Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34372d3437203d3e20323131363034.roa
File:                     326131323a646434373a383037653a3a2f34372d3437203d3e20323131363034.roa (raw, json)
Hash identifier:          urTZCLWGSLov4W43KitNG1ksGv9NY6pquumugdxRAfQ=
Subject key identifier:   CA:D6:B7:90:70:89:36:CC:79:77:86:C7:4E:88:62:12:DB:C3:F2:B7
Certificate issuer:       /CN=05A730CA8351369FC3828D0DC297856AE74E8C11
Certificate serial:       1BEB078A24516FB0D976E110D4A55CD039FE0D4D
Authority key identifier: 05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11
Authority info access:    rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer
Subject info access:      rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34372d3437203d3e20323131363034.roa
Signing time:             Thu 13 Apr 2023 20:35:12 +0000
ROA not before:           Thu 13 Apr 2023 20:30:12 +0000
ROA not after:            Thu 11 Apr 2024 20:35:12 +0000
asID:                     211604
IP address blocks:        2a12:dd47:807e::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:eb:07:8a:24:51:6f:b0:d9:76:e1:10:d4:a5:5c:d0:39:fe:0d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A730CA8351369FC3828D0DC297856AE74E8C11
        Validity
            Not Before: Apr 13 20:30:12 2023 GMT
            Not After : Apr 11 20:35:12 2024 GMT
        Subject: CN=CAD6B790708936CC797786C74E886212DBC3F2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:4f:75:ed:1f:0b:52:1f:7d:cd:4d:8c:bd:
                    d7:16:34:66:75:e7:2d:e2:76:bd:2e:ed:95:a0:e9:
                    01:44:21:62:51:af:a6:92:ea:a9:40:45:5d:0c:23:
                    cd:97:9f:5f:35:f8:22:a5:8a:85:c8:36:de:e5:ba:
                    91:93:d5:a3:9f:da:64:55:be:85:da:4f:05:af:27:
                    d9:a4:fa:48:bf:7b:58:ae:18:cd:e2:04:84:e8:95:
                    37:8a:90:1a:f7:4c:3e:5f:bb:3b:53:d3:c3:d9:98:
                    f1:d9:7c:40:d1:cb:ee:07:98:2c:0d:d3:8c:ba:2f:
                    b9:aa:81:03:83:f8:0a:eb:85:c7:03:ea:cf:7c:23:
                    d5:ae:04:d1:0a:9d:c1:66:ab:51:83:35:34:69:a2:
                    5d:7a:18:ea:0d:d2:88:0c:d4:29:bc:96:0f:b7:a8:
                    48:ee:f2:7b:92:79:a7:5a:e4:9e:9e:31:dc:58:f6:
                    07:f3:46:12:c9:44:81:43:7c:f3:50:e6:37:96:fd:
                    10:7b:c0:15:81:1d:14:72:34:fa:35:22:ab:76:8e:
                    1e:89:0b:86:80:f3:ef:f6:48:a6:fc:0a:c9:c6:58:
                    82:6a:fc:f0:33:6a:2d:ba:1d:e7:5f:54:da:7b:ec:
                    6a:d9:35:66:1c:99:fc:55:19:2c:a8:9b:3c:65:9c:
                    af:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D6:B7:90:70:89:36:CC:79:77:86:C7:4E:88:62:12:DB:C3:F2:B7
            X509v3 Authority Key Identifier:
                keyid:05:A7:30:CA:83:51:36:9F:C3:82:8D:0D:C2:97:85:6A:E7:4E:8C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS211604/1/05A730CA8351369FC3828D0DC297856AE74E8C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/05A730CA8351369FC3828D0DC297856AE74E8C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS211604/1/326131323a646434373a383037653a3a2f34372d3437203d3e20323131363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:807e::/47

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:e4:e1:09:0a:58:c2:51:3a:47:b8:51:df:cc:65:ba:aa:
         55:7e:bf:b6:10:e8:48:2b:4e:8c:d8:41:20:06:ba:ae:0b:b1:
         4a:55:2c:2c:de:0f:0d:35:fb:4e:91:b7:85:45:7a:50:cb:c1:
         2e:91:5d:f6:6b:19:1f:ff:45:f7:93:f7:bd:22:b2:8b:8a:47:
         b2:fc:bc:77:40:30:b7:47:ec:1b:f9:27:b3:e4:2c:93:a1:23:
         87:55:52:6c:5c:a5:13:b5:9d:f0:bf:07:0f:58:23:8f:c2:25:
         27:d7:d2:af:76:ee:3a:cb:83:53:4e:c5:f3:b1:0b:8d:a5:6e:
         f1:46:89:2a:bb:cf:00:7f:fa:39:8d:b8:8d:f7:f2:34:89:0e:
         ab:8d:6d:b7:94:8a:a8:bd:96:74:96:5d:3a:98:46:0a:09:1a:
         ca:a8:c0:23:fe:b2:fd:47:21:65:fb:c0:05:04:d3:f4:76:3b:
         d1:58:ab:39:92:55:97:c2:f4:13:4a:82:74:e1:a1:e0:b4:43:
         2c:c0:33:48:d4:99:f9:ed:8c:d5:b8:95:f9:cb:cb:d6:52:c3:
         11:b7:4e:97:36:f1:4b:20:18:4f:a3:a0:84:3a:2f:5d:5d:45:
         a7:96:6e:25:43:be:9c:35:df:62:4d:fd:c3:a0:18:55:e1:22:
         ef:d1:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 27 18:59:59 2025 by rpki-client