Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212618.roa
File:                     AS212618.roa (raw, json)
Hash identifier:          zat4iaXihwKZIcWJ7/z7UGV/Bw4oeeiBb7J425QVbNs=
Subject key identifier:   F6:BD:76:B1:6E:F5:49:9D:8F:05:C1:6B:13:3B:E5:43:6D:61:BC:94
Certificate issuer:       /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial:       740F62056C4FE6BF541FDC4508A51F03CA78BBD4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212618.roa
Signing time:             Sun 01 Jan 2023 23:59:25 +0000
ROA not before:           Sun 01 Jan 2023 23:54:25 +0000
ROA not after:            Sun 31 Dec 2023 23:59:25 +0000
asID:                     212618
IP address blocks:        2a06:a005:1d80::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0f:62:05:6c:4f:e6:bf:54:1f:dc:45:08:a5:1f:03:ca:78:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
        Validity
            Not Before: Jan  1 23:54:25 2023 GMT
            Not After : Dec 31 23:59:25 2023 GMT
        Subject: CN=F6BD76B16EF5499D8F05C16B133BE5436D61BC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f1:86:ae:1f:5a:36:b9:f9:21:e5:5f:24:81:
                    7b:a1:c6:20:fe:4a:e7:d2:ee:8c:d1:53:e5:7a:10:
                    4b:3b:08:97:07:51:16:8b:05:9e:ed:14:c1:22:38:
                    11:a3:9c:5c:cb:ee:11:93:ac:94:ef:cf:ac:67:e8:
                    b2:7c:df:24:ff:cf:e5:9b:b5:db:93:34:49:75:ce:
                    9a:b2:55:75:1c:e2:7a:2b:c4:d1:ea:22:27:fd:8c:
                    17:4e:0a:26:b0:48:5a:02:bd:8e:53:37:66:6d:92:
                    30:f2:23:8a:19:b5:19:8a:fc:38:b8:c7:20:e3:7f:
                    71:7e:2c:48:55:a3:d1:93:7d:86:57:bf:18:c6:71:
                    ef:e4:4f:6d:62:41:5c:75:a2:93:a2:1c:d8:f8:0b:
                    98:be:3c:0d:f5:b9:39:7b:93:f7:6f:d8:4c:51:29:
                    c6:05:b9:d3:c3:00:6c:2b:d7:b2:0f:fd:ec:4d:22:
                    5d:24:99:4e:ff:7b:77:8c:ea:9e:b4:96:ab:4d:91:
                    0b:2e:f3:e7:b8:9e:c6:4e:fc:49:13:00:ac:9a:08:
                    2e:28:6f:d2:5a:1c:b5:f5:9e:d2:d5:a9:9e:90:55:
                    b4:cd:dd:99:e3:23:b6:00:6c:55:fb:ec:b8:41:b5:
                    08:90:9e:b6:8b:38:1b:19:55:73:80:f7:14:ee:f4:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BD:76:B1:6E:F5:49:9D:8F:05:C1:6B:13:3B:E5:43:6D:61:BC:94
            X509v3 Authority Key Identifier:
                keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS212618.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1d80::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:c5:d5:3c:a5:0b:73:de:10:5d:89:74:78:fc:17:cd:36:fd:
         1d:4c:ea:07:81:c8:5a:81:64:d1:ee:da:52:f6:9f:c7:f7:03:
         44:ea:af:a3:72:76:d7:5b:a4:ba:0e:6f:be:a3:d2:df:af:33:
         2b:07:f1:d1:cc:f2:8a:bb:bc:84:25:2d:16:0b:28:c4:f1:38:
         1d:56:f5:24:f1:3f:f6:37:3a:f9:c2:92:09:8b:b2:34:b1:55:
         f1:c9:e1:d8:16:a3:1a:61:ff:d2:6f:86:6a:23:16:2d:ca:60:
         81:b0:16:61:90:bc:55:dc:79:0f:a9:32:79:36:59:97:20:99:
         b1:94:b8:d0:06:c0:7e:77:b9:ed:c5:5a:32:3b:e4:b7:d4:3f:
         9f:05:7b:4b:0b:8e:37:50:ec:a9:a7:0f:f2:0d:55:40:89:10:
         a0:ce:c8:ca:d0:6d:6b:da:6a:2a:2c:ad:c6:9c:87:c8:6f:ce:
         23:36:bd:5b:c4:be:20:e9:3c:5c:6d:58:e9:5c:0c:91:b6:ef:
         44:a3:5a:6b:62:bd:dc:18:d5:42:d2:fa:38:b1:55:50:f5:2c:
         f0:51:60:13:81:6c:01:92:ff:50:8f:84:86:20:19:c2:45:b1:
         10:ba:83:4a:8b:c7:81:a6:89:e4:f0:77:c4:c1:01:da:fd:af:
         8a:db:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:09 2024 by rpki-client on console-ams.rpki-client.org