Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j77YlU_nAjDYI3gZFKyh26roJwM.roa
File:                     j77YlU_nAjDYI3gZFKyh26roJwM.roa (raw, json)
Hash identifier:          CNZKVWMnIwrBKYLQM3TsARb4CRPMz+hOVG5xbYIYWn0=
Subject key identifier:   8F:BE:D8:95:4F:E7:02:30:D8:23:78:19:14:AC:A1:DB:AA:E8:27:03
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01826510EBEAC3A3533389E9FD7988981DAB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j77YlU_nAjDYI3gZFKyh26roJwM.roa
Signing time:             Wed 03 Aug 2022 18:56:23 +0000
ROA not before:           Wed 03 Aug 2022 18:56:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213383
IP address blocks:        2a06:a005:480::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:65:10:eb:ea:c3:a3:53:33:89:e9:fd:79:88:98:1d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  3 18:56:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fbed8954fe70230d823781914aca1dbaae82703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:2f:77:39:18:c1:42:77:93:a5:52:bd:31:
                    1b:cf:84:83:c0:2c:f5:16:a7:59:70:ac:86:35:73:
                    e7:0c:98:1c:13:46:99:2f:a2:35:e1:3d:5f:be:06:
                    a4:d2:82:b4:d4:42:5e:d0:b1:23:96:8f:39:d2:fd:
                    81:2b:0f:1e:90:e8:20:94:a0:fe:f3:00:21:ed:6f:
                    77:0f:f3:61:97:17:2c:24:6d:17:9a:70:fd:9a:4a:
                    82:8f:02:ec:97:43:8f:9b:f0:01:04:94:62:ca:cd:
                    83:53:e6:67:c3:40:e4:3e:be:b9:10:c2:3b:af:91:
                    2c:0d:96:b2:97:e2:4e:3b:d1:07:2b:ec:ed:1b:d9:
                    f2:de:2c:65:41:22:c9:ec:ed:35:88:9b:23:a7:d1:
                    b1:4c:ad:c9:9f:90:74:f9:f9:e3:a0:87:bd:e2:ec:
                    47:41:7c:31:7d:f0:1b:8d:34:e0:a2:e8:35:82:27:
                    cc:3f:1c:ea:e8:09:73:d7:8a:97:b7:aa:1e:e0:65:
                    16:91:a5:10:a0:f5:ad:b5:bf:94:53:6a:de:ea:4e:
                    89:50:68:7b:0a:c1:0b:29:b5:ee:bf:bb:f7:3d:c5:
                    ef:24:f8:b7:68:23:2a:81:4a:19:ad:83:5a:57:77:
                    a4:13:27:ed:cf:e8:86:d9:c1:29:a0:a3:7c:65:bb:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:D8:95:4F:E7:02:30:D8:23:78:19:14:AC:A1:DB:AA:E8:27:03
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/j77YlU_nAjDYI3gZFKyh26roJwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:480::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:f4:0d:d7:99:8d:18:57:19:29:49:0c:b6:3a:47:17:30:3c:
         f9:f8:28:57:1b:87:6e:78:11:f7:17:df:e9:7e:7b:b7:51:78:
         39:f6:64:95:06:92:57:d8:2a:a4:28:ad:02:79:98:74:5c:39:
         9c:fb:66:5a:62:32:e5:d7:b5:06:3e:98:ec:d1:f6:f4:67:89:
         e1:6a:10:c7:c7:c3:b7:a0:e2:ef:be:d8:9e:04:04:bb:f4:e1:
         64:5b:7e:9d:91:c3:09:e7:f9:34:de:98:e5:8c:12:57:b7:35:
         f6:f4:e4:86:a2:2f:31:a7:d5:a2:28:65:67:c8:55:ae:d8:90:
         5d:65:a0:52:93:7b:f2:7e:f5:0d:55:83:07:71:69:d4:cb:b2:
         04:81:31:18:39:ad:a8:19:bf:fa:c7:e2:a1:09:59:ba:59:9b:
         a2:f1:c7:05:7a:c4:ef:bf:e9:f6:90:c5:70:77:c6:05:4e:28:
         87:74:68:17:c3:62:2e:79:0a:c5:d2:2c:5c:41:71:48:1f:f0:
         2f:73:54:ee:43:5a:21:e8:18:d7:7c:e8:e0:87:51:e0:17:84:
         9a:9b:c9:00:f6:0a:e3:ff:37:ce:56:1a:5d:e1:77:b7:41:99:
         68:27:7f:13:d7:aa:79:d1:c5:0b:2e:f1:70:c2:c6:cf:74:7f:
         07:97:98:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org