Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gsdsOXMQZ6y7PVQJYvgS73VrPKc.roa
File:                     gsdsOXMQZ6y7PVQJYvgS73VrPKc.roa (raw, json)
Hash identifier:          EtqUclvzXtaVW59IRIyHS0LpX5rIxgltsffvIc+NvSo=
Subject key identifier:   82:C7:6C:39:73:10:67:AC:BB:3D:54:09:62:F8:12:EF:75:6B:3C:A7
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0181CE0AC6DF8FF8F871E23DC3A5A644AC4D
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gsdsOXMQZ6y7PVQJYvgS73VrPKc.roa
Signing time:             Tue 05 Jul 2022 11:07:01 +0000
ROA not before:           Tue 05 Jul 2022 11:07:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140731
IP address blocks:        2a06:a005:a05::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ce:0a:c6:df:8f:f8:f8:71:e2:3d:c3:a5:a6:44:ac:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul  5 11:07:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=82c76c39731067acbb3d540962f812ef756b3ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:a7:92:8c:03:ea:41:80:ac:7b:fc:aa:ed:
                    f4:2e:c7:83:6f:8c:62:35:74:98:c8:81:94:29:d2:
                    73:d9:01:67:0e:f2:a8:a9:bb:93:1f:1c:af:01:ee:
                    cb:ed:21:e0:fa:2e:15:5f:c5:f7:0e:02:89:f7:b7:
                    d4:93:97:b1:d3:66:77:4b:9d:6b:01:ba:11:4d:be:
                    18:ec:49:98:64:7d:76:02:7f:e2:b2:5f:ba:88:9e:
                    49:5b:ad:81:ac:c9:94:01:ff:34:04:0c:34:c1:07:
                    51:7a:0b:c0:b2:35:86:51:6c:30:2c:84:bc:79:b0:
                    62:b8:4f:ca:2d:9a:a8:b2:28:68:d9:e1:7c:6f:a0:
                    3d:9f:0d:29:a8:de:b4:c7:05:8d:86:73:23:69:95:
                    e4:0e:16:14:a0:11:fa:5c:db:f2:d2:44:44:b4:1a:
                    4a:bd:2d:38:c2:e4:09:1f:ce:07:a9:01:47:69:7c:
                    e4:23:b1:d8:06:9f:1f:b6:18:b2:03:51:83:64:62:
                    49:0c:1a:4d:d9:62:4b:90:f5:5a:9c:bc:a2:7d:79:
                    e7:65:3c:67:9e:bf:83:d4:a7:e8:03:56:02:3e:a0:
                    1b:e2:ad:11:03:1c:ce:25:3c:a1:5a:3c:cd:e7:9a:
                    f9:9e:68:36:da:b9:e8:df:ba:37:86:8d:1c:c8:65:
                    95:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C7:6C:39:73:10:67:AC:BB:3D:54:09:62:F8:12:EF:75:6B:3C:A7
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/gsdsOXMQZ6y7PVQJYvgS73VrPKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:a05::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:e0:7f:4d:53:92:1d:1e:4a:58:23:ec:ba:65:67:4e:96:
         45:bd:9c:20:35:73:76:c6:b2:c6:e7:26:2f:b6:00:b4:7a:30:
         c8:73:2f:33:7f:ae:eb:7f:e6:85:79:24:cb:68:f1:a8:c7:0c:
         2c:4f:33:7c:7b:58:75:8e:8e:93:a5:18:b5:28:d3:c8:25:e9:
         ad:8a:76:8b:86:04:1b:65:7e:30:8e:09:79:41:af:99:e4:0c:
         54:5c:09:87:59:f0:cb:fc:6b:e8:39:66:7d:70:be:78:a8:79:
         be:9b:fd:77:b2:0f:30:b4:d7:7c:d2:f3:bb:a1:0b:65:3d:43:
         19:ad:85:1c:cd:f7:3e:9f:bb:7e:21:9c:87:7b:91:d3:07:2c:
         7f:3a:53:05:53:ac:af:a0:b1:5c:24:e5:3d:1c:e5:dd:1f:38:
         3e:1c:30:aa:da:54:81:03:bf:63:6b:2d:2b:ff:f5:ac:2d:48:
         68:41:54:28:72:b1:4c:d2:b2:66:62:78:19:a9:32:0b:2c:d7:
         c6:14:15:bd:93:36:37:f8:5f:f7:80:c8:c3:f1:61:37:b5:3b:
         60:92:52:34:fd:64:9d:98:cb:f0:25:13:6f:f6:cb:87:9c:fb:
         68:49:b9:5c:87:3c:a3:4e:be:fb:ce:28:1e:75:83:63:d9:24:
         1e:8b:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org