Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/2/326131323a646434373a383136613a3a2f34372d3437203d3e20323131333538.roa
File:                     326131323a646434373a383136613a3a2f34372d3437203d3e20323131333538.roa (raw, json)
Hash identifier:          t5x0HW/oWl2SqRZ29DBVRj1WpvnSObEilP3viHCKDFc=
Subject key identifier:   9D:71:4F:16:05:A0:CA:1D:57:B1:E1:D9:DB:65:9E:F4:5E:6D:7C:CE
Certificate issuer:       /CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
Certificate serial:       39C76107AE22523F09B6ECBFE2B6E6AEE69CB9AD
Authority key identifier: 4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11
Authority info access:    rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer
Subject info access:      rsync://rpki.co/repo/August/2/326131323a646434373a383136613a3a2f34372d3437203d3e20323131333538.roa
Signing time:             Sat 08 Apr 2023 05:01:41 +0000
ROA not before:           Sat 08 Apr 2023 04:56:41 +0000
ROA not after:            Sat 06 Apr 2024 05:01:41 +0000
asID:                     211358
IP address blocks:        2a12:dd47:816a::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c7:61:07:ae:22:52:3f:09:b6:ec:bf:e2:b6:e6:ae:e6:9c:b9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B996F64C4B1DCD27FD243860C839004F56C2B11
        Validity
            Not Before: Apr  8 04:56:41 2023 GMT
            Not After : Apr  6 05:01:41 2024 GMT
        Subject: CN=9D714F1605A0CA1D57B1E1D9DB659EF45E6D7CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5f:66:b4:64:67:93:ca:4a:e5:d5:b8:23:86:
                    4a:6b:18:1d:1d:74:4d:f3:d5:9d:06:74:5b:6b:5b:
                    f1:31:9f:9e:fb:0f:ea:6b:f6:9e:d9:04:b1:18:96:
                    ea:19:8f:97:25:03:f4:22:1f:c2:49:46:2a:51:fa:
                    90:87:c8:65:52:38:09:d2:a7:f3:c2:32:b6:61:29:
                    0a:f2:84:c5:5b:9d:91:ff:3b:58:76:8b:3e:7d:76:
                    8a:86:f2:7a:e8:b4:fb:ae:da:cc:a3:f9:55:aa:c5:
                    30:ad:7e:33:a7:6b:ce:bf:c7:df:26:01:2d:c8:7d:
                    09:f6:38:18:39:cf:47:8f:4b:2f:58:63:63:e7:aa:
                    03:67:a9:0d:32:c5:a5:b5:b7:51:21:a4:6b:eb:08:
                    ce:c9:7a:5b:5f:53:76:49:9a:2b:ee:92:1a:6d:ea:
                    10:89:bb:85:60:b9:6e:95:04:62:cd:39:25:a7:56:
                    94:15:40:b8:a0:ce:fa:be:ab:0b:e3:40:be:b2:d0:
                    b7:49:af:04:5c:8d:db:88:76:4d:f3:59:df:8a:e1:
                    9f:3c:8e:67:62:da:ed:1d:d7:ed:c6:a2:38:73:b6:
                    b8:89:f8:f6:a3:e7:c4:ee:f0:1e:3a:ae:e1:0f:26:
                    b2:33:ff:43:43:d9:81:8e:f7:3d:61:19:84:c7:c0:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:4F:16:05:A0:CA:1D:57:B1:E1:D9:DB:65:9E:F4:5E:6D:7C:CE
            X509v3 Authority Key Identifier:
                keyid:4B:99:6F:64:C4:B1:DC:D2:7F:D2:43:86:0C:83:90:04:F5:6C:2B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/2/4B996F64C4B1DCD27FD243860C839004F56C2B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/6/4B996F64C4B1DCD27FD243860C839004F56C2B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/2/326131323a646434373a383136613a3a2f34372d3437203d3e20323131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:816a::/47

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:80:22:f9:62:d6:5d:fb:b4:46:84:7d:bd:a7:b5:da:52:
         98:f3:5d:64:f9:be:33:ed:e3:4b:9a:f5:f7:a0:53:33:ca:94:
         41:73:ba:b8:c0:21:57:2e:6b:0e:c4:eb:cf:d8:98:86:97:b5:
         b2:b3:ce:7e:3c:b7:9e:d1:e5:04:11:da:2e:52:24:fb:21:bf:
         4f:d6:1e:37:96:ae:aa:51:1a:3f:63:cf:78:ef:ad:d3:cd:90:
         72:c8:00:1c:50:28:50:17:d9:af:cb:07:c5:9e:e6:8c:65:41:
         13:36:91:a8:11:5c:48:b2:77:0e:60:97:a8:47:07:56:0e:a6:
         e2:d3:d5:a1:ab:a1:0c:b5:a2:33:d6:99:93:26:7e:10:04:c0:
         1e:8d:ea:72:de:6d:2b:cc:74:f2:9a:d0:22:a1:7c:ce:51:69:
         d8:57:19:2b:fc:7a:05:d9:36:43:02:f1:9e:23:7e:0f:2c:0b:
         71:b8:c8:43:24:3e:89:1b:23:5d:62:a0:0d:e6:b8:13:a4:30:
         47:4e:f5:db:e9:dd:cd:c2:cf:07:8d:91:35:ed:a8:d6:58:ad:
         21:57:5a:13:3f:e4:10:98:c0:d7:b6:d0:b2:c9:10:ea:e4:cf:
         8b:39:2d:cf:81:9a:f2:24:cb:2a:e1:30:9c:03:35:06:95:89:
         83:69:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:27:00 2025 by rpki-client