Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Xj9se_b68A_g4eZ1Qc3gxKv-UuM.roa
File:                     Xj9se_b68A_g4eZ1Qc3gxKv-UuM.roa (raw, json)
Hash identifier:          8WUtac3tQiWSlJwlHs0cSBY6pInQshpubmNarhYUOY0=
Subject key identifier:   5E:3F:6C:7B:F6:FA:F0:0F:E0:E1:E6:75:41:CD:E0:C4:AB:FE:52:E3
Certificate issuer:       /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial:       018CC649AD1529CE3703D63622FE440EA8AF
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Xj9se_b68A_g4eZ1Qc3gxKv-UuM.roa
Signing time:             Mon 01 Jan 2024 18:29:26 +0000
ROA not before:           Mon 01 Jan 2024 18:29:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212238
IP address blocks:        2a12:9780::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:49:ad:15:29:ce:37:03:d6:36:22:fe:44:0e:a8:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
        Validity
            Not Before: Jan  1 18:29:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5e3f6c7bf6faf00fe0e1e67541cde0c4abfe52e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:03:f4:af:7b:f2:6c:40:14:ca:62:43:01:
                    4e:5e:77:83:35:95:18:e3:fd:13:1b:1d:9b:a7:6e:
                    71:be:c5:e9:44:9a:3b:a9:2b:25:ee:3f:5b:7c:57:
                    6e:61:42:e3:af:89:de:d1:5f:75:79:8d:d1:20:8a:
                    45:f0:75:15:a9:d2:df:08:7d:d7:3f:c7:4d:da:6a:
                    31:2f:56:bf:14:5b:b9:65:49:34:8c:14:54:56:f8:
                    ac:a6:db:31:0e:e6:b6:ef:97:4a:b3:69:36:b4:83:
                    dc:b4:a6:01:96:22:f7:b6:a5:76:cc:1f:70:e6:75:
                    66:37:a5:ab:6d:48:8f:48:92:df:23:86:fc:be:77:
                    37:0a:d7:a7:aa:60:a4:d6:a0:e9:93:17:23:d8:5d:
                    32:20:ba:8a:8c:67:8e:dd:95:8d:6a:1c:af:4d:fb:
                    fe:53:dc:17:36:e0:30:93:f4:37:7d:3b:dd:eb:a5:
                    55:3a:42:d0:bf:3b:3f:87:fa:fb:39:50:0b:bf:63:
                    34:78:f0:bd:97:09:7c:54:77:12:9c:37:61:8e:8c:
                    11:b5:58:8a:65:83:4a:f2:1a:dd:31:02:56:f1:7d:
                    a1:96:3b:1f:55:f5:fb:6e:a9:0b:cd:d4:82:1b:95:
                    a2:46:26:22:b5:de:91:33:e2:8e:98:42:0d:15:4e:
                    9a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3F:6C:7B:F6:FA:F0:0F:E0:E1:E6:75:41:CD:E0:C4:AB:FE:52:E3
            X509v3 Authority Key Identifier:
                keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Xj9se_b68A_g4eZ1Qc3gxKv-UuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:e4:e5:81:96:79:ee:bd:bf:0a:4b:ff:4c:0f:f5:f3:59:
         d7:be:2b:29:ec:f0:61:d4:4e:39:15:84:6d:0a:7e:01:24:d2:
         2f:61:11:bc:a5:e3:c9:1f:c1:28:23:17:91:cb:be:2e:d8:99:
         b8:0f:34:32:94:cc:5b:a9:62:56:53:55:6a:6f:9c:f4:2e:4a:
         86:60:43:77:a8:bc:0a:f3:91:b1:b8:7b:20:54:b9:44:62:7f:
         15:a2:80:6f:95:0c:29:6b:47:2b:75:48:bc:23:6a:1c:57:b9:
         fe:f7:d4:07:39:27:ff:f2:4e:29:a2:36:97:84:c4:a0:5b:b2:
         9e:5f:5c:51:b7:af:d4:08:67:f7:07:16:00:f6:3e:03:62:68:
         75:68:4f:46:a4:d5:58:62:1f:8c:84:b0:ed:68:c4:16:99:23:
         a1:04:df:a7:81:83:8d:87:5b:75:68:4a:92:9c:b7:bc:02:d3:
         4d:05:e1:7c:4b:cf:67:d8:4b:92:7e:06:ac:bf:83:32:98:ec:
         9f:9a:23:1b:91:f1:12:ef:90:80:ad:24:b8:15:9a:35:47:20:
         35:d4:93:4a:46:d3:b2:a7:d1:67:a6:35:00:04:3b:11:50:85:
         ad:a8:22:5b:0c:2a:57:67:b8:48:78:93:1a:d0:1f:05:0a:78:
         c3:84:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org