Route Origin Authorization

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa
File:                     326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          7ghk9D4UVnRhm4U4k83pXoUdtNIhC5osjgpTQPegbFM=
Subject key identifier:   FB:FF:BD:60:7F:73:EC:8E:50:B6:3B:B6:95:0C:66:0C:38:CA:B3:37
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       1C6721AD500EBC049A87C5F4C8C0D5E8E5BD5CF9
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa
Signing time:             Thu 05 Jan 2023 14:28:13 +0000
ROA not before:           Thu 05 Jan 2023 14:23:13 +0000
ROA not after:            Thu 04 Jan 2024 14:28:13 +0000
asID:                     146950
IP address blocks:        2a0a:6040:2d00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:67:21:ad:50:0e:bc:04:9a:87:c5:f4:c8:c0:d5:e8:e5:bd:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Jan  5 14:23:13 2023 GMT
            Not After : Jan  4 14:28:13 2024 GMT
        Subject: CN=FBFFBD607F73EC8E50B63BB6950C660C38CAB337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:83:5a:27:fa:a3:96:94:2e:95:2f:04:7a:
                    24:0f:48:e3:ac:b0:fc:11:62:80:7e:45:03:b4:98:
                    25:64:b4:3a:ad:21:94:75:1b:80:a0:09:30:95:cf:
                    0f:60:a0:5f:e0:e2:24:5d:3d:43:4a:30:89:dc:2a:
                    d4:70:32:19:ab:e4:e5:b2:3a:19:06:22:a9:65:38:
                    e4:64:3d:7d:bd:b0:a1:6a:46:c4:c7:a2:32:24:4c:
                    f1:ad:7b:89:be:e2:18:d6:de:2c:80:4a:a4:47:65:
                    e5:fa:13:7b:2c:21:f7:79:39:fd:be:c7:f5:f1:d5:
                    88:f8:61:72:19:db:c3:70:e1:f4:e9:44:e1:3d:65:
                    d1:44:92:84:e8:23:3c:b8:4d:34:65:58:0a:0d:3a:
                    78:8d:56:83:32:98:be:73:df:28:ca:c1:44:5d:01:
                    9d:69:78:c3:6f:ae:95:87:96:3c:9f:b0:3e:b0:c8:
                    3c:e7:ea:ed:3a:f5:ce:96:ed:88:2c:09:85:1d:df:
                    c9:9f:1b:2e:e6:4b:12:a9:42:9a:2d:9a:63:0f:bf:
                    54:e1:11:c5:c2:fc:5e:b2:c0:77:54:e8:fd:4a:66:
                    93:43:9b:6e:5b:5a:80:bf:7c:37:ae:29:1f:ac:14:
                    8a:ed:ea:6a:82:80:3d:f0:62:f5:68:c3:b0:ae:f4:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:BD:60:7F:73:EC:8E:50:B6:3B:B6:95:0C:66:0C:38:CA:B3:37
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:e0:c7:57:e0:d2:2c:6a:40:0a:c2:f8:33:c9:c5:d0:9e:0b:
         e4:ee:12:61:8d:57:1d:af:3e:6c:b8:0d:86:c8:49:1d:35:45:
         1c:ba:12:55:76:2e:e2:0f:cd:11:8e:97:e9:3b:cf:68:ad:31:
         36:05:10:5a:54:b8:41:41:50:f0:fe:b2:bb:54:31:d5:db:4c:
         33:52:8c:d2:bc:dd:5e:6f:2e:ab:4a:02:3f:ac:e3:4e:27:04:
         61:91:07:7d:e4:33:72:98:37:a9:73:1c:a0:4d:49:0a:ee:43:
         75:0b:bb:cd:ca:36:1e:7a:b1:ae:e4:b2:09:c7:29:5f:60:0f:
         3d:e8:da:10:83:13:ec:a4:ed:33:90:38:9a:52:1c:32:91:3c:
         da:c6:e2:77:0e:ba:9d:50:19:88:f1:23:ec:9f:3f:ee:c1:2e:
         23:f5:10:74:6f:33:38:9f:fe:d7:98:56:5a:7f:b2:18:fd:59:
         11:29:14:d3:c6:39:15:1a:82:7a:a6:6d:bc:1f:8a:bf:82:c8:
         f0:46:15:52:94:8d:01:db:22:40:f4:ed:a8:e7:7a:c5:a9:07:
         2c:3c:12:ef:22:be:28:68:1b:6b:76:77:73:51:4e:5e:d8:26:
         47:0c:cb:5b:e0:71:3a:bb:8d:35:a8:8c:c9:f9:fa:e8:e5:39:
         d7:5f:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:41 2025 by rpki-client