Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa
File:                     f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa (raw, json)
Hash identifier:          Xs4gtbmQlOfItGeUfEdga7ETsj6Y4SkQD51WYNY1Omg=
Subject key identifier:   7F:D4:A4:D9:E9:F6:3E:90:1C:FB:64:3F:41:C9:6B:9C:E2:7B:68:64
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182360AA6BCEDFD3CCAE6FFC21325248F5D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa
Signing time:             Mon 25 Jul 2022 15:47:23 +0000
ROA not before:           Mon 25 Jul 2022 15:47:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208223
IP address blocks:        2a06:a005:890::/44 maxlen: 48
                          2a06:1287:3900::/40 maxlen: 48
                          2a06:a005:770::/44 maxlen: 48
                          2a06:a005:4de::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:36:0a:a6:bc:ed:fd:3c:ca:e6:ff:c2:13:25:24:8f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 25 15:47:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fd4a4d9e9f63e901cfb643f41c96b9ce27b6864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:97:c0:2c:ff:c6:5f:ee:33:e5:9d:6a:ae:
                    97:57:db:b9:f4:1b:8b:6c:0d:d0:b9:00:dd:88:c4:
                    6a:3e:83:28:53:4d:24:8b:e1:80:43:ba:bc:d8:5c:
                    61:f7:32:eb:27:11:04:87:0e:04:c3:63:13:e0:20:
                    99:51:74:31:b2:c7:32:e0:67:f5:c1:9f:64:57:ef:
                    9d:de:c5:68:e3:18:91:cb:06:c8:26:14:ba:a2:69:
                    7a:e3:a9:c7:28:32:b4:e3:ec:8c:31:e6:55:60:58:
                    57:f3:28:56:f4:cf:b7:02:79:82:78:a4:9a:ed:8d:
                    ab:1e:6f:94:48:71:52:1d:67:8b:db:cd:5b:a2:67:
                    60:fa:a2:34:f0:2d:5a:5a:84:42:85:ce:db:fb:dc:
                    4f:b5:02:d5:c7:3e:5b:f3:7f:ba:81:b9:df:9f:b0:
                    fc:9d:cb:cd:5f:68:2e:73:3e:ff:ea:08:9c:68:f8:
                    91:ae:a8:a5:78:97:59:b6:6d:57:f6:70:b8:2c:fd:
                    5e:7d:a0:dc:58:f2:30:cb:ea:4c:1f:fb:e0:21:30:
                    a4:10:00:fc:92:d4:39:e5:a7:08:49:c2:81:33:8d:
                    be:56:6c:b0:67:14:15:4f:5a:2c:fd:86:42:5d:4c:
                    09:0a:c5:be:96:f6:06:4f:11:93:29:f0:7e:9b:92:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:A4:D9:E9:F6:3E:90:1C:FB:64:3F:41:C9:6B:9C:E2:7B:68:64
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/f9Sk2en2PpAc-2Q_QclrnOJ7aGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1287:3900::/40
                  2a06:a005:4de::/48
                  2a06:a005:770::/44
                  2a06:a005:890::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:2b:30:c5:b5:75:cd:72:2e:de:d3:f1:45:c8:4c:69:e0:67:
         40:51:f5:e5:d5:5a:75:20:6c:07:1a:e1:7d:d4:c0:9e:b1:88:
         6c:19:d2:a5:aa:01:a0:2f:e4:7e:f4:19:0a:a4:97:c8:67:47:
         35:21:30:41:29:fb:7d:84:a4:03:fa:1f:61:c6:38:50:f7:12:
         84:5f:2f:86:70:00:42:63:04:60:de:49:84:d5:c3:a9:f2:5e:
         f7:a3:ec:2c:78:ff:97:24:0c:2a:05:c2:c3:fd:2e:9f:b2:8d:
         4a:8b:d6:26:8e:84:93:36:3d:0e:75:78:e2:5d:9e:be:40:a1:
         ba:64:ef:9f:a0:e3:c9:73:86:18:ed:a9:3e:bc:41:f8:41:4c:
         3a:a2:97:f9:f9:b3:bf:0a:18:99:9d:f9:cf:56:a5:86:44:21:
         a0:c8:17:2e:a4:e0:99:26:5a:c0:65:0f:46:60:d7:ec:f3:88:
         2b:53:ff:5b:19:40:39:8d:35:36:30:8b:d7:1f:ca:fb:39:c4:
         ba:e0:1d:a9:7e:9f:9f:6a:bb:93:90:14:3f:57:b7:e9:3f:3b:
         9a:b5:82:40:59:08:52:93:29:9d:37:1e:6c:7a:da:9f:f5:d0:
         c6:e1:e4:73:3c:23:0f:db:5a:c5:d5:ac:d3:0c:87:85:29:5e:
         c3:10:50:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org