Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/VILguiC7iHWD6ebFSAesDsrdbVg.roa
File:                     VILguiC7iHWD6ebFSAesDsrdbVg.roa (raw, json)
Hash identifier:          2CxqWs5jAcOV3iThXoM/hqNhxs0B3tJYR4ZNQm7z45U=
Subject key identifier:   54:82:E0:BA:20:BB:88:75:83:E9:E6:C5:48:07:AC:0E:CA:DD:6D:58
Certificate issuer:       /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial:       01941FFA11017DA375295319A279D15A3689
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/VILguiC7iHWD6ebFSAesDsrdbVg.roa
Signing time:             Wed 01 Jan 2025 03:47:49 +0000
ROA not before:           Wed 01 Jan 2025 03:47:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208046
IP address blocks:        2a13:29c0::/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:11:01:7d:a3:75:29:53:19:a2:79:d1:5a:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
        Validity
            Not Before: Jan  1 03:47:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5482e0ba20bb887583e9e6c54807ac0ecadd6d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:d0:95:38:d1:b3:0c:0c:3b:47:02:66:4e:
                    35:f2:8c:33:25:36:ec:39:4d:29:58:dc:9f:ad:94:
                    2f:65:90:d4:29:61:a7:a0:e8:f0:1e:c4:29:d1:01:
                    42:0b:36:16:3b:a8:d3:ad:5e:48:9b:2f:74:c7:21:
                    c9:45:e1:93:c2:be:ce:fd:06:57:1c:04:aa:39:44:
                    cc:f7:11:01:1c:7c:69:c2:64:d4:19:69:e6:a9:db:
                    00:3f:10:a1:a5:67:26:af:d4:ba:71:b9:24:23:83:
                    55:ce:fc:12:02:ed:4e:b5:e5:cd:cd:49:50:48:fd:
                    f4:ab:8b:44:e3:10:f6:0f:3b:0e:51:18:de:44:eb:
                    25:ad:56:17:8a:9f:77:8e:44:62:21:0f:6d:48:e2:
                    e6:bb:b8:22:06:6d:68:c6:c4:06:1f:e2:56:d0:55:
                    de:ea:b6:6c:67:41:d2:f4:b4:f8:d8:5d:d0:67:48:
                    56:87:41:90:0d:b5:98:40:4a:76:26:8c:6c:2d:b5:
                    db:9f:ae:7b:48:29:4e:e3:b4:9f:fa:40:2a:1a:6c:
                    30:d9:d5:f2:cd:6e:c8:af:22:0d:26:62:92:0d:c9:
                    4b:5a:e9:f8:9a:87:d6:c8:d5:29:ee:4f:11:ab:da:
                    83:40:ed:a3:fe:41:b5:b9:cd:a5:ac:f2:3c:2c:3e:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:E0:BA:20:BB:88:75:83:E9:E6:C5:48:07:AC:0E:CA:DD:6D:58
            X509v3 Authority Key Identifier:
                keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/VILguiC7iHWD6ebFSAesDsrdbVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:29c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:0d:a0:74:fa:83:07:15:77:58:c8:60:0d:b2:86:9d:50:
         9f:7f:17:c3:93:be:fe:83:78:02:5a:9c:d6:f1:1f:30:76:f8:
         df:c3:d0:94:9a:84:73:f2:16:c9:4b:b0:c5:9e:f4:8b:9d:27:
         c8:84:ad:f1:13:1e:55:f5:39:73:1f:16:9d:a9:a7:67:42:d7:
         cc:23:55:d0:e4:68:d0:0a:26:b0:76:39:7a:b6:3b:93:db:7f:
         9a:94:57:0e:c3:32:b5:d1:dc:4a:f1:0f:d3:51:1a:ab:4f:2c:
         1c:c2:12:b5:61:7f:a2:8e:d6:49:08:ed:af:97:87:61:00:01:
         3d:0a:9a:94:48:db:06:30:43:50:d6:db:00:f7:ce:77:43:fc:
         5f:77:c5:d9:79:18:18:00:3a:44:54:06:84:ae:08:4e:41:a8:
         16:6c:e0:33:ca:a1:a0:c7:e3:4a:c8:12:e8:f3:a9:18:98:7b:
         48:c8:cb:db:a0:35:8a:8c:01:ff:8e:e7:1a:14:16:e8:2a:f6:
         62:15:e0:13:03:26:28:8b:29:08:ba:30:27:22:01:c7:e1:52:
         d8:74:07:42:6b:9e:a6:2a:ed:fb:a1:19:06:53:1d:60:fa:16:
         8c:67:b0:ce:a2:d7:77:ce:10:d4:6a:85:7a:2e:04:01:5f:b3:
         2c:ef:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:18:55 2025 by rpki-client