Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pH-9OFwPcXlZHPlHAr2QTmJyPzk.roa
File:                     pH-9OFwPcXlZHPlHAr2QTmJyPzk.roa (raw, json)
Hash identifier:          0ua7VK2FIS6q0d54jysfW6M5aST0XxgNUG1wnalpuhQ=
Subject key identifier:   A4:7F:BD:38:5C:0F:71:79:59:1C:F9:47:02:BD:90:4E:62:72:3F:39
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018219D3238B594A8B7D20C199E6AA71D760
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pH-9OFwPcXlZHPlHAr2QTmJyPzk.roa
Signing time:             Wed 20 Jul 2022 04:17:23 +0000
ROA not before:           Wed 20 Jul 2022 04:17:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209310
IP address blocks:        2a06:a005:438::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:19:d3:23:8b:59:4a:8b:7d:20:c1:99:e6:aa:71:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 20 04:17:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a47fbd385c0f7179591cf94702bd904e62723f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:d1:44:17:d1:dd:b5:5c:a8:9a:39:1e:d3:
                    6c:d7:43:ec:a1:ad:77:55:bf:d5:e5:b5:d6:d8:8b:
                    38:f7:3d:dc:06:b9:c3:ed:02:e6:2b:1a:7f:11:82:
                    f1:30:38:82:77:83:dd:65:e3:ff:10:18:06:53:bb:
                    c4:98:c9:3b:b5:65:b7:ae:e2:a1:22:e4:2c:f8:58:
                    8d:84:bd:15:1b:e8:8e:b7:0f:c2:95:79:c8:d9:dd:
                    98:c5:35:34:e5:be:c4:7c:67:c6:27:32:a7:14:08:
                    ac:4a:e8:da:2e:79:82:55:d5:8e:db:dd:d6:cc:06:
                    b6:dc:26:ca:e4:99:c7:1f:f0:32:18:ad:8d:c4:c6:
                    12:e7:e2:12:f7:eb:cb:53:4b:67:4d:94:41:f4:c3:
                    73:7e:75:15:0d:51:fb:01:bc:6b:3c:57:a5:f7:bc:
                    8b:cb:90:d1:81:97:d0:92:88:13:41:ba:25:e3:67:
                    6b:1a:1d:c7:72:da:10:e0:e7:e1:76:8f:90:db:ba:
                    6e:56:cb:00:2c:c0:0d:9f:fb:5d:09:3d:e6:be:59:
                    b7:ea:ff:6b:36:c5:8b:e1:47:42:01:cd:40:87:57:
                    62:1c:fb:90:b8:c9:d2:95:2a:53:e9:13:ab:6a:c6:
                    e1:9f:b3:8a:d3:45:da:f1:53:83:da:a8:c0:35:1b:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:BD:38:5C:0F:71:79:59:1C:F9:47:02:BD:90:4E:62:72:3F:39
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pH-9OFwPcXlZHPlHAr2QTmJyPzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:438::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:54:f5:95:5b:31:99:eb:d4:e1:ac:b9:da:57:1d:45:cc:
         0e:7b:dd:6d:53:f2:0d:a6:c1:19:dc:f4:13:b2:da:19:d4:ca:
         ae:c7:f7:bb:36:fb:c7:b1:82:1f:a1:c8:69:25:4c:c9:fa:5c:
         75:e5:03:32:0e:ce:de:9a:47:fb:f7:70:a6:f0:b8:92:ee:71:
         62:34:e8:30:20:9b:85:9f:30:08:64:80:bc:ec:64:ca:70:ae:
         ae:65:6b:21:be:6d:15:30:ab:73:83:db:80:e8:9a:4b:0f:2c:
         13:3d:7f:f9:06:ff:cb:77:62:63:17:28:dd:a6:e1:40:98:3c:
         9c:99:f8:44:e1:e8:0c:d1:47:82:4c:67:4e:bb:eb:06:bd:58:
         64:53:74:78:08:a9:50:f0:a6:bb:dc:f3:9d:bb:2d:63:b0:78:
         a9:04:a0:22:62:d3:81:b4:d4:46:cd:86:aa:d7:6b:6f:3e:34:
         c8:4c:6f:23:4e:ac:f9:9f:b5:df:0c:55:44:20:5d:95:96:75:
         40:96:5c:e7:e7:52:0c:2d:f0:16:6f:fb:83:39:33:47:08:7e:
         63:01:7a:15:27:8b:94:ac:a6:d5:eb:b0:48:93:fe:99:58:9f:
         17:3d:f7:80:eb:25:12:30:67:97:ce:86:2a:1c:83:08:41:da:
         af:90:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org