Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/cVWBrCRaWQNvtDlYMFnTqL6q2cM.roa
File:                     cVWBrCRaWQNvtDlYMFnTqL6q2cM.roa (raw, json)
Hash identifier:          5PoB3n4tDuu7PWoFcWvU5ZJClrm8mjtjFw9V0/eDZqQ=
Subject key identifier:   71:55:81:AC:24:5A:59:03:6F:B4:39:58:30:59:D3:A8:BE:AA:D9:C3
Certificate issuer:       /CN=530edbe7297de5c3576527f74590874f8dca2f53
Certificate serial:       01856FD502ECC95B8407E57AE34739C63798
Authority key identifier: 53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uw7b5yl95cNXZSf3RZCHT43KL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/cVWBrCRaWQNvtDlYMFnTqL6q2cM.roa
Signing time:             Mon 02 Jan 2023 00:15:08 +0000
ROA not before:           Mon 02 Jan 2023 00:15:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213318
IP address blocks:        2001:678:d2c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:02:ec:c9:5b:84:07:e5:7a:e3:47:39:c6:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530edbe7297de5c3576527f74590874f8dca2f53
        Validity
            Not Before: Jan  2 00:15:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=715581ac245a59036fb439583059d3a8beaad9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:21:85:3c:4d:cc:b6:13:51:7e:a7:f1:48:
                    a3:9f:de:37:96:2a:bd:84:79:c7:fc:d1:1b:37:f0:
                    92:db:c2:42:79:0b:78:25:79:5c:c1:44:a4:ef:b1:
                    92:2e:d0:88:b2:92:b6:df:fb:2e:63:d0:9e:dd:14:
                    ca:b6:38:16:30:f4:39:56:52:28:a0:14:7f:9d:af:
                    87:48:d9:bf:b3:a8:49:b7:8d:c7:53:ae:02:04:98:
                    67:a8:7d:ba:ab:6b:04:27:92:ed:39:23:c4:b0:6c:
                    b4:21:8b:32:e4:3f:de:96:4b:0e:00:83:6d:93:6a:
                    58:64:bd:d2:f5:61:49:c2:d7:a0:a8:99:7a:c0:38:
                    b7:e8:17:47:3e:cd:d8:30:24:1a:a1:c5:d0:64:b8:
                    d4:ab:20:a2:2b:83:db:56:00:2b:d2:1b:4f:81:a5:
                    bc:86:99:03:50:36:7c:81:54:57:41:4b:14:60:de:
                    63:dc:92:fc:85:65:21:0a:ef:ba:7f:bc:91:d9:62:
                    ba:73:ac:46:7c:4f:a0:98:0f:a2:06:84:6c:4a:cf:
                    25:f9:52:d6:37:4d:a9:f9:24:5a:ae:6e:ab:2d:af:
                    5e:7d:34:47:aa:22:42:7a:e9:35:37:10:99:f8:a1:
                    e0:5d:8c:02:69:5d:37:da:9a:1d:dd:bf:59:76:dc:
                    10:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:55:81:AC:24:5A:59:03:6F:B4:39:58:30:59:D3:A8:BE:AA:D9:C3
            X509v3 Authority Key Identifier:
                keyid:53:0E:DB:E7:29:7D:E5:C3:57:65:27:F7:45:90:87:4F:8D:CA:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw7b5yl95cNXZSf3RZCHT43KL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/cVWBrCRaWQNvtDlYMFnTqL6q2cM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d93f35-a863-421d-9d18-c9fc96f25a9b/1/Uw7b5yl95cNXZSf3RZCHT43KL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d2c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:49:3a:ca:f7:29:b6:29:5b:80:05:7b:ba:7a:9f:f3:a8:be:
         13:22:86:49:94:2f:18:5a:87:1b:77:8c:3c:bb:c7:6f:04:98:
         c6:7a:cf:eb:2f:0c:95:c6:15:6b:a9:92:22:01:4c:52:f1:73:
         7e:be:16:a3:6c:0f:01:8e:e7:ea:b2:42:33:86:31:54:28:1c:
         8f:5a:c6:cf:9e:84:dc:f0:9c:75:22:14:59:92:78:50:be:06:
         3b:74:c9:e8:77:e7:9f:ca:23:25:bb:c7:a2:b5:e8:e0:1b:72:
         78:3d:83:af:d2:5b:51:bb:60:f1:9c:c6:f5:34:44:de:5c:90:
         da:25:72:6d:f1:41:76:e8:4c:8f:6d:a4:39:f4:66:f9:44:96:
         31:94:52:0b:ee:e8:e1:aa:68:eb:5c:a7:ec:ac:00:6a:5e:77:
         8b:dc:80:a3:a6:dc:d5:c0:9b:98:7a:04:6a:2f:25:23:44:c0:
         a7:d8:fb:9b:e4:5b:01:12:4b:a1:10:56:c4:8c:75:58:4b:cb:
         0f:1c:80:77:ed:04:e4:69:aa:cf:24:f7:9c:e4:5b:f6:81:f4:
         d5:95:40:53:81:6e:05:72:41:dd:1d:0d:ca:98:0d:c8:6a:79:
         9d:df:43:a5:a2:b2:bf:51:3a:c0:3b:a3:08:d7:71:da:eb:38:
         05:6f:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:40 2024 by rpki-client on console-fra.rpki-client.org