Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tY4T_cxitD24cFweOgVo-q4Y2FI.roa
File:                     tY4T_cxitD24cFweOgVo-q4Y2FI.roa (raw, json)
Hash identifier:          41fs8I5twMf4YucjU+PDB9vV/Ntut9nT9+8yIm44+F4=
Subject key identifier:   B5:8E:13:FD:CC:62:B4:3D:B8:70:5C:1E:3A:05:68:FA:AE:18:D8:52
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       19CBE281
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tY4T_cxitD24cFweOgVo-q4Y2FI.roa
Signing time:             Sat 14 May 2022 21:41:39 +0000
ROA not before:           Sat 14 May 2022 21:41:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205092
IP address blocks:        2a06:a005:930::/44 maxlen: 48
                          2a06:a005:940::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432792193 (0x19cbe281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: May 14 21:41:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b58e13fdcc62b43db8705c1e3a0568faae18d852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:ac:06:7e:ba:68:d1:16:d8:6f:1c:4e:3d:
                    ff:46:23:50:60:46:dd:6c:5a:91:5d:ed:4f:30:20:
                    c5:83:6a:2f:e1:62:77:9f:14:bc:27:96:89:22:1f:
                    3e:c1:c4:dd:a0:99:11:1a:b8:5f:ad:79:58:47:90:
                    70:43:04:c8:d9:12:b6:c3:38:ba:03:1b:f4:56:09:
                    d5:a7:9f:73:49:6f:99:b0:7a:ea:b7:bb:df:d8:02:
                    cc:f8:da:78:5b:cf:85:94:00:b4:aa:05:92:dd:ef:
                    5d:a7:11:f4:e2:43:a0:03:c7:be:36:a0:fc:cc:74:
                    31:39:bf:30:56:4d:18:9f:28:c6:f9:59:e0:cc:af:
                    76:f4:1c:47:15:3f:89:61:3c:a2:fe:f8:2e:5c:71:
                    f8:6b:aa:64:fb:a3:7e:4b:5d:64:b6:6e:ac:73:f7:
                    72:93:1e:17:4d:53:92:88:f6:68:2e:61:bb:35:81:
                    30:fd:00:df:39:a3:dd:6a:2e:cd:c9:1f:97:5f:de:
                    43:59:a7:d7:f1:6f:b7:76:4c:b3:65:53:e7:dc:78:
                    87:7e:fc:c1:7e:c8:23:66:56:7e:6c:73:01:63:46:
                    b7:fc:90:bb:50:31:64:5b:d1:b2:5f:11:f4:e9:18:
                    e2:5d:1a:94:d4:bf:15:31:f7:b6:cf:d5:88:27:4a:
                    c6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8E:13:FD:CC:62:B4:3D:B8:70:5C:1E:3A:05:68:FA:AE:18:D8:52
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tY4T_cxitD24cFweOgVo-q4Y2FI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         41:02:52:79:3c:95:8c:5c:74:a8:39:20:e0:db:85:3b:9b:d3:
         b3:31:f8:b1:1b:3b:86:e4:95:c3:21:9a:1c:93:63:a2:a3:c7:
         6f:00:5d:f6:ea:b5:66:99:3f:3c:7b:ab:ef:23:f4:fe:18:59:
         48:10:89:82:ee:4b:d3:07:da:af:90:1b:d0:37:00:26:cf:b9:
         17:b8:17:09:27:9a:52:4f:64:b9:11:72:3d:a1:44:6f:9d:67:
         ae:31:57:67:bc:c7:44:0e:c9:3b:86:ec:45:56:a4:ee:43:6f:
         59:fc:8e:9a:48:9f:ee:94:94:a7:74:dd:15:8f:d9:af:b7:36:
         a9:fc:b9:e4:5b:5e:41:d4:f1:78:ba:9f:87:06:19:0c:60:9e:
         ec:b3:36:61:a3:8a:5c:e6:cf:94:87:80:d5:14:48:22:cb:9f:
         d4:d1:c4:93:29:01:d6:ec:3d:e9:7e:e8:94:12:cc:08:0e:f2:
         ae:81:37:fa:ab:c5:47:e9:e6:2d:45:2a:6d:04:4e:21:4e:24:
         79:4a:cd:4c:ed:48:11:cf:64:ca:04:63:78:26:99:bc:73:38:
         9b:fd:ea:a1:55:d0:9a:06:dc:91:97:7c:43:cf:6b:6a:c5:ae:
         72:8f:9a:99:c5:5f:8a:66:53:66:65:16:d7:ce:bd:a6:73:08:
         3b:07:74:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:03 2024 by rpki-client on console-ams.rpki-client.org