Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/THOhLz3Pgt5jSgje0xvTWztVIBA.roa
File:                     THOhLz3Pgt5jSgje0xvTWztVIBA.roa (raw, json)
Hash identifier:          yBrFDdbS/WyXZSsGSdDB5a9RFXejamNGRpY5gzT2pJs=
Subject key identifier:   4C:73:A1:2F:3D:CF:82:DE:63:4A:08:DE:D3:1B:D3:5B:3B:55:20:10
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01832D1131194CCF6E36632615A5EA66DC97
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/THOhLz3Pgt5jSgje0xvTWztVIBA.roa
Signing time:             Sun 11 Sep 2022 15:00:44 +0000
ROA not before:           Sun 11 Sep 2022 15:00:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202996
IP address blocks:        2a06:a005:1c00::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:2d:11:31:19:4c:cf:6e:36:63:26:15:a5:ea:66:dc:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 11 15:00:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c73a12f3dcf82de634a08ded31bd35b3b552010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9f:89:37:84:d4:4b:02:8a:8c:5d:0e:ae:57:
                    f9:79:b0:01:d7:8f:2a:29:93:46:a3:66:75:e8:36:
                    e2:c7:30:95:c3:a3:8d:e6:79:7f:fa:c0:14:20:d1:
                    55:03:50:79:5e:1d:6f:d2:90:98:4f:a9:e6:12:9c:
                    82:aa:7a:13:49:64:2b:59:ed:7c:96:b3:08:f2:ce:
                    8b:57:f4:5f:44:c1:ff:b0:87:49:53:f8:0d:22:01:
                    2b:d5:0b:6a:67:ae:3c:1d:40:39:b4:7a:02:b3:b5:
                    98:d6:b2:6b:d0:06:6a:4e:36:b9:85:62:e7:6a:88:
                    0b:b3:23:ae:ae:74:38:8a:35:af:7b:9b:10:eb:eb:
                    51:29:fa:37:e7:1e:0d:14:80:cd:e6:a8:a7:a5:e7:
                    e2:70:4c:12:e4:6c:f4:0b:c8:57:7d:65:fa:8e:05:
                    22:60:b4:a6:bc:58:55:d0:1c:8c:10:02:95:65:8d:
                    0d:61:26:be:0a:fd:b0:00:ff:d4:fa:fb:90:78:2e:
                    11:88:2c:e4:ba:d4:55:a5:39:6d:26:8e:1a:56:1c:
                    39:9a:ce:7f:72:aa:c6:9a:aa:85:c0:ad:8d:2b:55:
                    1d:07:da:98:5e:92:5d:1f:3e:9f:be:aa:f9:3b:13:
                    b8:99:c5:44:2d:1e:7e:a9:02:09:d8:9e:bb:fd:1f:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:73:A1:2F:3D:CF:82:DE:63:4A:08:DE:D3:1B:D3:5B:3B:55:20:10
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/THOhLz3Pgt5jSgje0xvTWztVIBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1c00::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:74:a2:3a:7f:07:c3:d9:38:54:eb:fc:4b:6a:64:1b:f3:c3:
         04:f7:7c:ed:ee:06:24:89:f7:c9:51:c9:46:a2:ab:95:54:25:
         4b:89:4f:61:c7:8e:c1:a9:6a:e7:4c:a2:19:a3:69:1e:34:5e:
         d4:5b:c1:9d:a0:10:06:cc:0d:84:bb:b4:d5:68:a9:9b:31:15:
         7d:52:b8:cf:ea:a1:c1:87:63:ce:22:0e:96:52:66:c4:ce:f0:
         74:91:65:da:a4:7f:3a:2e:ca:94:d3:4e:3f:50:98:71:e1:34:
         84:9b:5b:ec:7a:92:f0:bb:ff:bc:44:0c:10:9e:3d:26:16:34:
         6d:de:8b:2a:a9:92:ad:d7:3f:92:1f:dd:a7:1b:3d:45:3c:5b:
         58:82:6d:ca:a2:17:bc:ec:94:f3:a4:d6:2d:8e:5e:c7:0d:4b:
         ce:38:02:09:5f:79:dd:c7:48:d0:8e:62:01:ad:a6:51:a9:59:
         9f:c7:60:92:b8:e4:e7:ce:cd:ce:b1:c7:d1:07:32:a1:b6:36:
         d3:1f:5b:8c:b0:cc:90:6c:5b:c8:45:78:d1:d7:5e:01:e9:1a:
         66:69:12:21:f0:32:f6:84:71:fa:5b:d6:b0:55:5c:eb:15:9a:
         3f:5f:ca:f9:9a:6b:7b:a9:be:c7:eb:e1:6f:d4:54:cf:24:50:
         51:eb:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org