Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/A6SzjRRYLfU2NmTL8DgUA6-e9Qo.roa
File:                     A6SzjRRYLfU2NmTL8DgUA6-e9Qo.roa (raw, json)
Hash identifier:          R8pJ+xNnw0bR009A98gr1ov8gavbUSnVi7KsBH06ki0=
Subject key identifier:   03:A4:B3:8D:14:58:2D:F5:36:36:64:CB:F0:38:14:03:AF:9E:F5:0A
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       063D58EB
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/A6SzjRRYLfU2NmTL8DgUA6-e9Qo.roa
Signing time:             Wed 22 Jun 2022 14:18:34 +0000
ROA not before:           Wed 22 Jun 2022 14:18:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211812
IP address blocks:        2a10:4646:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104683755 (0x63d58eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jun 22 14:18:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03a4b38d14582df5363664cbf0381403af9ef50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:ac:58:c8:0b:0e:3f:ba:dc:59:13:7d:d7:
                    7b:16:c6:3b:b6:52:7d:8f:09:13:16:d6:c9:fd:fd:
                    fa:74:12:c6:06:fa:65:a0:a8:7d:bf:92:78:b3:48:
                    2a:ba:6e:4d:96:10:3d:d0:06:78:0f:cd:16:77:f9:
                    e0:25:a7:84:68:16:51:86:71:f6:cd:b8:f1:e8:ee:
                    e9:f9:1c:10:11:ca:1c:7a:37:7d:04:ab:10:4d:93:
                    62:81:f2:94:cd:df:51:13:fc:3d:a9:d8:00:65:68:
                    ca:1d:be:94:82:06:16:14:37:fe:0c:71:81:d0:07:
                    36:21:5f:51:ea:a0:11:20:4d:0d:55:2a:1d:8d:88:
                    fe:9f:3b:08:17:e0:58:91:31:a2:9e:93:86:5e:05:
                    8a:9a:73:0a:db:b6:cd:4d:ad:2d:2b:e0:7a:78:04:
                    74:35:d9:85:f1:47:cd:aa:2a:45:ab:46:a4:ca:66:
                    d6:41:d3:ca:6d:f0:01:bf:6b:2c:fa:3f:a0:ed:92:
                    94:a2:38:55:1d:79:32:cf:ea:6c:c1:6c:d7:95:e7:
                    41:01:7c:c4:ae:bb:5e:02:2d:11:5f:dc:59:6b:75:
                    31:e1:48:bd:c8:a3:51:d1:5b:60:07:b8:40:99:0c:
                    f2:c7:e2:99:58:db:df:ea:c0:38:c7:54:c1:bc:f1:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A4:B3:8D:14:58:2D:F5:36:36:64:CB:F0:38:14:03:AF:9E:F5:0A
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/A6SzjRRYLfU2NmTL8DgUA6-e9Qo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:54:9b:5b:66:b4:11:4c:4e:f4:7b:19:0a:0a:7d:6e:81:b4:
         fe:ac:fa:aa:36:1c:e0:a6:f9:83:21:4a:2f:c7:37:d4:6b:da:
         7e:3a:be:1f:68:88:a5:81:5e:05:a0:b1:c1:34:cf:52:76:b8:
         32:14:f9:58:48:86:76:6e:31:0a:0f:89:fa:c0:50:2f:d3:69:
         99:de:c3:76:37:a3:6f:92:ab:0c:e2:24:de:75:01:e2:82:9d:
         c4:77:c9:82:f2:1e:7f:f8:cb:05:69:ee:28:20:ef:3e:ef:4d:
         5f:cd:0c:73:71:6b:98:86:de:4b:86:79:79:d0:78:24:91:3b:
         c8:90:11:bc:e9:68:9c:2a:ee:18:07:38:d4:be:19:d9:7e:a7:
         3b:34:48:f5:91:6b:5a:a0:7a:3c:f2:90:a5:6e:b3:5b:e8:a8:
         cc:38:25:cf:2a:0b:6c:92:6c:29:93:e9:e8:ff:34:b1:c2:ba:
         27:a2:7a:88:41:e2:83:99:8d:00:25:9a:7e:3b:a3:cd:45:52:
         48:4d:38:e4:c4:8c:a9:81:59:46:e5:57:8f:98:66:1c:d0:9f:
         af:c8:d2:a4:8d:72:b0:1f:64:42:8b:c1:59:b4:fe:64:80:cb:
         87:82:13:22:b2:46:4d:2a:6a:f6:72:3d:07:a3:dc:ad:80:47:
         ec:88:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:34 2024 by rpki-client on console-fra.rpki-client.org