Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa
File:                     pV3AByft93kMSKTIXqwmtf27_x8.roa (raw, json)
Hash identifier:          9e5+DsIbKi9jbnPOBrdEHlXkCyYQViBJPGEOoaGhHJM=
Subject key identifier:   A5:5D:C0:07:27:ED:F7:79:0C:48:A4:C8:5E:AC:26:B5:FD:BB:FF:1F
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018278A579242A8851E830E50FA734D6A489
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa
Signing time:             Sun 07 Aug 2022 14:11:26 +0000
ROA not before:           Sun 07 Aug 2022 14:11:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203453
IP address blocks:        2a06:a005:5a2::/48 maxlen: 48
                          2a06:a005:1670::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:78:a5:79:24:2a:88:51:e8:30:e5:0f:a7:34:d6:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug  7 14:11:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a55dc00727edf7790c48a4c85eac26b5fdbbff1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:31:2d:31:a3:3b:dd:37:12:7f:21:7c:3b:
                    eb:ac:21:85:a7:0a:cc:77:8a:ac:48:aa:c5:da:4f:
                    23:cb:8e:48:74:97:c4:6f:25:b5:26:8b:f1:6e:ef:
                    3b:16:d3:ba:91:69:c2:6d:b5:eb:47:7c:f4:50:6b:
                    7a:9e:cc:47:8e:26:16:cc:13:c7:10:48:55:62:77:
                    68:e0:46:9c:91:15:50:25:91:49:1d:c6:7f:af:10:
                    2c:8d:4d:bf:ea:9b:95:ef:a8:08:a8:f7:79:e1:66:
                    18:89:c9:25:56:15:30:40:e3:98:76:3a:da:ef:a6:
                    21:76:83:11:ec:b0:87:a8:19:53:3a:5c:d2:d5:08:
                    54:2a:f8:c5:a7:77:45:cb:b6:af:12:c4:9b:f1:90:
                    ee:3e:40:b7:98:aa:9e:ee:25:9e:d9:ce:d4:81:32:
                    d1:6b:ab:6f:7d:2d:cc:51:9d:be:9c:1f:d2:ee:e7:
                    6c:77:20:9d:2c:66:78:24:40:0a:bd:dd:21:f7:93:
                    d6:fd:f4:6e:a3:0b:72:cc:bf:93:66:70:8e:da:2b:
                    1c:77:b7:f0:fc:07:8d:2e:10:f8:7e:64:f1:92:a1:
                    91:51:25:c7:1f:d9:63:d9:b5:10:4e:66:fc:ef:03:
                    ef:dd:95:78:7c:9d:c0:07:dc:4a:f6:b4:15:57:a2:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5D:C0:07:27:ED:F7:79:0C:48:A4:C8:5E:AC:26:B5:FD:BB:FF:1F
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/pV3AByft93kMSKTIXqwmtf27_x8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a2::/48
                  2a06:a005:1670::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:1a:b8:5f:73:c2:11:c9:6e:44:b2:27:12:9f:5f:29:00:c2:
         22:2c:e7:2f:9e:46:cb:28:13:60:c8:71:2c:13:3e:16:60:33:
         d3:b9:fe:0a:0b:32:2c:38:fd:65:d0:c7:60:ad:68:f0:3d:6f:
         1e:1b:94:d0:6a:95:e4:a3:b2:61:f5:86:f1:d9:29:0a:64:f6:
         b2:94:02:ef:da:18:17:d1:5f:21:55:26:03:97:d7:62:1a:5a:
         e4:d0:d3:22:e5:39:9f:33:ff:54:14:19:c8:e9:9b:96:af:2c:
         35:8b:46:3f:55:b9:16:ff:5b:72:aa:a3:e7:50:1a:0b:45:be:
         28:86:00:a0:3f:af:11:9d:0b:5f:11:f4:0f:55:60:52:93:10:
         f3:23:a5:28:f3:c5:b9:0d:21:e7:23:d9:53:08:2c:d1:9d:00:
         7e:12:a5:a3:ca:09:94:2d:fc:b3:b1:74:f0:f0:86:37:71:1b:
         9b:a6:52:6e:6e:32:19:44:9a:42:e8:07:07:9b:1f:86:df:52:
         a4:b5:dd:41:85:71:b0:e8:e1:3e:be:fe:3e:40:a6:dd:29:40:
         18:32:0b:77:32:78:60:3e:b2:ab:49:89:aa:ca:73:7a:7a:dc:
         fe:4e:0c:4b:4e:1d:bf:71:1c:76:63:b6:23:a9:94:8a:c3:51:
         16:3a:3c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:12 2024 by rpki-client on console-fra.rpki-client.org