Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/i-3XeeuVPx-BPDXz_aCp-LkBtMo.roa
File:                     i-3XeeuVPx-BPDXz_aCp-LkBtMo.roa (raw, json)
Hash identifier:          yMJpOqTuec1dNjGYPvwomKD8UxqF83Cbp6UEH7hMCeA=
Subject key identifier:   8B:ED:D7:79:EB:95:3F:1F:81:3C:35:F3:FD:A0:A9:F8:B9:01:B4:CA
Certificate issuer:       /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial:       0816545E
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/i-3XeeuVPx-BPDXz_aCp-LkBtMo.roa
Signing time:             Tue 15 Mar 2022 10:15:24 +0000
ROA not before:           Tue 15 Mar 2022 10:15:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212144
IP address blocks:        2a10:a9c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135681118 (0x816545e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
        Validity
            Not Before: Mar 15 10:15:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8bedd779eb953f1f813c35f3fda0a9f8b901b4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:3f:72:78:8f:08:ff:ed:52:e3:23:1c:67:
                    1a:0e:41:d4:59:11:c9:d2:45:b8:30:bf:fc:66:58:
                    1c:f2:4c:ab:4c:f7:a1:bf:c9:bd:b5:9c:33:5c:90:
                    57:15:1b:cb:96:e9:2a:6a:42:27:bb:9b:42:23:ae:
                    d2:0d:82:e1:43:33:cb:82:b2:19:fa:06:36:fb:ad:
                    62:7b:e8:2e:df:44:56:21:18:a2:e2:1b:9f:18:e0:
                    b2:91:64:58:33:d2:fe:65:da:a2:b4:95:34:47:20:
                    5b:3d:59:9c:bd:2a:f2:ec:ab:8f:e7:d4:7a:69:25:
                    33:26:fe:9d:f4:68:42:d6:ad:76:12:29:2c:6b:ad:
                    4b:1b:63:80:5e:39:8d:24:8b:78:df:92:83:9c:b6:
                    3a:e4:4c:3e:c0:5e:ae:a3:a3:34:75:57:96:74:13:
                    68:34:2a:11:38:66:84:dc:5c:bc:cb:f5:01:9c:36:
                    a9:e2:bb:6a:52:23:eb:2e:85:19:ca:18:2a:ea:38:
                    35:05:74:7c:95:cb:a5:9e:62:2e:93:db:82:70:ba:
                    40:ea:30:48:5d:33:08:ed:69:2f:20:07:34:94:f6:
                    b4:6c:d2:ea:d9:c0:d4:e9:15:33:e9:32:0c:0f:f5:
                    c9:0a:5a:bd:f2:18:2f:24:df:86:ac:6f:ab:f2:3a:
                    fd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:ED:D7:79:EB:95:3F:1F:81:3C:35:F3:FD:A0:A9:F8:B9:01:B4:CA
            X509v3 Authority Key Identifier:
                keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/i-3XeeuVPx-BPDXz_aCp-LkBtMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:a9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:61:8e:01:cb:5c:75:a5:64:45:94:c9:d5:ec:c7:90:44:ab:
         16:be:45:39:2c:8e:36:ce:fc:8b:07:21:b6:c8:fc:ba:2f:4e:
         ff:de:5f:40:67:6e:41:40:5b:1b:f4:7c:18:6f:1c:17:60:4a:
         01:17:d0:11:c2:bb:cd:8a:ef:68:13:de:ae:ea:62:ce:66:cb:
         d9:05:ea:b3:bd:11:10:33:df:e1:26:83:26:5f:05:8b:f4:f1:
         d7:d4:c6:36:07:c3:f1:e2:74:8d:15:63:28:ea:b0:c8:a6:55:
         61:cb:78:c1:e6:bd:48:1e:65:10:7c:ab:ef:88:9c:b5:4b:ef:
         fa:19:ee:42:f2:d6:c3:45:77:29:7c:b1:0e:ee:a5:1f:89:c8:
         6a:06:1c:50:dc:a1:1e:9f:6f:48:a7:21:03:5a:ee:e3:42:78:
         0c:4d:6a:cb:be:ca:00:e5:a0:2f:8c:e0:2e:40:71:4a:5e:71:
         87:8a:1e:31:ff:07:dd:7a:a0:c9:ae:c2:93:4e:7f:f0:cb:d2:
         a0:35:34:b4:6c:bd:3f:4f:99:db:21:ca:00:d2:47:6c:a7:7a:
         59:da:f8:ac:8c:fa:08:96:54:ed:75:d1:48:1f:54:9a:cb:f2:
         7c:ec:d6:40:f2:94:78:1a:27:d8:77:8b:cd:d3:c8:26:3d:11:
         a7:3d:fb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org