Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/snMw7W4mtSnkG-aFTb9Dsk9hSE8.roa
File:                     snMw7W4mtSnkG-aFTb9Dsk9hSE8.roa (raw, json)
Hash identifier:          Od7k2bJPEgpSgGZBqq71SbWwsxTJ6pGeSBkx1JNf70I=
Subject key identifier:   B2:73:30:ED:6E:26:B5:29:E4:1B:E6:85:4D:BF:43:B2:4F:61:48:4F
Certificate issuer:       /CN=c754c6069e49d24931379a4c92456385922b46ce
Certificate serial:       018CC3B679DD433EC9E7693F1C721961BCAD
Authority key identifier: C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/snMw7W4mtSnkG-aFTb9Dsk9hSE8.roa
Signing time:             Mon 01 Jan 2024 06:29:25 +0000
ROA not before:           Mon 01 Jan 2024 06:29:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     51847
IP address blocks:        2a0f:4a80:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:79:dd:43:3e:c9:e7:69:3f:1c:72:19:61:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c754c6069e49d24931379a4c92456385922b46ce
        Validity
            Not Before: Jan  1 06:29:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b27330ed6e26b529e41be6854dbf43b24f61484f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:e7:76:39:68:ff:78:34:26:e6:74:fc:68:
                    6e:af:65:b4:7c:11:99:57:7c:93:32:be:65:fb:34:
                    b0:d6:25:c5:e3:96:80:9c:69:df:01:80:fb:14:07:
                    b5:4f:b5:f2:c9:76:79:0a:ff:c4:4b:46:7a:67:88:
                    21:66:36:ac:a0:c2:19:8e:50:58:d8:fd:d9:c5:af:
                    1e:99:ca:f2:c2:93:0c:33:a8:73:26:54:3a:31:a4:
                    9b:cf:ef:46:88:ad:52:84:a5:3b:44:89:91:0e:0a:
                    4e:4f:d6:3d:c9:a5:f3:9c:c0:c6:fd:1b:37:d9:15:
                    a9:20:fb:33:b5:ee:6a:71:14:9b:87:7f:a9:62:56:
                    6a:1d:9b:87:77:62:0d:1c:1b:7a:0d:87:c9:06:aa:
                    66:74:5b:4f:5e:07:11:1a:05:e4:8b:9c:e3:87:ef:
                    82:8f:bc:ed:fe:67:89:29:68:15:2e:4e:b2:54:9c:
                    de:7c:78:de:82:9b:46:22:b3:22:b2:54:c1:95:cd:
                    3f:ef:a6:67:00:ea:1a:0e:8d:69:ce:ca:d9:52:b4:
                    77:4b:29:a6:66:b6:71:2a:f6:5c:a2:95:fa:29:29:
                    3a:e6:8f:c0:17:16:6f:0d:6d:d8:11:4d:87:6a:b8:
                    04:09:dd:04:d9:da:20:aa:62:0e:51:dd:2e:44:cb:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:73:30:ED:6E:26:B5:29:E4:1B:E6:85:4D:BF:43:B2:4F:61:48:4F
            X509v3 Authority Key Identifier:
                keyid:C7:54:C6:06:9E:49:D2:49:31:37:9A:4C:92:45:63:85:92:2B:46:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1TGBp5J0kkxN5pMkkVjhZIrRs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/snMw7W4mtSnkG-aFTb9Dsk9hSE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/24abaf-d1f2-4058-b5e7-36ff932ad611/1/x1TGBp5J0kkxN5pMkkVjhZIrRs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:4a80:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:24:7c:b8:5b:c8:fe:5f:4f:1d:89:ee:ca:33:c5:e3:aa:b3:
         40:19:ad:2a:f7:8b:34:e8:47:c4:ad:04:a3:8b:13:b6:bf:a8:
         60:cf:03:fb:83:c4:60:fa:3e:82:41:34:62:d6:81:85:4b:65:
         d8:1d:3b:14:81:6d:24:bf:c7:6b:b6:5b:f7:12:12:90:08:51:
         45:6e:7e:81:33:5a:86:33:92:ff:53:68:27:c1:75:13:66:35:
         b0:96:d2:50:ae:c7:49:37:aa:eb:41:bd:e8:3d:1b:5d:dc:07:
         c6:06:f4:e9:9e:bc:bb:f8:09:71:79:03:73:39:ca:aa:f3:6a:
         65:a4:3f:97:05:9a:c8:6d:a9:bb:be:87:3a:6c:01:9d:5f:a9:
         86:f6:8e:8b:d3:cc:4b:1e:89:84:8e:a7:7f:3e:32:f8:19:a8:
         28:dc:3c:02:f8:96:33:f0:de:2f:68:78:c4:d7:ab:50:1b:3c:
         26:93:4b:76:71:f1:c4:9b:1d:e1:bf:4a:ab:81:3f:54:2d:40:
         1f:fa:df:0c:65:2f:b3:50:87:bd:3b:cc:7f:f8:e6:de:1c:a8:
         90:80:32:a9:93:49:82:44:15:b3:3a:6c:80:6b:d6:79:94:6b:
         e4:72:cc:18:e5:17:d1:3f:47:44:16:e4:19:02:27:60:4c:6f:
         6d:3e:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 24 08:06:01 2024 by rpki-client on console.sobornost.net