Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dg0Io2H_Aqm3RD1wA2JHjJHW6Mw.roa
File:                     dg0Io2H_Aqm3RD1wA2JHjJHW6Mw.roa (raw, json)
Hash identifier:          EwrC7ras3rK5c6SabmpOTCHtlkrW7NRdwClY+/raQkI=
Subject key identifier:   76:0D:08:A3:61:FF:02:A9:B7:44:3D:70:03:62:47:8C:91:D6:E8:CC
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184235DAC2E26E3C7FA733F57ACB93F8776
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dg0Io2H_Aqm3RD1wA2JHjJHW6Mw.roa
Signing time:             Sat 29 Oct 2022 10:50:52 +0000
ROA not before:           Sat 29 Oct 2022 10:50:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201938
IP address blocks:        2a06:a005:2110::/44 maxlen: 48
                          2a06:a005:2120::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:23:5d:ac:2e:26:e3:c7:fa:73:3f:57:ac:b9:3f:87:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Oct 29 10:50:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=760d08a361ff02a9b7443d700362478c91d6e8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:73:42:2b:be:77:f0:f9:2e:83:97:0e:4b:4a:
                    94:d2:a3:74:48:60:4b:b7:a5:3d:90:d4:e0:c4:a5:
                    c3:81:53:1d:cd:86:5d:84:78:6d:a8:01:f8:6a:d7:
                    e9:60:2d:ee:6d:38:02:42:88:44:29:b0:a6:fa:29:
                    22:91:13:3d:e7:91:d3:22:71:70:8f:1a:7a:22:fb:
                    61:1e:a2:88:71:de:db:99:1e:08:b4:88:b8:6e:95:
                    0c:27:84:ef:3d:2b:46:ac:8b:7b:11:ea:df:bf:73:
                    96:38:09:bb:13:c4:c7:94:aa:9c:6d:9a:45:1e:1a:
                    62:d9:ee:2c:52:66:7a:03:18:ca:a7:71:84:f1:b1:
                    03:e4:e7:0c:e4:5d:a2:8f:5d:c5:e8:5f:87:ca:94:
                    29:20:84:fa:58:f4:fe:e1:8f:a5:6d:2b:fd:e5:57:
                    ff:bd:b4:9f:85:d0:5e:2f:b1:34:17:d1:9d:01:e6:
                    39:26:44:dd:59:1f:ce:2d:8e:b2:87:51:b2:7b:2f:
                    e8:33:87:9f:88:13:5d:17:b7:8d:5f:9a:f0:a6:87:
                    0e:b5:47:14:38:06:f7:9e:ef:5d:b5:ec:03:ff:dc:
                    4c:fa:12:74:a8:24:77:25:f5:67:96:51:3e:24:12:
                    ea:1c:ea:43:7a:36:d9:71:a7:ba:6c:79:91:14:ff:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0D:08:A3:61:FF:02:A9:B7:44:3D:70:03:62:47:8C:91:D6:E8:CC
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/dg0Io2H_Aqm3RD1wA2JHjJHW6Mw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2110::-2a06:a005:212f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         80:7f:49:81:5e:33:e8:a9:d0:03:1f:87:54:c2:8a:65:f5:f0:
         c4:01:be:75:9e:9a:1d:6d:e9:87:45:40:16:d2:7d:5c:d2:ef:
         2d:41:1c:d6:69:44:75:e0:19:8b:74:88:44:d8:5e:45:71:82:
         cf:0e:47:df:b5:7e:ef:ba:41:b4:9b:bc:34:04:e3:11:04:b9:
         b5:49:ac:5f:79:46:b2:12:6d:2c:e3:38:3f:2a:bd:64:38:52:
         f7:9d:00:0c:b3:b7:7b:83:9d:8c:0a:a6:45:a1:95:8a:ba:42:
         fd:ec:e8:0b:de:9c:38:7c:90:2a:b3:4a:f5:5c:f0:58:8a:9c:
         f3:5e:81:23:dd:aa:f9:4c:7c:86:ce:0b:6b:18:5f:17:77:c0:
         88:e5:d3:53:84:f8:6f:02:8c:d7:fd:62:6d:16:d2:40:4f:ed:
         4e:be:b7:ef:f3:65:37:ca:86:17:a0:45:67:a0:2d:ae:94:7a:
         ee:4c:31:24:72:14:06:33:7c:99:a4:65:5c:7b:43:94:4a:c1:
         9b:be:71:d6:10:4c:69:cb:22:64:b2:5f:fa:cf:3d:92:ea:ac:
         5f:74:59:cd:bd:86:b7:30:03:95:86:72:24:9a:a1:d2:2d:7b:
         ba:c1:e7:d5:59:da:53:42:2c:e6:c1:f5:eb:53:15:2e:43:65:
         74:8e:14:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org