Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/6_JFznUC3-y3KGqy3HatIIxWrEg.roa
File:                     6_JFznUC3-y3KGqy3HatIIxWrEg.roa (raw, json)
Hash identifier:          4yB4yweuAT0NGs6IARFF9hiVoPNVhYZP6dMDwSKGdfM=
Subject key identifier:   EB:F2:45:CE:75:02:DF:EC:B7:28:6A:B2:DC:76:AD:20:8C:56:AC:48
Certificate issuer:       /CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
Certificate serial:       0182F51B9A87961BCB0B2F3CA6D482A06B7F
Authority key identifier: 74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/6_JFznUC3-y3KGqy3HatIIxWrEg.roa
Signing time:             Wed 31 Aug 2022 18:13:23 +0000
ROA not before:           Wed 31 Aug 2022 18:13:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210661
IP address blocks:        2a11:ac00::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f5:1b:9a:87:96:1b:cb:0b:2f:3c:a6:d4:82:a0:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744cf1144e495887e48a7e3bb64b178835fb3dc5
        Validity
            Not Before: Aug 31 18:13:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebf245ce7502dfecb7286ab2dc76ad208c56ac48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:f1:fc:5f:f7:44:0d:6c:a6:ad:d9:39:eb:
                    e3:5b:01:36:cc:31:52:b2:e1:dc:b9:aa:d7:33:03:
                    fb:9b:1c:5e:9c:4e:f1:27:d0:3b:48:ed:b5:a5:02:
                    2f:eb:93:9b:14:f0:67:bf:8b:db:cf:79:87:90:3d:
                    22:03:f7:93:93:54:30:89:30:4b:a6:ce:d8:63:9f:
                    b3:54:47:d0:b8:ef:90:15:85:59:d0:6c:3e:7d:d8:
                    88:19:25:83:3d:ae:74:1f:5c:f0:ad:4d:1f:25:da:
                    ac:3a:8d:e0:1a:dd:ac:81:ed:a4:5c:43:9b:1f:59:
                    ec:2a:72:ba:24:37:95:47:f3:a0:05:e4:3d:e8:11:
                    59:80:24:af:2a:08:02:3c:4f:1e:34:ee:d9:2d:e3:
                    4e:a9:35:ef:6c:90:fa:4a:3b:4f:0c:59:d8:27:3c:
                    28:40:fd:7d:14:2a:95:06:47:f1:17:fe:ea:2f:a5:
                    84:52:87:ce:8f:4a:d1:65:27:96:6f:58:9e:23:ed:
                    d7:e6:14:5b:01:f0:25:09:c4:d5:20:96:9b:18:7d:
                    02:c3:7c:72:60:77:49:fc:4b:f1:54:71:47:19:b6:
                    3f:ae:9e:9f:a0:73:3d:55:f9:b4:a2:4e:55:e4:29:
                    96:a7:84:6b:a5:32:06:5d:7e:f4:7d:99:ce:16:cf:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F2:45:CE:75:02:DF:EC:B7:28:6A:B2:DC:76:AD:20:8C:56:AC:48
            X509v3 Authority Key Identifier:
                keyid:74:4C:F1:14:4E:49:58:87:E4:8A:7E:3B:B6:4B:17:88:35:FB:3D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEzxFE5JWIfkin47tksXiDX7PcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/6_JFznUC3-y3KGqy3HatIIxWrEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d0600c-1ae1-49ca-abdf-4f425ecdd6e2/1/dEzxFE5JWIfkin47tksXiDX7PcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:ac00::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:3b:78:e5:92:88:6d:df:32:a2:69:50:23:94:e8:fa:01:ab:
