: 48
                          2a06:a005:5fa::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:10:23:80:f7:76:72:77:6b:b4:67:69:ae:dd:e8:08:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 25 17:14:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4fe5a71a6e777d8999ca66846674f743d928d8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9a:fb:63:1a:5a:c5:81:8d:45:cf:3c:64:4b:
                    8e:8c:03:a1:0a:83:fd:53:eb:86:32:3f:94:91:8f:
                    9d:67:67:8b:20:fb:a4:dc:1a:f6:58:b2:df:5f:65:
                    af:e2:2a:e1:0a:63:6f:4f:81:80:91:8e:04:c8:a3:
                    60:4a:b8:53:05:7b:93:37:f1:ac:24:66:04:92:ea:
                    95:73:4a:d6:63:77:e1:da:04:91:ef:d8:52:7c:52:
                    36:f2:3f:a8:eb:e8:30:0d:06:f2:12:ca:42:fe:e0:
                    bb:f9:7f:2b:4b:2f:43:c9:7a:b6:56:68:00:55:8b:
                    10:d6:2a:e0:47:ef:a9:0e:ab:48:18:48:a2:27:a1:
                    07:17:da:26:d0:5c:04:6a:c9:ca:4f:ff:42:91:32:
                    ca:e3:15:8c:29:ab:6b:d8:e9:04:3a:f0:d5:3c:58:
                    cb:83:6e:a4:a8:ec:ad:dc:bf:21:ef:3d:43:dc:ad:
                    e0:80:b4:19:e8:c7:7c:e2:c8:dd:5a:bd:e4:ea:91:
                    69:ce:6c:dc:4c:bb:b3:a0:e8:f8:a0:46:78:4b:4d:
                    c1:93:00:df:69:d0:4a:29:c1:cd:cc:9b:74:b8:46:
                    72:94:80:6a:51:8e:27:3e:96:27:f1:3c:86:8d:9b:
                    d3:35:a8:9c:ac:34:1f:81:d4:ca:6f:85:fc:af:3c:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E5:A7:1A:6E:77:7D:89:99:CA:66:84:66:74:F7:43:D9:28:D8:FC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/T-WnGm53fYmZymaEZnT3Q9ko2Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f2::/48
                  2a06:a005:5fa::/47
                  2a06:a005:d29::/48
                  2a06:a005:f50::/44
                  2a06:a005:1930::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:78:28:41:83:5b:69:7a:43:36:3a:92:1e:0a:4c:8d:5d:31:
         d6:9c:4f:30:ca:9e:03:a5:f7:a4:14:3c:f2:6f:50:6c:5c:be:
         08:32:64:5a:1e:8d:a9:5f:1c:b7:dd:8e:26:0c:97:d2:5f:49:
         16:19:0c:f0:bc:53:cf:bd:25:01:15:1c:5a:23:01:83:00:da:
         8e:c0:9a:87:88:8b:ce:de:f2:24:e8:68:1c:74:23:68:0c:3a:
         c0:83:e9:97:ad:16:69:31:c1:e8:39:22:7e:e4:bb:6b:c6:ac:
         f9:62:69:90:ed:e0:57:37:f4:40:28:fd:59:72:a5:1f:ec:25:
         bb:72:16:a9:1e:7d:75:9f:da:2e:0f:7d:72:8d:6e:b3:06:8c:
         e5:7e:3e:d7:42:44:85:17:60:a2:c4:f7:66:c7:54:f3:35:48:
         8d:ca:e4:a5:41:db:a8:b1:a5:2b:02:4a:90:fe:d4:66:61:d2:
         a7:10:03:32:d1:0e:01:f7:69:f2:40:3c:27:11:00:1b:7c:80:
         85:5d:d8:aa:39:1c:fa:52:4b:ef:ca:fa:83:e8:a5:0c:ab:42:
         99:61:af:e2:1c:1d:ce:44:c3:5a:dd:d1:ce:f2:6b:cd:50:12:
         58:a9:32:a6:74:be:fe:4f:1e:f4:dc:bd:f9:10:41:24:43:ff:
         55:eb:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org