Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/AdX8joHDoJSMdr6AiB2XKfcuVdY.roa
File:                     AdX8joHDoJSMdr6AiB2XKfcuVdY.roa (raw, json)
Hash identifier:          XPl7w8298v6BiZwagswqvH2BgANoFD1UX/XkZQXba7w=
Subject key identifier:   01:D5:FC:8E:81:C3:A0:94:8C:76:BE:80:88:1D:97:29:F7:2E:55:D6
Certificate issuer:       /CN=6c3ffebfc3c33b611b5875e3717eefb84ceeba1d
Certificate serial:       082CF751
Authority key identifier: 6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/AdX8joHDoJSMdr6AiB2XKfcuVdY.roa
Signing time:             Sat 01 Jan 2022 05:06:11 +0000
ROA not before:           Sat 01 Jan 2022 05:06:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208702
IP address blocks:        2001:678:a98::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137164625 (0x82cf751)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c3ffebfc3c33b611b5875e3717eefb84ceeba1d
        Validity
            Not Before: Jan  1 05:06:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01d5fc8e81c3a0948c76be80881d9729f72e55d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:4d:e2:3a:9d:94:ca:f2:52:e2:60:44:1c:
                    cb:18:11:ee:35:fe:3a:c0:c1:ce:ff:ab:62:a7:4b:
                    a7:4d:a5:da:c3:4d:90:d2:fb:95:3d:1a:02:51:a7:
                    1d:0a:1b:0a:bc:71:58:0c:c2:a9:f4:70:37:37:45:
                    b2:d7:59:11:59:9d:60:71:bd:4c:0a:39:a3:3c:06:
                    f7:71:34:c7:88:f5:48:e3:8e:b6:8b:7b:0f:13:59:
                    75:1b:12:e4:c0:0f:23:9b:a0:5a:1d:ca:95:7a:6b:
                    f7:17:c1:08:12:e6:4b:ea:78:93:df:a2:db:2a:0e:
                    33:22:6b:a9:fa:3f:4f:f1:67:87:15:af:d6:10:c4:
                    c2:cb:12:a6:73:9c:a8:70:75:1a:12:d8:0e:39:49:
                    be:d1:15:a8:de:4e:f8:89:3e:d2:91:7e:21:bc:07:
                    da:d7:d8:8d:f9:bd:c8:26:ef:c8:63:cd:d3:ab:92:
                    54:ba:a1:3c:a0:23:b4:63:c6:c0:65:a0:77:b8:64:
                    58:aa:e6:94:fe:82:a4:be:0a:0f:46:87:7f:be:9d:
                    f1:a8:7b:e5:aa:ea:d9:15:59:b9:70:ed:3a:76:b2:
                    11:86:9a:8a:61:eb:c0:37:cd:18:ca:af:33:2f:85:
                    f5:5c:19:69:70:d0:6b:1f:91:f2:23:a2:db:09:84:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:FC:8E:81:C3:A0:94:8C:76:BE:80:88:1D:97:29:F7:2E:55:D6
            X509v3 Authority Key Identifier:
                keyid:6C:3F:FE:BF:C3:C3:3B:61:1B:58:75:E3:71:7E:EF:B8:4C:EE:BA:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bD_-v8PDO2EbWHXjcX7vuEzuuh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/AdX8joHDoJSMdr6AiB2XKfcuVdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/13be0d-9d81-4cc9-befe-b75ae64115cc/1/bD_-v8PDO2EbWHXjcX7vuEzuuh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:a98::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:5e:ad:a7:bd:38:3d:cf:38:76:72:32:ff:44:31:e9:7f:85:
         47:70:22:f8:80:dd:24:1a:d0:3b:a9:97:3a:6e:99:80:53:28:
         45:28:90:76:7d:0c:27:70:7d:5e:f8:9a:8d:22:bf:3a:ee:f5:
         a5:c7:4f:03:bc:ba:9c:87:e0:64:9e:70:6a:c1:a0:50:b2:c8:
         bd:ba:c3:42:af:56:e9:61:11:bf:bf:4e:eb:7a:65:61:c6:2f:
         8f:8f:5f:d8:73:5c:1e:6f:c6:bb:38:00:29:67:20:4d:d1:d1:
         80:91:e7:d2:41:d5:33:c8:af:8e:be:2b:d2:7f:12:8d:ce:0c:
         85:1a:49:81:26:52:69:5f:ec:42:4a:c3:29:af:ee:b5:cc:c9:
         37:ce:6e:c3:62:45:55:88:57:8e:bf:82:c4:58:0e:cf:53:ed:
         c9:37:e5:8f:74:a0:57:9e:15:09:2b:42:c7:ec:fe:ad:6a:8d:
         16:4c:81:23:49:c1:50:cf:cf:01:05:55:f9:86:b9:ab:41:cb:
         be:2d:e8:7e:4d:c2:7e:31:c8:b2:fb:cf:d1:48:c6:4f:c8:97:
         6b:8e:d6:a7:f2:36:d1:a6:ac:ad:b8:6f:5b:62:ac:f5:2c:e0:
         e1:09:5c:95:f4:23:4f:bd:f6:dd:0b:dc:f5:43:dd:07:1c:6e:
         9d:64:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:12 2024 by rpki-client on console-ams.rpki-client.org