Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/vJIaXkWo1WOrUZCXfWzdyKc4paY.roa
File:                     vJIaXkWo1WOrUZCXfWzdyKc4paY.roa (raw, json)
Hash identifier:          oAUw03QcTROnlDH3pIlwT6s1IML4rEpAjfoNbKX5+J0=
Subject key identifier:   BC:92:1A:5E:45:A8:D5:63:AB:51:90:97:7D:6C:DD:C8:A7:38:A5:A6
Certificate issuer:       /CN=5afc91718462e5de210097413199d6ce1365776c
Certificate serial:       0181DACF8BBDC2A0570506D4E13A0DAB34FE
Authority key identifier: 5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/vJIaXkWo1WOrUZCXfWzdyKc4paY.roa
Signing time:             Thu 07 Jul 2022 22:37:23 +0000
ROA not before:           Thu 07 Jul 2022 22:37:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     701
IP address blocks:        2a12:6800::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:da:cf:8b:bd:c2:a0:57:05:06:d4:e1:3a:0d:ab:34:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afc91718462e5de210097413199d6ce1365776c
        Validity
            Not Before: Jul  7 22:37:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc921a5e45a8d563ab5190977d6cddc8a738a5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:01:1d:89:ac:2a:bc:16:9f:b6:d7:71:d7:
                    82:ce:94:f8:72:a7:1a:05:c9:44:4d:bf:4d:53:d8:
                    25:df:b7:2b:cb:17:64:45:9c:0d:c5:ab:c0:ce:77:
                    3a:22:25:bb:25:43:7c:41:f5:2a:11:66:6e:d2:44:
                    6e:66:ff:90:8b:16:0a:e7:a6:ce:28:df:dc:39:16:
                    82:1e:56:16:cc:75:fd:4c:6e:ea:43:7f:ad:0c:f4:
                    14:ae:3a:e1:61:ba:68:d7:2a:2b:c6:a4:fe:44:89:
                    8d:6e:d8:64:3f:64:73:95:31:18:2d:48:1f:32:88:
                    3b:9e:67:13:49:a0:39:1d:58:98:9b:27:cf:15:38:
                    a5:06:c7:73:56:9f:14:48:a1:2f:b5:c3:36:74:0b:
                    f2:40:da:11:c2:b4:a5:da:26:9a:c4:41:b7:c5:55:
                    af:2d:7c:4d:b8:07:af:c1:51:f0:61:bf:ec:7c:0c:
                    52:8d:ee:f8:d4:51:d0:16:59:aa:20:74:a2:07:92:
                    63:0c:da:a6:3d:94:f7:24:70:bb:62:1c:1c:4b:c5:
                    f3:93:ee:54:69:bb:65:b8:52:d5:e8:da:d3:c6:65:
                    0b:d4:d9:d3:4f:f7:b3:cf:8d:78:32:53:53:90:76:
                    f4:50:b9:10:f8:bc:a6:48:d8:c2:41:57:dd:e0:82:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:1A:5E:45:A8:D5:63:AB:51:90:97:7D:6C:DD:C8:A7:38:A5:A6
            X509v3 Authority Key Identifier:
                keyid:5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/vJIaXkWo1WOrUZCXfWzdyKc4paY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:6800::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:64:78:4a:c8:c6:dd:cf:75:3f:af:08:34:d2:3d:ec:1e:80:
         cc:4a:1a:d0:f0:90:e4:ba:66:c9:d8:df:47:84:ee:af:52:07:
         f0:1b:4a:3c:dd:9c:15:7e:16:40:8c:11:86:35:39:fc:a0:ca:
         70:db:18:2e:03:1d:62:41:ce:d6:91:40:be:13:af:f3:36:fa:
         26:64:5f:3d:43:aa:06:36:8a:21:d6:e3:c5:3b:f7:a3:53:06:
         b9:fc:06:b6:c5:4c:98:8b:67:18:5b:17:10:48:6e:62:af:2a:
         39:9a:ec:a5:45:8a:44:65:9e:63:af:c3:82:31:2c:80:ff:00:
         c1:a0:63:49:dc:8c:39:ce:39:b6:11:3e:76:46:ab:01:ed:c6:
         86:bb:21:ba:48:e9:18:2b:5d:18:9b:6a:fc:67:87:d0:df:24:
         5a:3e:86:97:1a:8a:c2:d4:24:41:73:11:2e:72:82:a0:21:47:
         b9:32:07:d6:84:64:f0:ea:a5:cf:2f:c8:bc:ae:f4:70:a2:6c:
         0c:41:aa:8c:c1:f3:85:8c:c6:28:83:61:fa:2e:bd:8e:37:61:
         27:bc:b5:44:87:7b:cb:d7:8e:32:bc:49:07:3b:b1:57:ec:3c:
         ce:3e:17:6a:e3:a6:4b:88:6f:22:16:8f:a7:9a:f7:17:68:c9:
         43:ca:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:15 2024 by rpki-client on console-fra.rpki-client.org