Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/VslbU2tH59WFOUc-jaqW98iJ_eM.roa
File:                     VslbU2tH59WFOUc-jaqW98iJ_eM.roa (raw, json)
Hash identifier:          fWO/nOI257IhsAUNxtcWvxYBAkBWsY/zpQxqm0i0pg8=
Subject key identifier:   56:C9:5B:53:6B:47:E7:D5:85:39:47:3E:8D:AA:96:F7:C8:89:FD:E3
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       04AB0313
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/VslbU2tH59WFOUc-jaqW98iJ_eM.roa
Signing time:             Sat 01 Jan 2022 10:03:18 +0000
ROA not before:           Sat 01 Jan 2022 10:03:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212065
IP address blocks:        2a10:4646:14::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78316307 (0x4ab0313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: Jan  1 10:03:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56c95b536b47e7d58539473e8daa96f7c889fde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:a9:af:4b:66:d3:c0:69:fe:f3:ff:fb:88:
                    40:5e:df:b1:ac:f3:29:c8:57:39:2c:8a:06:a8:57:
                    09:de:3e:97:44:15:c6:63:56:05:e7:5b:9e:e6:37:
                    0f:04:46:52:fd:00:65:30:bb:20:94:64:10:d9:ae:
                    65:89:21:85:7c:a1:cc:55:ab:3a:71:98:c6:e4:fb:
                    7a:1f:aa:10:69:1a:fc:82:6f:ab:fc:71:06:c0:e5:
                    e6:ba:29:3e:af:f2:7b:cd:ec:4d:19:6f:13:ad:ad:
                    61:77:b5:31:f5:27:c2:30:ee:f2:a4:e3:73:46:8e:
                    89:5a:cd:49:e5:39:f1:d7:bd:2d:fd:1c:da:ef:2b:
                    ac:b2:0c:40:44:8f:4a:6a:58:cd:83:82:05:0c:3f:
                    96:80:30:de:40:c1:74:4e:fc:22:46:eb:24:8d:b2:
                    94:ae:ca:6d:dd:28:dd:64:99:39:24:63:fa:71:9c:
                    4b:c4:06:a2:9b:81:ff:49:e5:80:9b:c8:27:17:e8:
                    9f:f7:38:6f:58:03:cb:86:64:db:75:9e:15:5b:42:
                    26:f5:7c:1e:b9:29:be:77:5a:12:d9:19:81:26:73:
                    1e:7b:2a:31:7d:00:28:49:b5:e5:44:30:0a:75:5c:
                    cc:da:0f:6c:17:63:d2:cc:47:4c:73:fd:a3:a1:b9:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:5B:53:6B:47:E7:D5:85:39:47:3E:8D:AA:96:F7:C8:89:FD:E3
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/VslbU2tH59WFOUc-jaqW98iJ_eM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:c4:0b:a4:04:70:50:81:16:ef:fa:8a:88:63:e6:85:e6:aa:
         e7:88:ff:c3:e4:dc:6a:6b:66:20:0e:0a:9b:f8:73:01:44:ef:
         86:77:fc:8c:90:0c:71:28:17:d6:08:ae:e2:47:bb:4d:e4:23:
         21:f7:04:77:27:6a:65:94:fd:1d:fb:30:f3:ec:21:2f:5f:aa:
         6b:28:45:37:19:e3:c2:b5:28:88:4d:89:73:e1:f3:f8:ee:73:
         af:94:22:c9:2c:22:f8:b8:35:a5:3c:24:05:57:db:4f:f5:df:
         6a:0c:ef:9a:43:82:bd:a8:3a:f4:95:d4:8b:64:1f:42:a9:66:
         29:ba:06:27:23:ac:74:10:05:b9:88:cd:9f:5f:61:bd:a0:ca:
         74:f6:42:dd:2c:72:8c:e3:7f:d8:a7:f7:67:f0:a0:9b:89:24:
         cf:9a:db:a6:2d:83:d9:9f:9a:a4:45:20:10:f9:fc:b9:be:e6:
         77:f9:a1:ea:57:f8:2a:1b:70:93:6d:66:36:6f:4b:36:3f:5f:
         96:ac:b7:a0:19:1b:65:9d:1d:7c:f4:b4:be:52:b0:bc:00:05:
         99:3c:b7:f8:cd:34:c3:38:07:74:9b:90:c4:f6:19:76:7a:ce:
         07:16:d3:2b:1f:54:3c:ab:27:21:f8:30:aa:36:bf:24:07:08:
         04:bb:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org