Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/WVuARkc_ps827P1xbpCwiKO6FgY.roa
File:                     WVuARkc_ps827P1xbpCwiKO6FgY.roa (raw, json)
Hash identifier:          gt2G1AMVpeffoL0Y33/Z7KLgR3vuxigzpq32u5O8DBY=
Subject key identifier:   59:5B:80:46:47:3F:A6:CF:36:EC:FD:71:6E:90:B0:88:A3:BA:16:06
Certificate issuer:       /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial:       1310689E
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/WVuARkc_ps827P1xbpCwiKO6FgY.roa
Signing time:             Sat 01 Jan 2022 15:55:08 +0000
ROA not before:           Sat 01 Jan 2022 15:55:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        2a04:8340::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319842462 (0x1310689e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Validity
            Not Before: Jan  1 15:55:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=595b8046473fa6cf36ecfd716e90b088a3ba1606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:63:95:e0:fe:bc:30:8b:80:0b:36:87:e3:f6:
                    42:cb:dd:d9:26:1f:b9:d1:c8:fb:de:24:2d:20:e8:
                    5b:5b:af:17:30:f9:5c:fd:1e:35:fe:57:7f:9c:88:
                    3a:45:d4:f9:25:04:b7:60:1b:23:fa:10:0f:9d:cb:
                    14:1c:96:c7:1f:9d:6c:4b:06:a1:a1:59:cc:cf:a5:
                    f9:7e:7b:a3:d7:d0:78:07:75:29:32:d8:bd:66:f8:
                    27:4c:6f:31:e3:cb:46:0d:07:7e:4a:1c:61:2f:1c:
                    84:ff:97:45:3f:4a:ae:17:51:fe:bf:f2:b8:67:cb:
                    8a:b9:dd:90:85:46:31:a5:8c:4b:41:06:76:6a:c0:
                    d8:30:2a:ec:f0:63:cb:4d:53:b2:51:3d:10:95:bb:
                    96:a2:5d:b1:6f:2b:fb:5c:e4:ef:0a:ba:be:b2:f6:
                    69:9a:f2:28:ab:43:00:c2:91:47:11:bb:53:54:10:
                    85:1f:0a:ae:c5:f1:da:7c:48:98:c3:d5:3b:29:3d:
                    56:73:e0:42:0e:38:cb:33:8e:68:d4:aa:d2:ff:15:
                    0a:13:fe:36:b1:5f:23:6d:53:a8:a8:b3:e4:ef:1c:
                    f3:3a:49:75:2a:24:52:16:66:b1:d0:67:8c:86:73:
                    45:43:e6:59:89:63:4d:4c:58:ab:a9:4c:1c:0e:b2:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5B:80:46:47:3F:A6:CF:36:EC:FD:71:6E:90:B0:88:A3:BA:16:06
            X509v3 Authority Key Identifier:
                keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/WVuARkc_ps827P1xbpCwiKO6FgY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:8340::/29

    Signature Algorithm: sha256WithRSAEncryption
         27:96:45:52:7f:86:a1:5b:f1:28:31:06:f3:9c:47:4d:12:02:
         7b:7a:55:f6:2d:b9:72:f4:d9:0d:c7:9f:ea:96:26:69:d1:7a:
         1c:f0:b5:63:d8:31:1d:2b:71:fc:e5:88:b4:83:23:8c:5b:82:
         86:aa:9f:f8:c6:ca:67:a5:bb:7d:c0:0a:7a:ee:f1:c0:a1:0a:
         18:34:32:cd:58:df:00:11:c1:ad:5e:f6:a1:1a:13:84:5e:c9:
         84:51:18:85:3a:a0:2e:31:2a:78:2c:1a:91:e0:35:52:80:91:
         a7:f9:78:2d:ae:1b:50:67:d2:e1:6a:72:68:ee:29:d2:a9:dd:
         c9:e1:7d:4d:76:76:56:2b:2c:50:d0:75:5b:af:38:33:7c:08:
         8d:7a:00:b0:8c:dc:21:37:4c:0e:f7:98:9c:4e:4d:10:03:00:
         66:f0:0d:80:71:5f:7a:9a:58:b5:cc:70:53:be:fd:1e:1f:c7:
         46:32:8b:a6:15:4a:c3:06:df:7d:7d:26:ef:bc:fd:9f:b9:9b:
         aa:f3:a0:2d:97:87:5b:ea:49:fc:4a:59:81:29:27:c9:66:dc:
         14:9f:20:35:48:52:33:d6:4e:c7:00:f5:31:b4:dd:1b:93:58:
         59:95:5a:61:e9:58:64:d7:6b:0e:40:c5:f0:e8:30:50:7d:91:
         62:f2:2a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:09 2024 by rpki-client on console-ams.rpki-client.org