Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a653632313a3a2f34382d3438203d3e20323036373531.roa
File:                     326130353a646663333a653632313a3a2f34382d3438203d3e20323036373531.roa (raw, json)
Hash identifier:          aMSrvQQztQqC7v57kOUsoew7QxkzMqG1uHVHI4QvLTw=
Subject key identifier:   17:7D:16:72:70:08:E2:50:AD:5E:7D:94:17:FB:80:63:6C:CD:8A:61
Certificate issuer:       /CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
Certificate serial:       49826E1C45F3D840DCC50C1BF9AEA97EFD0E5E4A
Authority key identifier: C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a653632313a3a2f34382d3438203d3e20323036373531.roa
Signing time:             Wed 31 May 2023 21:44:48 +0000
ROA not before:           Wed 31 May 2023 21:39:48 +0000
ROA not after:            Wed 29 May 2024 21:44:48 +0000
asID:                     206751
IP address blocks:        2a05:dfc3:e621::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:82:6e:1c:45:f3:d8:40:dc:c5:0c:1b:f9:ae:a9:7e:fd:0e:5e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C646A4311598BE4C0EABD4E8817C773AACCFA862
        Validity
            Not Before: May 31 21:39:48 2023 GMT
            Not After : May 29 21:44:48 2024 GMT
        Subject: CN=177D16727008E250AD5E7D9417FB80636CCD8A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:2e:2c:9e:c5:b3:20:2f:97:92:b9:51:1b:
                    7b:85:14:23:c6:f1:95:2e:1e:d4:9f:08:a9:e0:d5:
                    76:30:ea:89:ba:50:df:f5:12:89:a1:6c:e1:24:67:
                    8b:37:21:7e:4b:d0:7d:dc:ff:f9:31:7d:9d:71:e4:
                    bd:75:5b:e4:66:53:c5:e0:f3:f5:80:c9:0b:12:3b:
                    7d:48:4f:31:42:20:82:2c:0e:37:16:ef:7f:30:c6:
                    e1:8c:f9:7f:7a:4f:d7:71:aa:17:2a:93:9e:a9:c9:
                    7f:00:c3:07:dc:be:11:54:94:9b:c4:22:13:62:87:
                    34:fb:5e:4a:db:9d:d1:93:2b:50:97:a2:7b:9e:35:
                    61:b0:54:3c:5d:2b:b5:ab:92:61:b9:9b:cf:7d:63:
                    40:f8:b2:82:f2:eb:68:33:bc:02:3c:61:f6:f9:56:
                    c2:83:05:b3:00:54:b4:00:65:8f:0f:91:82:bf:95:
                    6d:9c:72:5e:95:76:9a:b7:67:dd:98:7b:40:fe:36:
                    69:84:c0:e8:b9:f1:48:9a:dc:e6:8b:5a:5b:9e:73:
                    98:c8:1e:82:10:ac:da:cd:27:e7:aa:d3:ca:a8:41:
                    bc:3d:d1:88:c9:25:54:02:be:f6:78:2c:1e:88:bc:
                    44:bb:c3:6a:5d:00:5e:9a:d7:f1:d6:dc:8c:34:4a:
                    c9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7D:16:72:70:08:E2:50:AD:5E:7D:94:17:FB:80:63:6C:CD:8A:61
            X509v3 Authority Key Identifier:
                keyid:C6:46:A4:31:15:98:BE:4C:0E:AB:D4:E8:81:7C:77:3A:AC:CF:A8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/C646A4311598BE4C0EABD4E8817C773AACCFA862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/C646A4311598BE4C0EABD4E8817C773AACCFA862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/0/326130353a646663333a653632313a3a2f34382d3438203d3e20323036373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:e621::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:a9:b9:91:bd:e0:f9:20:21:1a:5f:78:e4:61:82:c8:d2:9f:
         d5:06:e2:72:a4:f4:a3:ed:cf:28:4c:e3:d1:68:d0:ad:8b:ee:
         62:3e:3e:43:11:a3:3d:e3:a2:e5:1a:7d:2b:93:62:51:78:a2:
         f1:c4:12:42:0c:d1:f3:ba:ba:cf:19:bb:5e:5f:49:5c:fe:e4:
         1c:c2:24:7e:ce:fb:34:bc:5f:f7:84:3f:b4:49:44:f4:ea:70:
         93:37:f1:40:1c:b0:32:12:9b:48:24:bf:85:cb:68:19:b8:bb:
         34:b4:47:13:9f:1e:ae:e4:2a:8a:3b:64:79:3c:62:2e:e0:81:
         0d:e5:c9:d1:9c:37:58:e5:ea:fe:88:34:b9:5f:8c:2a:7f:8a:
         78:62:5e:af:b7:c8:4d:be:89:95:61:3f:0c:01:ca:52:5b:cd:
         79:6f:79:ea:f4:91:10:45:79:d4:5a:8b:52:f5:87:04:1a:6e:
         55:fe:e1:70:45:f5:a5:ff:a4:20:d6:af:58:54:2d:57:95:5a:
         ff:c5:1e:7f:b7:80:80:92:4d:a3:5b:79:69:4b:72:2f:a1:ee:
         32:f0:98:b3:25:14:e9:b3:cf:80:35:f0:2c:98:cf:30:f0:2d:
         94:91:bc:f6:8a:f1:4e:3f:aa:74:d0:ad:fd:1f:4f:75:38:61:
         b2:44:12:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:22 2025 by rpki-client