Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131333a3a2f34382d3438203d3e20323030323432.roa
File:                     326130353a646663323a323131333a3a2f34382d3438203d3e20323030323432.roa (raw, json)
Hash identifier:          E62G3/g9T+3x7xW+1XMo5Xivl7oWRUaYcKLrW1c/+zU=
Subject key identifier:   74:58:CB:4D:47:9A:12:DF:93:61:0B:52:78:34:A0:06:A8:ED:CE:C4
Certificate issuer:       /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial:       3ADB93C076373EE85AF8FF6051D2BE894DC3481A
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131333a3a2f34382d3438203d3e20323030323432.roa
Signing time:             Sun 23 Apr 2023 18:53:35 +0000
ROA not before:           Sun 23 Apr 2023 18:48:35 +0000
ROA not after:            Sun 21 Apr 2024 18:53:35 +0000
asID:                     200242
IP address blocks:        2a05:dfc2:2113::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:db:93:c0:76:37:3e:e8:5a:f8:ff:60:51:d2:be:89:4d:c3:48:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
        Validity
            Not Before: Apr 23 18:48:35 2023 GMT
            Not After : Apr 21 18:53:35 2024 GMT
        Subject: CN=7458CB4D479A12DF93610B527834A006A8EDCEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:eb:90:21:e6:1e:72:c9:9f:68:a2:85:40:
                    fe:04:2c:26:b3:b1:01:19:84:a7:01:1a:3c:ca:08:
                    6b:64:a6:90:39:f8:44:0a:76:1e:aa:08:0d:f2:8c:
                    0b:6b:42:5c:4a:c8:24:6d:2b:8c:db:40:b9:31:81:
                    e9:4c:d5:7d:6f:a1:c1:1e:d3:17:06:08:e1:2c:bf:
                    93:86:3a:7d:01:49:c1:3b:78:5a:75:e1:b4:06:25:
                    95:91:19:ad:23:e8:87:95:07:1d:42:6f:a6:85:00:
                    ae:c8:24:a3:32:35:6e:b5:d2:94:7b:90:d1:c4:4d:
                    90:9a:3a:18:dd:e3:20:8e:15:b7:52:88:f8:fc:f0:
                    08:5a:0a:b0:61:88:59:68:a8:35:06:f4:da:1f:28:
                    8b:32:95:41:f3:e0:03:35:f1:e0:1e:ea:06:89:cd:
                    50:f7:b3:7f:08:15:59:05:7f:3b:52:e4:9c:a6:43:
                    cc:a6:ba:51:5f:f1:fe:d1:f4:1a:85:cd:00:82:8f:
                    b2:c6:93:67:de:61:b4:cb:26:d9:27:3e:92:1e:05:
                    f8:76:aa:91:7f:a6:8e:94:cb:6a:8e:16:3f:58:d6:
                    f4:23:b2:a8:c2:8f:99:7b:9e:fa:6d:1f:f5:28:ab:
                    64:3f:fe:8b:26:9d:77:dd:4f:6e:9a:de:07:a6:ed:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:58:CB:4D:47:9A:12:DF:93:61:0B:52:78:34:A0:06:A8:ED:CE:C4
            X509v3 Authority Key Identifier:
                keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663323a323131333a3a2f34382d3438203d3e20323030323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc2:2113::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:a9:76:f6:e4:10:33:4a:e8:72:49:e8:62:9e:fb:93:4b:
         dc:aa:7e:27:e0:67:7e:12:50:1a:4b:a8:b4:00:ee:07:8b:f9:
         f9:30:ef:12:14:21:65:29:e3:8c:a1:69:ea:21:96:4d:8b:20:
         a5:ac:2b:36:78:c8:ca:84:d0:51:44:aa:d4:6e:26:1a:b6:09:
         c6:45:7f:3a:b7:ef:e0:04:1f:c8:40:1f:ff:20:c2:1e:d0:67:
         6b:8e:41:df:df:d3:e6:f4:b3:2f:8f:4f:7e:a4:a7:1b:db:66:
         b3:cb:ff:7e:bf:db:7b:25:8e:7b:26:71:f4:fa:d6:92:5f:cf:
         58:e4:b3:5e:68:5d:46:d3:0e:85:aa:be:36:1c:d4:5d:be:33:
         6d:e8:21:94:93:54:3e:c3:68:e1:a9:ed:2a:34:41:74:d9:4c:
         13:4d:c0:02:3a:0f:48:11:76:d9:88:30:44:7a:7b:33:9e:31:
         0c:5c:31:71:48:44:4e:3b:d3:fc:fa:f4:f3:74:68:da:d2:61:
         ec:c0:1e:2f:ff:11:02:e0:b3:05:d3:92:9b:a9:24:b1:e0:18:
         51:3e:41:ab:19:f5:3f:71:cc:05:9f:a7:21:0f:c9:97:9d:2c:
         7e:cd:a5:4a:e9:5c:dd:3c:6a:19:25:b7:6a:f9:53:79:a8:6c:
         e7:8f:7a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:51 2025 by rpki-client