Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa
File:                     qpUYwQOar0UQ6IO8-16HegcvnQw.roa (raw, json)
Hash identifier:          LRniP5327BKz/cD7uQcTPcFh0NJ+pHURokkJPAITgYs=
Subject key identifier:   AA:95:18:C1:03:9A:AF:45:10:E8:83:BC:FB:5E:87:7A:07:2F:9D:0C
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       01824807C0DB3B4090E84F12664B57F73444
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa
Signing time:             Fri 29 Jul 2022 03:37:23 +0000
ROA not before:           Fri 29 Jul 2022 03:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203655
IP address blocks:        2a06:a005:1480::/44 maxlen: 48
                          2a06:a005:13f0::/44 maxlen: 48
                          2a06:a005:1470::/44 maxlen: 48
                          2a06:a005:1400::/44 maxlen: 48
                          2a06:a005:13e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:48:07:c0:db:3b:40:90:e8:4f:12:66:4b:57:f7:34:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 29 03:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa9518c1039aaf4510e883bcfb5e877a072f9d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:4f:18:39:f9:00:6f:d6:61:9d:e0:85:72:
                    b0:4c:7d:d3:37:06:ab:d7:66:e0:62:c0:d7:40:53:
                    71:aa:b6:dc:52:91:0e:c1:18:04:f2:13:5b:84:a9:
                    12:84:c8:02:00:8b:b0:57:2e:7f:c9:e3:a9:b1:0f:
                    f1:06:63:ef:40:ef:14:96:2a:d1:c9:6a:b3:bd:55:
                    d1:17:b5:f4:50:24:0f:a3:31:2d:38:93:57:13:75:
                    68:5a:05:f5:39:d7:96:5c:04:67:48:7c:e8:a3:8a:
                    bc:63:00:f1:72:ad:f6:33:bf:9c:0e:d9:9a:cf:25:
                    9b:b1:90:ef:2b:92:6f:4f:29:81:1d:1d:94:6f:e8:
                    06:96:2a:ed:f2:84:c8:05:bf:80:bc:72:51:e9:4c:
                    ce:4a:85:3b:5d:90:8a:64:2f:26:2a:08:c2:85:a3:
                    bf:04:8f:03:24:a9:15:59:dd:fa:6e:e5:da:ce:6b:
                    90:2f:ec:3f:37:60:d2:8d:48:ca:b7:c6:b0:29:04:
                    67:53:36:36:c3:e0:cb:ed:e2:cd:43:f5:e4:1f:13:
                    a2:32:ab:3b:6b:b0:c0:ab:9b:9c:53:21:07:4f:ca:
                    c7:f5:5b:c0:ca:ae:59:bb:9a:dc:83:15:47:e2:f8:
                    38:d8:a6:22:60:1e:2d:48:28:41:89:c0:d4:58:3e:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:95:18:C1:03:9A:AF:45:10:E8:83:BC:FB:5E:87:7A:07:2F:9D:0C
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/qpUYwQOar0UQ6IO8-16HegcvnQw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:13e0::-2a06:a005:140f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1470::-2a06:a005:148f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         60:89:87:4d:04:c1:b0:5f:00:17:07:84:e7:15:e5:aa:4e:2f:
         8b:9a:58:8e:fc:ba:33:3c:5c:9d:e1:a4:a4:e8:29:c0:2a:8b:
         cf:90:ce:1b:e3:cd:16:3a:f3:49:39:68:d1:0c:e6:5d:a7:86:
         3f:9b:34:85:6e:73:6b:8a:9d:24:d6:6d:02:52:ad:01:de:2d:
         9c:20:b9:93:31:88:1a:c0:5c:a0:99:0c:55:42:a2:35:2f:9b:
         55:da:8b:05:bc:94:56:b7:ad:8f:18:e8:cc:d7:2e:b5:4c:f2:
         f0:4c:f8:ee:3d:11:6f:8b:da:a4:1d:27:5d:6f:10:a2:a5:ce:
         d8:7c:b4:7c:70:fc:65:6d:7d:7a:b3:6e:d6:d2:d5:b3:fa:51:
         38:a5:d4:3b:d9:6a:a6:8b:a9:d4:7f:f0:80:26:9b:a7:82:e1:
         a7:f5:e7:ae:ba:8f:bc:14:36:d6:69:b7:68:3a:e3:7c:9b:d6:
         e6:bc:ac:25:fe:85:3c:ec:b0:5c:78:6b:e5:de:f6:e8:13:f0:
         50:f8:ab:17:45:5a:14:16:33:43:61:b9:b4:b6:51:22:bc:6c:
         25:6f:ab:24:5d:a5:fb:8d:bd:50:e9:ca:0f:66:95:40:c5:97:
         f8:81:27:85:1a:af:90:54:c4:33:5e:f8:92:bd:50:c7:6b:d9:
         59:44:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org