Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tmjt2Osvu62Ipk9FRBrv-9AGSFg.roa
File:                     tmjt2Osvu62Ipk9FRBrv-9AGSFg.roa (raw, json)
Hash identifier:          fnYptBMAZNtQA9SE7x2QaOniZ79yViL2DCMnp4T2Y6I=
Subject key identifier:   B6:68:ED:D8:EB:2F:BB:AD:88:A6:4F:45:44:1A:EF:FB:D0:06:48:58
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       1B851D21
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tmjt2Osvu62Ipk9FRBrv-9AGSFg.roa
Signing time:             Tue 28 Jun 2022 18:59:02 +0000
ROA not before:           Tue 28 Jun 2022 18:59:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204992
IP address blocks:        2a06:a005:fc0::/44 maxlen: 48
                          2a06:a005:5f3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461708577 (0x1b851d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jun 28 18:59:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b668edd8eb2fbbad88a64f45441aeffbd0064858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bf:81:b3:8a:b3:e0:ba:8b:73:e8:16:7c:5d:
                    10:3f:05:e0:1d:69:d2:38:16:1f:18:f4:00:b8:70:
                    b8:63:91:34:af:df:ba:48:af:56:28:3f:cf:e4:43:
                    4a:9b:f3:72:6f:e6:5b:2b:b1:3c:98:73:25:3d:2c:
                    f5:78:30:b4:3b:8b:b5:19:f0:cf:44:2c:e3:11:7f:
                    94:26:18:cf:6f:4a:3a:03:1c:ae:e4:61:65:ba:d9:
                    48:06:9d:1a:c8:67:2c:d3:0a:8b:40:c6:e0:17:14:
                    d5:b2:65:7d:a6:ef:f8:0c:7a:48:68:5f:9d:b5:5a:
                    c0:78:4e:9d:dd:f2:dc:67:db:e5:b1:63:71:3a:a9:
                    76:14:99:02:17:16:42:36:48:16:96:7e:81:7b:48:
                    59:4e:68:3e:15:8e:c7:ea:b2:e1:b7:c0:11:36:95:
                    60:c7:51:94:16:35:1b:e8:ac:b9:d3:d5:e1:90:7e:
                    73:98:d0:cd:b1:2c:24:44:ca:ec:72:9a:7e:16:66:
                    e0:be:47:79:a2:16:76:ce:bd:4e:6f:ba:6f:6f:ee:
                    b4:15:a7:ba:83:8a:38:9a:1e:33:94:1c:86:68:40:
                    09:94:01:75:54:8f:9f:ee:28:07:cc:7c:f2:79:d5:
                    78:71:85:1d:36:08:74:49:cc:e3:b3:79:e6:00:41:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:ED:D8:EB:2F:BB:AD:88:A6:4F:45:44:1A:EF:FB:D0:06:48:58
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/tmjt2Osvu62Ipk9FRBrv-9AGSFg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5f3::/48
                  2a06:a005:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:ec:6a:77:5a:c4:b1:87:a0:1d:ea:f9:ec:23:b5:86:06:
         74:c3:05:80:70:cc:be:25:7d:f2:26:95:cc:fb:f1:54:ac:e2:
         64:65:8e:df:c1:37:ba:9d:52:6a:65:6e:e6:67:e1:7d:0b:2d:
         be:bb:7b:9e:43:d1:b7:7a:96:ce:c9:4a:02:75:34:87:57:71:
         6d:a9:2e:67:2f:f8:d5:cc:8f:6e:cc:ee:7c:e5:54:8f:f1:17:
         ee:53:68:b9:db:e9:e2:33:7a:07:cd:7a:a3:64:21:37:6a:30:
         29:ee:cb:fc:84:f2:20:5c:39:14:94:90:fd:2a:5e:0b:a4:10:
         fe:89:4f:37:47:1b:bd:bb:98:6e:15:d1:be:29:ad:53:20:26:
         8d:83:d7:7a:ef:6b:2b:cc:51:f6:7b:08:8a:e5:c1:e8:56:3b:
         5e:48:dc:66:04:b6:ce:17:1b:17:e3:20:4d:18:01:ba:70:e7:
         63:54:4d:de:78:0c:01:4f:21:a7:99:61:e2:14:a9:70:50:8e:
         8a:84:40:48:8e:5b:95:4e:7a:2f:c0:60:4f:2c:f4:cf:97:10:
         39:ba:7d:8e:76:96:17:48:3a:73:26:bd:b5:a1:0d:10:55:c8:
         a1:dd:15:95:88:0a:5d:63:37:14:1e:bf:35:24:e0:ed:c8:3b:
         41:2c:af:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:13 2024 by rpki-client on console-fra.rpki-client.org