Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa
File:                     hTCI68FBBxuQ2-Im-KEQPSY8fps.roa (raw, json)
Hash identifier:          +qkm1o38G+t+4KPWrZj4rFYwYU7tZIpGoo7hXzGTGJA=
Subject key identifier:   85:30:88:EB:C1:41:07:1B:90:DB:E2:26:F8:A1:10:3D:26:3C:7E:9B
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       196BF83B
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa
Signing time:             Sat 07 May 2022 10:05:21 +0000
ROA not before:           Sat 07 May 2022 10:05:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44406
IP address blocks:        2a06:a005:740::/44 maxlen: 48
                          2a06:a005:4e0::/44 maxlen: 48
                          2a06:a005:780::/44 maxlen: 48
                          2a06:a005:670::/44 maxlen: 48
                          2a06:a005:760::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426506299 (0x196bf83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May  7 10:05:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=853088ebc141071b90dbe226f8a1103d263c7e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:22:fb:c6:9b:c5:e9:53:19:5f:85:31:4c:
                    6b:d3:df:5a:8a:7a:f6:d9:53:b4:e9:02:d3:f7:d4:
                    41:2d:27:ea:b7:0a:b4:6c:91:d7:fe:4a:7b:8b:78:
                    27:e5:05:c1:1e:d2:43:2b:f6:16:68:a7:d5:3c:cf:
                    9b:51:83:c5:4c:09:89:b3:79:a9:88:ee:b4:20:2e:
                    ed:ae:57:93:1e:56:53:5f:99:22:2e:6d:34:22:9a:
                    a0:18:92:55:0c:be:e7:3e:86:f1:18:93:74:21:15:
                    0b:42:40:a4:61:73:81:9f:b1:73:dc:48:86:1b:bf:
                    f2:e2:72:69:2d:10:20:bc:33:9c:db:0e:79:08:73:
                    1a:29:6a:1f:04:e4:f4:46:29:66:5d:e5:1d:71:a9:
                    b8:cd:a5:ce:2f:96:82:75:13:95:b1:f9:b1:4d:6f:
                    d9:77:ef:cc:a3:b6:13:33:af:d5:a2:1f:a5:1d:cb:
                    0f:d0:15:66:9c:a4:18:6c:b0:ba:78:f4:98:67:53:
                    84:0b:5d:7c:8b:cd:bc:8e:23:b8:64:72:0d:b0:5c:
                    e9:c2:3f:d3:82:9a:81:5c:f3:0e:03:65:56:58:7e:
                    3b:b9:af:cb:36:48:3d:77:97:5e:f8:8f:e0:9c:a6:
                    9b:d2:86:6e:ad:21:2f:a2:fd:02:ff:28:53:49:ac:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:88:EB:C1:41:07:1B:90:DB:E2:26:F8:A1:10:3D:26:3C:7E:9B
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/hTCI68FBBxuQ2-Im-KEQPSY8fps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:4e0::/44
                  2a06:a005:670::/44
                  2a06:a005:740::/44
                  2a06:a005:760::/44
                  2a06:a005:780::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:b2:42:07:09:7c:fd:74:b0:0c:74:cb:1c:a6:8d:f5:da:
         91:d8:03:65:ab:14:07:3f:e3:9d:bd:11:d8:a4:fd:75:cf:16:
         46:ab:07:71:83:e2:aa:74:3b:10:93:56:f2:2d:aa:a8:ab:94:
         25:fe:cf:89:c4:9d:e5:b9:14:aa:9e:82:e2:2e:60:01:6f:01:
         0b:f0:8c:2e:03:eb:df:50:61:f6:1c:42:46:c8:e1:03:1e:87:
         28:fb:65:87:3a:7a:35:5f:5a:ea:f6:e4:ef:2a:ea:07:6d:5a:
         b6:49:5f:5c:b2:c2:a1:79:9a:4f:73:3a:3b:d7:8f:71:3f:e6:
         d2:85:d9:08:83:e8:2f:73:ba:0f:6c:c8:7d:f9:86:3f:a4:9b:
         48:86:0a:8f:ad:3e:eb:89:7d:a3:d0:c4:25:6f:99:64:84:c2:
         0e:89:41:e6:5f:44:1b:a9:f0:28:d7:94:1e:38:8e:3e:dd:c2:
         22:96:42:bb:1c:d0:9e:9e:1e:03:ec:be:14:2c:b3:55:b0:8c:
         19:42:12:0e:2e:1d:51:d3:5f:b0:74:7e:a4:38:30:79:38:08:
         f9:14:2d:c2:8c:7e:a3:d5:b5:b8:ad:47:88:a7:27:c6:69:92:
         72:dd:6f:db:bb:1e:50:22:39:bb:66:c9:40:8e:33:0f:5d:0f:
         d7:92:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org