Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/byGOwM7VV8hS35bIp6wC_uPBb-I.roa
File:                     byGOwM7VV8hS35bIp6wC_uPBb-I.roa (raw, json)
Hash identifier:          ealgkkx/XONzaUeH0cQqPqYOLSzEXot/vgtxWrMpP60=
Subject key identifier:   6F:21:8E:C0:CE:D5:57:C8:52:DF:96:C8:A7:AC:02:FE:E3:C1:6F:E2
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CB1A15
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/byGOwM7VV8hS35bIp6wC_uPBb-I.roa
Signing time:             Wed 04 May 2022 21:14:50 +0000
ROA not before:           Wed 04 May 2022 21:14:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206569
IP address blocks:        2a10:4646:1a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97196565 (0x5cb1a15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f218ec0ced557c852df96c8a7ac02fee3c16fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:26:e4:35:f8:65:05:3c:f1:f7:1c:1b:fa:cf:
                    5a:be:52:5f:7e:1f:73:52:64:61:e2:14:d3:8f:96:
                    d7:32:b7:85:70:6a:aa:df:2e:29:cd:a8:1a:05:ee:
                    17:15:c7:d8:74:e6:47:0f:a0:73:38:3f:40:8c:aa:
                    09:b4:9a:72:3b:2a:c6:3a:8e:44:1c:61:b2:46:59:
                    1d:e3:95:87:dd:90:65:e1:be:8c:c7:cd:be:ee:45:
                    e2:dd:a1:44:21:df:7e:1e:92:45:eb:7c:bb:69:35:
                    b7:1d:e8:4a:de:67:d2:48:e8:f6:02:2a:84:2c:8e:
                    cb:89:54:c6:29:76:86:1f:95:59:7d:38:02:7f:cb:
                    12:20:3d:c5:a6:00:47:09:0f:11:6a:05:f6:a9:bf:
                    32:3a:8e:97:21:4a:63:44:ef:00:d6:d5:69:8d:d8:
                    32:6f:d0:86:07:5f:d0:2a:29:67:e4:36:5c:e1:db:
                    33:56:e8:f4:20:01:20:9e:13:81:1b:cd:9f:80:64:
                    f1:1f:5d:94:73:88:9d:47:7f:42:ff:0d:34:d9:60:
                    1b:0a:1d:9f:84:7c:08:5b:13:ac:a3:17:6d:e0:d3:
                    14:b5:d5:d2:b4:54:52:61:9d:9e:9e:6f:bf:da:56:
                    9b:96:f0:47:10:87:16:1d:89:4c:53:64:86:67:f1:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:21:8E:C0:CE:D5:57:C8:52:DF:96:C8:A7:AC:02:FE:E3:C1:6F:E2
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/byGOwM7VV8hS35bIp6wC_uPBb-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:1a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:df:bc:98:3d:a6:6d:56:4a:b8:83:4e:ef:32:68:e1:3f:
         0b:45:1e:48:02:7f:e7:a7:b4:3b:11:a0:53:fe:af:96:ac:48:
         d5:d7:d9:cd:e6:79:67:a1:70:e1:02:40:12:ef:b3:f5:68:fd:
         53:fa:eb:ec:b8:58:b0:51:e2:46:81:32:1a:22:1a:d7:13:e9:
         a3:42:fa:99:11:e0:bd:c3:43:99:ed:93:7c:13:7b:5e:e5:cf:
         2a:af:86:17:0a:cd:47:ce:cc:af:66:26:a4:94:60:be:e9:59:
         d3:6f:50:73:3e:c9:a7:3f:5d:a5:42:81:f4:28:53:dc:d5:d2:
         f9:f6:16:c6:cc:0f:e4:ae:be:07:b6:81:58:0e:4e:f2:e4:15:
         b3:a6:47:09:66:49:d1:c0:36:8e:58:c1:48:3c:ed:c1:47:de:
         1b:d5:86:4c:5e:6e:80:6e:a8:be:42:3b:75:75:dd:35:47:77:
         a6:8a:9d:9d:4c:5d:07:ae:d3:32:c3:90:68:a6:0c:b7:21:5c:
         5b:bb:bb:b8:26:0f:f5:e0:1a:80:2c:6a:b5:c1:35:3d:2a:09:
         db:76:4c:52:ad:0a:93:ac:b6:2a:ae:4b:87:f9:4c:62:17:56:
         b8:72:29:63:49:06:20:90:77:fb:f1:38:d6:02:eb:eb:38:cf:
         22:35:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:35 2024 by rpki-client on console-fra.rpki-client.org