Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/uKHFohvH-d5oy8GY8KLjPzDYb3g.roa
File:                     uKHFohvH-d5oy8GY8KLjPzDYb3g.roa (raw, json)
Hash identifier:          w5J5yKBUex6V9xHwPquKKRGxEu76qNJjqKv3QblqRTQ=
Subject key identifier:   B8:A1:C5:A2:1B:C7:F9:DE:68:CB:C1:98:F0:A2:E3:3F:30:D8:6F:78
Certificate issuer:       /CN=990742994f6e75a47df4d18ec2d3c24858eb1f05
Certificate serial:       021710D7
Authority key identifier: 99:07:42:99:4F:6E:75:A4:7D:F4:D1:8E:C2:D3:C2:48:58:EB:1F:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQdCmU9udaR99NGOwtPCSFjrHwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/uKHFohvH-d5oy8GY8KLjPzDYb3g.roa
Signing time:             Sat 01 Jan 2022 04:55:58 +0000
ROA not before:           Sat 01 Jan 2022 04:55:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212786
IP address blocks:        45.130.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35066071 (0x21710d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990742994f6e75a47df4d18ec2d3c24858eb1f05
        Validity
            Not Before: Jan  1 04:55:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8a1c5a21bc7f9de68cbc198f0a2e33f30d86f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:d1:8e:b5:58:d0:21:e2:a4:bc:2e:79:0d:
                    f3:9f:84:1d:a2:71:43:d0:5a:a3:14:4d:c9:49:11:
                    9c:ac:9e:55:ec:85:f2:11:e3:eb:c2:be:0d:0a:13:
                    ff:a2:9b:23:c7:2e:da:42:82:9a:bd:9c:35:d1:ed:
                    ac:2b:47:4e:ec:e8:dd:69:8b:8f:ce:05:4f:e6:f1:
                    70:c5:f2:78:ed:4b:78:a6:f4:7d:a0:d2:75:b7:08:
                    4d:66:dc:7a:cf:e9:85:aa:c4:da:d9:e6:32:59:43:
                    c0:c6:c1:8b:e2:d2:f3:b9:43:42:47:d3:14:36:b0:
                    0e:6b:eb:dd:e2:5b:ad:82:b0:ba:40:c4:d6:ef:c5:
                    47:69:ab:cb:65:dd:0e:ae:11:a4:40:c1:44:f2:7e:
                    a2:ef:c5:08:0f:f6:71:ab:ed:02:12:98:6d:0c:b7:
                    3e:3c:2c:3a:f7:b5:b7:17:27:b0:4c:fa:1d:33:3c:
                    03:6c:92:d1:74:69:b3:c8:85:41:2d:4b:06:80:fe:
                    04:6e:57:ad:e0:4e:2e:62:d9:e4:4f:a9:0e:7f:fe:
                    ce:3e:cb:09:77:94:85:06:96:3e:f6:ff:c5:37:f0:
                    93:74:71:24:06:07:cd:fb:91:de:1d:10:38:34:f5:
                    d4:b8:00:59:0d:3b:19:91:82:c8:69:a3:5f:94:1b:
                    4e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:C5:A2:1B:C7:F9:DE:68:CB:C1:98:F0:A2:E3:3F:30:D8:6F:78
            X509v3 Authority Key Identifier:
                keyid:99:07:42:99:4F:6E:75:A4:7D:F4:D1:8E:C2:D3:C2:48:58:EB:1F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQdCmU9udaR99NGOwtPCSFjrHwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/uKHFohvH-d5oy8GY8KLjPzDYb3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1477da-6454-4e7b-9e0d-92d57934c88f/1/mQdCmU9udaR99NGOwtPCSFjrHwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:81:25:25:b0:3c:25:93:ea:73:ad:5e:5d:3e:70:46:a6:
         5a:35:d8:33:fa:c1:7e:e3:e1:d1:60:db:86:43:5b:c2:b8:fe:
         68:e8:d1:1b:35:1c:ee:97:3d:8f:c5:68:a3:55:bd:dc:48:a8:
         b2:ea:ad:d2:81:6c:a2:0f:b9:d3:29:bb:21:6c:c5:ba:93:df:
         eb:93:e2:39:ae:5c:0a:4b:b8:cd:cb:7b:6f:8d:00:6d:a5:c5:
         d2:bc:8c:dc:3b:0b:5c:20:3b:2a:06:a0:c9:6d:44:42:d4:fc:
         4f:4f:73:b6:02:6f:a5:0a:1b:f8:10:29:4e:4d:e2:05:0c:c5:
         fa:9e:9f:a5:bc:0f:d0:c2:67:8e:d1:cd:0d:2e:1c:fc:2b:52:
         b4:a6:3e:0b:39:80:b6:05:d3:17:89:35:31:66:b7:cd:53:64:
         9c:da:b5:a8:b5:1d:ee:c5:97:ac:7c:7e:83:75:c3:fe:02:9e:
         9f:fe:1f:78:55:bb:55:bb:23:08:c8:76:75:f6:e0:00:2c:b5:
         8e:d8:f1:69:ec:75:72:a1:b5:6c:7e:4d:d1:f5:3c:12:1c:ce:
         1c:e5:e1:eb:0a:77:fd:0c:dd:b6:4e:10:23:ee:e3:98:6d:b2:
         1c:95:a2:18:f2:5a:83:f6:3f:e7:96:bd:d3:f1:69:83:c1:9a:
         7b:d0:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:46 2024 by rpki-client on console-ams.rpki-client.org