Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa
File:                     8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa (raw, json)
Hash identifier:          WZlpZsXsoaMMQAUFBTXN2OEE2y6BlebiS1fuK7FoqMA=
Subject key identifier:   F1:CB:93:40:AB:CB:6C:71:BE:C2:C6:31:64:6E:E5:86:66:98:51:40
Certificate issuer:       /CN=92c51555a81fd209ff79abed14369ec7917ced62
Certificate serial:       01856F302377E824F8C708E3AA7D071C5889
Authority key identifier: 92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa
Signing time:             Sun 01 Jan 2023 21:15:03 +0000
ROA not before:           Sun 01 Jan 2023 21:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204790
IP address blocks:        2a11:3540::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:23:77:e8:24:f8:c7:08:e3:aa:7d:07:1c:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c51555a81fd209ff79abed14369ec7917ced62
        Validity
            Not Before: Jan  1 21:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1cb9340abcb6c71bec2c631646ee58666985140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:92:7c:34:56:2b:a0:e9:ee:1e:10:15:0c:
                    43:07:3e:da:15:21:98:ef:7d:e3:12:1a:1b:01:c6:
                    1a:21:10:d3:dd:7c:6f:35:60:45:56:75:6c:c8:a8:
                    7b:e2:7a:bf:b6:46:81:54:f6:28:a7:b8:a6:63:92:
                    14:69:a9:8f:7e:0c:fb:12:31:7b:b1:ef:a7:b5:8e:
                    d5:73:dd:96:55:3f:75:b7:08:8b:18:5a:6a:e9:c9:
                    38:45:0c:b1:3f:a7:09:33:1b:ff:c5:a8:1b:82:2f:
                    1a:21:48:29:ce:a6:98:48:db:47:a6:4c:22:46:75:
                    c0:a6:4d:3f:c0:42:76:7b:0b:4f:56:9f:5b:65:fc:
                    80:85:2b:d9:93:8c:eb:ee:11:6c:df:56:d3:b2:98:
                    1d:66:c9:85:9c:d5:40:78:65:82:f4:0a:56:26:98:
                    03:5b:30:a4:82:ce:35:75:de:1f:c5:51:ed:5a:48:
                    91:1a:4c:54:00:49:5f:a5:32:6a:29:10:d4:c0:70:
                    b0:1a:17:6c:b2:39:bf:06:39:8c:a4:fc:00:da:aa:
                    13:5d:61:80:84:fb:67:a7:f4:43:6f:1a:ed:7e:e6:
                    d7:98:29:5c:09:1f:b2:8a:72:b3:22:fb:bb:ea:0e:
                    39:4d:17:a8:74:6c:9a:01:59:c0:85:37:da:7c:a6:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CB:93:40:AB:CB:6C:71:BE:C2:C6:31:64:6E:E5:86:66:98:51:40
            X509v3 Authority Key Identifier:
                keyid:92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/ksUVVagf0gn_eavtFDaex5F87WI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:3540::/29

    Signature Algorithm: sha256WithRSAEncryption
         a3:0d:73:5b:98:41:7e:a5:87:6c:05:b6:63:1c:1e:83:dc:fd:
         0a:7a:e9:6a:36:cd:45:7b:e4:07:88:f5:00:fb:ce:04:96:8f:
         c1:05:cd:e8:59:51:04:6a:1e:a1:e2:c7:46:f6:cd:df:e6:47:
         a9:7c:8c:5a:ab:b4:e3:83:c5:6c:7f:71:74:92:88:61:30:39:
         28:6b:90:9c:35:e7:af:ee:da:4c:a3:4b:6e:ba:c9:1e:7a:86:
         59:6d:a9:a9:3e:58:f6:3b:df:c4:da:b3:19:07:1b:ab:3d:a2:
         f9:fd:46:b8:08:b2:88:a9:14:c3:b1:dd:80:08:65:b8:d8:74:
         dc:fd:1a:3c:0d:4d:7b:4f:71:f0:93:d6:db:39:bd:fe:12:40:
         f9:91:00:03:1b:13:33:5b:1c:47:42:41:77:72:8c:41:cd:45:
         5b:fb:ac:45:a2:38:c5:71:a5:b4:8f:35:8a:f7:eb:8b:a9:e8:
         d3:af:c2:2e:4c:10:8b:34:e8:d7:0a:bd:49:82:96:4b:61:cc:
         5e:cf:8e:70:46:8f:92:14:93:8a:7f:11:6f:32:22:a9:40:18:
         e2:91:c8:ce:3a:94:b9:70:d1:2c:15:61:1a:d9:d4:6c:af:fb:
         c9:3d:af:30:92:4c:52:75:8a:64:43:27:cd:82:4e:ac:ba:62:
         5d:7c:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:35 2024 by rpki-client on console-ams.rpki-client.org