Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
File:                     326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json)
Hash identifier:          gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=
Subject key identifier:   BC:08:B1:DA:00:23:EA:4F:4B:2D:A9:F9:55:FE:2B:A9:A1:9A:CF:DE
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       0A5C866C052B75AAC11FC4B009E7EFEE0292B455
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
Signing time:             Mon 09 Jun 2025 10:01:35 +0000
ROA not before:           Mon 09 Jun 2025 09:56:35 +0000
ROA not after:            Mon 08 Jun 2026 10:01:35 +0000
asID:                     204017
IP address blocks:        2a11:f2c0:fffa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5c:86:6c:05:2b:75:aa:c1:1f:c4:b0:09:e7:ef:ee:02:92:b4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Jun  9 09:56:35 2025 GMT
            Not After : Jun  8 10:01:35 2026 GMT
        Subject: CN=BC08B1DA0023EA4F4B2DA9F955FE2BA9A19ACFDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:74:f0:59:df:75:a2:00:ca:cd:6e:28:f8:
                    82:dd:82:c8:0f:19:2c:0e:7e:d5:91:0c:8a:59:c3:
                    e8:dd:e9:b6:81:ea:53:7d:b5:2e:70:4b:2a:32:a0:
                    e3:56:22:d3:bc:79:79:70:ab:22:e5:34:95:e1:04:
                    24:f5:02:2b:54:df:1e:8d:10:5c:d1:50:8d:b8:33:
                    a6:95:62:46:b2:d6:2a:8a:2c:25:04:5a:a9:1e:1c:
                    84:59:ef:0d:a2:24:13:15:95:a5:d9:33:fc:ba:ea:
                    c6:d5:f8:d8:35:6a:6e:2e:47:f2:4c:bc:b0:f2:98:
                    d8:7f:dc:d4:88:e6:37:b1:c3:66:44:37:52:4d:bd:
                    b1:31:83:04:dc:72:ab:8e:cf:e2:8e:1f:2b:de:58:
                    59:be:18:53:09:22:a5:9b:75:5b:79:76:ab:11:8a:
                    fb:a6:29:b4:eb:ac:a7:c0:b0:97:35:4c:90:36:14:
                    a5:1b:40:68:3a:e8:57:07:93:b2:f5:58:12:a5:7b:
                    6f:b7:42:0b:54:c4:15:9a:d1:51:1f:08:a0:49:e1:
                    ba:8b:d2:8a:27:0e:5c:ec:e8:4f:30:92:be:1a:a0:
                    09:ef:5b:4c:36:12:c5:46:87:9b:85:95:4a:aa:ca:
                    38:16:13:3b:b6:63:48:7b:b4:16:45:a9:b8:51:c0:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:08:B1:DA:00:23:EA:4F:4B:2D:A9:F9:55:FE:2B:A9:A1:9A:CF:DE
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:54:62:d4:90:00:2c:7d:11:53:97:2d:00:87:58:0c:48:ce:
         51:68:33:db:b8:6d:ce:7c:9f:15:7e:81:55:d7:dd:14:bf:a6:
         e3:34:e8:37:ad:b7:1f:66:25:1c:44:21:e8:b1:a9:a2:ec:f7:
         68:e5:21:6d:ce:35:19:ca:42:63:b5:c4:f2:66:8f:7c:6b:b4:
         22:40:c2:84:49:95:5e:78:87:f7:a9:dc:49:b1:6c:b0:d2:18:
         88:cf:6f:31:5c:94:6c:27:e8:63:bc:27:c9:ff:d0:f7:97:34:
         1d:67:21:61:89:0f:3b:fb:65:a5:5c:91:02:e3:35:8f:1e:1b:
         3c:39:b2:d4:c0:0f:5d:24:8f:66:55:54:c0:e5:a6:60:4e:e4:
         f3:f2:de:cc:e2:a2:4c:db:92:75:ee:5b:d4:01:50:6d:e2:a0:
         96:db:32:c4:05:a6:63:cc:0c:0d:b7:87:b6:ef:8a:e1:df:a6:
         1d:70:ff:03:42:a0:c5:ed:e6:39:80:71:40:84:bc:c8:af:d6:
         eb:dc:7b:55:93:6a:74:17:ad:f3:75:b5:3b:7a:3e:de:37:89:
         d7:4f:ba:fd:dc:44:e9:ed:00:67:8e:19:ce:f8:8f:be:b7:b1:
         20:1b:7a:04:c6:70:a2:68:5d:39:7d:37:af:52:ac:7d:f2:74:
         53:94:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----