         43:6b:65:4f:60:52:09:b2:46:9a:d5:22:69:30:3d:57:da:91:
         e7:49:5d:ff:b1:16:47:59:ad:a7:e6:ee:60:47:73:e5:d5:0e:
         10:78:1c:bf:f9:e9:71:bd:87:a9:a3:21:08:c8:04:31:d7:55:
         47:a5:5e:1c:36:0a:03:8e:01:cd:c8:5c:a7:d4:f7:c0:2a:d4:
         42:e5:aa:32:c4:bd:24:73:ae:3a:86:c8:da:c9:0a:91:af:d3:
         8c:ce:9c:15:74:ba:bf:5f:ed:6b:fd:a1:88:cc:58:c3:d4:4a:
         62:f8:af:31:e3:85:a1:1c:a2:cd:b0:24:53:a5:ce:b8:ae:e2:
         8c:55:af:88:9d:21:31:f4:b6:bd:33:98:94:7d:40:7d:f8:cb:
         ae:94:bd:d3:88:f8:63:28:fd:31:84:90:e9:6b:cf:c3:13:f5:
         0f:e5:87:20:9b:1f:c6:93:f0:83:63:f3:f1:8c:d5:76:d5:14:
         76:24:e8:86:c1:c0:8a:f2:55:80:89:8e:a4:bc:68:e5:80:41:
         d9:33:24:4e:49:d6:f2:1a:4c:e5:91:a7:77:99:bf:39:23:99:
         c2:a6:19:04:53:87:d8:8a:65:bd:b0:db:50:cb:e2:a9:6e:12:
         de:d8:18:28
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYL1G5qHlhvLCy88ptSCoGt/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGNmMTE0NGU0OTU4ODdlNDhhN2UzYmI2NGIxNzg4MzVm
YjNkYzUwHhcNMjIwODMxMTgxMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmYyNDVjZTc1MDJkZmVjYjcyODZhYjJkYzc2YWQyMDhjNTZhYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zzx/F/3RA1spq3ZOevjWwE2zDFS
suHcuarXMwP7mxxenE7xJ9A7SO21pQIv65ObFPBnv4vbz3mHkD0iA/eTk1QwiTBL
ps7YY5+zVEfQuO+QFYVZ0Gw+fdiIGSWDPa50H1zwrU0fJdqsOo3gGt2sge2kXEOb
H1nsKnK6JDeVR/OgBeQ96BFZgCSvKggCPE8eNO7ZLeNOqTXvbJD6SjtPDFnYJzwo
QP19FCqVBkfxF/7qL6WEUofOj0rRZSeWb1ieI+3X5hRbAfAlCcTVIJabGH0Cw3xy
YHdJ/EvxVHFHGbY/rp6foHM9Vfm0ok5V5CmWp4RrpTIGXX70fZnOFs/goQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOvyRc51At/styhqstx2rSCMVqxIMB8GA1UdIwQY
MBaAFHRM8RROSViH5Ip+O7ZLF4g1+z3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEV6eEZFNUpXSWZraW40N3Rrc1hpRFg3UGNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kMDYwMGMtMWFlMS00OWNhLWFiZGYt
NGY0MjVlY2RkNmUyLzEvNl9KRnpuVUMzLXkzS0dxeTNIYXRJSXhXckVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kMDYwMGMtMWFlMS00OWNhLWFiZGYtNGY0MjVlY2RkNmUy
LzEvZEV6eEZFNUpXSWZraW40N3Rrc1hpRFg3UGNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhGsADAN
BgkqhkiG9w0BAQsFAAOCAQEARjt45ZKIbd8yomlQI5To+gGrQ2tlT2BSCbJGmtUi
aTA9V9qR50ld/7EWR1mtp+buYEdz5dUOEHgcv/npcb2HqaMhCMgEMddVR6VeHDYK
A44Bzchcp9T3wCrUQuWqMsS9JHOuOobI2skKka/TjM6cFXS6v1/ta/2hiMxYw9RK
YvivMeOFoRyizbAkU6XOuK7ijFWviJ0hMfS2vTOYlH1AffjLrpS904j4Yyj9MYSQ
6WvPwxP1D+WHIJsfxpPwg2Pz8YzVdtUUdiTohsHAivJVgImOpLxo5YBB2TMkTknW
8hpM5ZGnd5m/OSOZwqYZBFOH2IplvbDbUMviqW4S3tgYKA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:44 2023 by rpki-client on console.sobornost.net