Route Origin Authorization

$ rpki-client -vvf rpki.services.vm.a-x1.w420.net/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa
File:                     323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa (raw, json)
Hash identifier:          oTSkmOus9U969ZJtJMShyp8DElJk/MWRpixdZkU7ZOc=
Subject key identifier:   0E:DB:0F:82:BD:00:E7:1B:9A:54:4B:8B:AA:C8:39:56:A9:A6:29:24
Certificate issuer:       /CN=f4b3132fabd45683ee5a7a76539d1dcefaed2c75
Certificate serial:       71ED0EB212AE5FFC2B65E61267514D762053A3AE
Authority key identifier: F4:B3:13:2F:AB:D4:56:83:EE:5A:7A:76:53:9D:1D:CE:FA:ED:2C:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LMTL6vUVoPuWnp2U50dzvrtLHU.cer
Subject info access:      rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa
Signing time:             Sun 22 Dec 2024 11:29:05 +0000
ROA not before:           Sun 22 Dec 2024 11:24:05 +0000
ROA not after:            Sun 21 Dec 2025 11:29:05 +0000
asID:                     199918
IP address blocks:        2001:67c:34::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:0e:b2:12:ae:5f:fc:2b:65:e6:12:67:51:4d:76:20:53:a3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b3132fabd45683ee5a7a76539d1dcefaed2c75
        Validity
            Not Before: Dec 22 11:24:05 2024 GMT
            Not After : Dec 21 11:29:05 2025 GMT
        Subject: CN=0EDB0F82BD00E71B9A544B8BAAC83956A9A62924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:90:20:89:93:17:bd:de:80:56:cd:8e:37:
                    bc:90:b5:c3:cb:c2:f9:c8:9a:f6:26:a1:7a:0f:ca:
                    6b:18:42:8e:7b:e4:70:a0:c0:ac:78:eb:de:fa:16:
                    d3:9a:35:c5:b3:20:73:c3:9b:61:46:b2:9d:6f:aa:
                    26:f7:08:9f:83:ea:42:fe:36:85:72:bb:2c:32:2a:
                    f5:86:6c:fd:5f:fa:4f:29:97:c4:09:e6:37:18:af:
                    7d:72:28:41:0a:0f:68:c7:8a:fe:7b:65:1c:b2:8e:
                    0d:78:f8:4f:ed:eb:c9:f5:0c:4a:f3:22:f3:0a:f5:
                    ac:1a:92:83:6a:2f:2d:d7:2b:6e:0c:b9:47:36:0e:
                    59:51:74:24:c2:50:67:cb:a3:5e:01:5c:b5:ab:1f:
                    6f:f2:e7:20:f6:dd:17:09:b3:6c:aa:b1:7e:a3:49:
                    3f:6e:3d:83:72:75:7a:4c:f4:a4:4f:b5:05:19:a1:
                    25:78:5d:30:8f:5b:eb:ee:ef:dc:91:5c:2c:9b:b4:
                    bc:de:8d:4a:68:3d:54:25:4a:e4:16:ea:8e:56:28:
                    62:c7:94:bc:50:c7:af:91:ab:4a:09:4e:1b:e4:96:
                    97:54:bd:bc:1f:7e:ca:85:f6:d5:fd:86:a2:45:79:
                    f5:39:9a:c8:5b:4e:f7:2b:92:75:b8:a4:82:16:5a:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:0F:82:BD:00:E7:1B:9A:54:4B:8B:AA:C8:39:56:A9:A6:29:24
            X509v3 Authority Key Identifier:
                keyid:F4:B3:13:2F:AB:D4:56:83:EE:5A:7A:76:53:9D:1D:CE:FA:ED:2C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/F4B3132FABD45683EE5A7A76539D1DCEFAED2C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LMTL6vUVoPuWnp2U50dzvrtLHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.services.vm.a-x1.w420.net/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:43:5a:b4:d3:2e:3d:ed:f9:41:b9:96:bd:8c:36:46:57:23:
         67:9e:fc:dd:1f:62:fb:6b:96:a3:b8:29:77:5f:7a:19:d5:f5:
         b8:19:78:0e:21:a7:f8:9e:25:55:09:80:9d:31:06:4c:a4:65:
         f7:c1:7d:35:95:d1:a2:a9:4a:ac:b9:9a:58:88:25:f0:50:1c:
         af:bb:4b:39:cc:55:7b:54:35:e6:4f:f7:3b:96:cb:88:d4:ac:
         cd:e5:b7:40:72:f1:63:f0:d2:6f:bf:93:98:7c:dc:7e:24:48:
         58:b8:ec:e5:ee:c6:74:52:03:d9:51:8c:a7:37:c4:67:6d:c4:
         29:c3:31:d0:21:7e:41:58:d4:82:33:26:43:79:7a:ed:a4:7e:
         e5:26:6b:75:32:c8:df:c9:de:2f:7e:4a:4a:9e:8c:db:4e:52:
         1f:1b:10:ac:de:63:a3:58:d5:00:cd:07:0c:24:af:78:cb:5a:
         2f:39:42:92:09:0a:0a:3f:e6:19:f1:37:f6:8d:bb:0e:c2:1c:
         a8:62:1b:5b:43:06:3c:2e:59:f1:09:80:24:5c:1a:7d:2e:73:
         c5:0b:7e:c9:c9:b6:ae:a9:3c:43:70:42:cc:2b:25:a0:0d:98:
         4e:57:77:49:cb:53:07:f7:b4:83:79:30:1f:72:a2:07:84:af:
         64:1a:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:08 2025 by rpki-client