Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa
File:                     nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa (raw, json)
Hash identifier:          zNPO5aV7jH/Ty3knXMUu/FXGYw+WVoREgToIoe7LDx4=
Subject key identifier:   9D:F2:04:FC:03:57:E0:DC:B2:3D:7A:3B:46:2D:AE:CD:C2:98:10:9D
Certificate issuer:       /CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
Certificate serial:       05CB9451
Authority key identifier: B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa
Signing time:             Wed 04 May 2022 21:14:51 +0000
ROA not before:           Wed 04 May 2022 21:14:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210864
IP address blocks:        2a10:4646:a0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97227857 (0x5cb9451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70d0e166fa5f2c7855b024b35c47e57bdc55656
        Validity
            Not Before: May  4 21:14:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9df204fc0357e0dcb23d7a3b462daecdc298109d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:0f:f8:cf:48:13:aa:28:a7:13:f1:0c:de:
                    cf:66:1d:ac:86:7c:a1:14:8f:b9:75:ce:14:71:06:
                    4a:2f:dd:8b:ad:e3:0a:23:fc:4e:5e:e9:0e:89:25:
                    b9:71:a1:27:27:fb:63:bb:2e:a6:e0:e4:85:a2:e9:
                    96:ba:e8:89:45:b4:8e:4f:f6:fd:1b:03:b9:5c:09:
                    2d:02:aa:10:d2:cb:ed:f4:13:7e:18:cc:f5:cb:ae:
                    7e:60:d3:e8:63:4a:5b:fc:7e:3a:ed:b2:57:a9:d5:
                    89:dd:3e:07:48:67:89:11:27:1b:5c:80:06:f2:26:
                    e8:a7:44:f5:db:58:40:33:2d:54:e4:e7:12:50:53:
                    1e:9f:ca:9f:bc:60:84:e9:8b:1a:24:f3:6a:e8:58:
                    85:4f:0c:69:2a:9c:81:d7:e6:3c:d5:fc:52:fd:2d:
                    35:44:45:76:4e:c9:6f:a6:11:35:67:d5:16:69:29:
                    41:e2:44:12:53:6e:3b:29:c0:e6:da:4b:51:ee:77:
                    ab:01:3f:cc:91:32:83:65:cb:0f:46:02:a2:2d:4c:
                    e7:01:88:b9:c2:d8:09:1f:5d:0d:02:4d:c5:51:88:
                    54:2e:44:e2:52:bd:7f:ca:5f:c5:13:8a:78:17:ce:
                    3f:89:8e:24:f9:38:6a:c3:d6:9e:91:a8:97:28:69:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F2:04:FC:03:57:E0:DC:B2:3D:7A:3B:46:2D:AE:CD:C2:98:10:9D
            X509v3 Authority Key Identifier:
                keyid:B7:0D:0E:16:6F:A5:F2:C7:85:5B:02:4B:35:C4:7E:57:BD:C5:56:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw0OFm-l8seFWwJLNcR-V73FVlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/nfIE_ANX4NyyPXo7Ri2uzcKYEJ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c7c4a8-342c-4ed9-b521-a2fa42ec362e/1/tw0OFm-l8seFWwJLNcR-V73FVlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4646:a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:86:91:cc:d0:d0:09:b5:31:53:51:19:ce:69:ab:78:43:c2:
         a7:e7:55:5a:9b:f9:7d:69:7c:7d:a2:17:b6:2b:69:55:25:6b:
         99:43:8b:d6:0e:ff:61:93:05:e2:d5:58:d8:b9:3b:55:eb:3e:
         9b:fe:dc:ea:21:f4:02:1c:6a:72:46:99:d8:34:b3:ae:29:fa:
         a6:27:36:db:03:13:69:b0:68:80:fe:41:8e:e9:b8:2c:b1:58:
         57:20:60:f7:c9:b4:19:a4:d2:f9:b8:66:cd:49:bd:25:57:f0:
         1c:f8:94:ef:44:10:b1:1e:24:b0:4e:e7:d7:43:bc:05:0b:35:
         ca:e2:e6:94:c2:1d:d5:71:b8:97:71:2c:98:7a:b5:7e:df:e6:
         56:ff:d1:85:d1:66:05:9d:6b:a4:4e:25:e8:fa:4a:2d:68:2f:
         36:e0:e7:b2:50:3a:1a:2f:be:77:6e:9b:b2:43:70:6d:99:25:
         42:aa:ed:50:50:00:09:1c:80:0a:58:9f:83:1b:86:9a:34:72:
         23:53:d7:4b:18:bc:09:18:b5:d6:ba:ad:9a:b6:98:e0:fa:6a:
         b9:bc:06:9e:f0:19:c8:5f:ea:7b:42:df:aa:28:65:65:39:3e:
         08:e2:8b:f3:52:98:a5:b7:d8:c6:1f:76:81:89:f9:e1:fe:a6:
         d2:d3:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org