Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383030303a3a2f34382d3438203d3e20323131343331.roa
File:                     326131323a646434373a383030303a3a2f34382d3438203d3e20323131343331.roa (raw, json)
Hash identifier:          koJ3v00bll3L1j5SLFZKhssviR/vSJ64rEPulXOSVfk=
Subject key identifier:   0F:A6:F4:28:35:DB:9F:F4:9F:A9:02:23:C7:16:AA:40:71:D0:5A:9E
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       7E2799EA8FEDB24490191AD146BA5EFF533B9215
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383030303a3a2f34382d3438203d3e20323131343331.roa
Signing time:             Sat 08 Apr 2023 04:55:40 +0000
ROA not before:           Sat 08 Apr 2023 04:50:40 +0000
ROA not after:            Sat 06 Apr 2024 04:55:40 +0000
asID:                     211431
IP address blocks:        2a12:dd47:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:27:99:ea:8f:ed:b2:44:90:19:1a:d1:46:ba:5e:ff:53:3b:92:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:50:40 2023 GMT
            Not After : Apr  6 04:55:40 2024 GMT
        Subject: CN=0FA6F42835DB9FF49FA90223C716AA4071D05A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:58:ae:bb:00:68:7b:2e:d0:fa:72:8a:cf:
                    88:cb:0b:17:82:74:d5:55:c8:41:e7:98:1b:f5:83:
                    2d:43:73:ec:23:a5:85:fd:71:fe:2e:f9:c2:93:18:
                    f3:99:57:00:7c:0a:ef:4b:d9:cf:33:b6:21:8b:8a:
                    a3:77:c7:30:af:9a:fd:aa:5e:18:cb:ef:6e:e4:16:
                    54:d5:11:51:f9:f9:7b:4c:bd:71:73:fd:a1:5d:11:
                    fc:a2:8d:e7:5f:76:0c:66:fc:5a:11:43:90:af:13:
                    16:6e:3f:15:7d:b1:54:a2:4b:aa:91:68:47:62:0f:
                    ab:a8:70:d9:8f:e5:df:cc:25:86:e0:c9:6f:57:53:
                    9b:55:00:d2:c3:72:7f:01:ab:56:e7:89:c0:f0:27:
                    28:50:6a:6d:9e:d9:d8:50:4a:d7:03:f8:cc:86:cf:
                    10:65:27:45:1c:db:3b:29:92:bb:89:a7:aa:47:0e:
                    eb:01:14:62:01:67:0d:c7:68:5c:d0:e7:53:fa:3c:
                    a9:ed:44:ad:53:cb:ed:47:6e:32:40:f0:d7:50:e6:
                    02:b7:0c:ec:02:0a:35:5c:9e:49:ae:9b:d4:c4:25:
                    3d:a4:07:13:35:1c:e1:86:ff:15:3c:24:8c:ef:6a:
                    ec:ce:76:16:c4:55:1f:92:0f:7b:17:73:4e:24:63:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A6:F4:28:35:DB:9F:F4:9F:A9:02:23:C7:16:AA:40:71:D0:5A:9E
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383030303a3a2f34382d3438203d3e20323131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:2d:2b:53:78:a7:ac:c4:93:88:ac:cf:91:dd:39:2f:f0:
         5d:00:98:e6:c6:09:08:02:79:cf:b2:72:56:47:eb:f7:40:c1:
         11:0a:38:1e:33:2e:bd:7a:fe:18:08:9f:24:6c:8e:11:a0:ee:
         92:2e:b3:f0:dd:5c:a3:2a:17:47:b7:37:c4:31:c3:7e:3c:0f:
         9e:f6:90:77:94:cc:7e:9b:53:82:16:07:0d:b2:31:1a:47:c3:
         d5:ed:2d:49:7d:35:39:e5:a2:45:dc:83:fe:9b:65:a1:05:23:
         9c:0f:f0:b3:db:b1:ce:4f:f8:42:c5:a2:d4:27:68:cf:fd:2b:
         be:e2:ab:4c:fb:bf:4a:73:bb:ed:50:17:e5:9e:4e:e4:7b:70:
         56:38:80:ee:d3:e6:d4:a0:b4:82:e0:4f:d7:f1:19:83:46:f4:
         80:af:9b:51:50:62:8c:5f:82:3c:3c:87:74:b6:a8:fd:96:d2:
         fb:94:1d:f4:9b:c6:ac:90:56:d7:61:00:a1:db:1e:06:eb:67:
         6f:05:ae:a0:ea:a2:59:d8:4b:39:73:63:90:3a:4e:29:e3:4b:
         55:5d:a1:cd:97:4e:a7:a2:2c:56:09:6f:ef:43:eb:0e:c8:35:
         7b:41:d0:54:0f:51:a2:b8:ce:2d:d5:61:3e:32:b1:61:ec:cd:
         63:85:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 10:06:13 2025 by rpki-client