Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          1A7/vbQl3xYdx8u1JkbF/fZw17oj+9u1uUmDFupphxI=
Subject key identifier:   01:42:40:D4:8F:22:34:3A:D0:48:57:9C:90:93:E1:0B:E6:AD:5A:2C
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       5EC88E7C215671E29EE7B0E5FC2CAB9838232FE4
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 03:31:30 +0000
ROA not before:           Mon 10 Apr 2023 03:26:30 +0000
ROA not after:            Mon 08 Apr 2024 03:31:30 +0000
asID:                     50058
IP address blocks:        165.140.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:c8:8e:7c:21:56:71:e2:9e:e7:b0:e5:fc:2c:ab:98:38:23:2f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Apr 10 03:26:30 2023 GMT
            Not After : Apr  8 03:31:30 2024 GMT
        Subject: CN=014240D48F22343AD048579C9093E10BE6AD5A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:e0:5e:64:7a:9e:5e:2d:3f:0c:96:6d:e0:
                    85:b2:c7:25:59:8f:cc:ba:3d:53:ec:29:4f:e7:c6:
                    4e:a2:f0:4f:3e:42:d7:f1:f5:09:71:0f:ba:17:6e:
                    4c:d5:be:0e:d8:3b:a8:7c:2d:aa:b7:4c:ae:c5:49:
                    61:3c:70:fa:a3:c5:ec:dd:8c:fa:35:d9:80:8f:f7:
                    82:af:ad:55:91:91:b1:8d:be:f3:49:d0:60:be:24:
                    b2:72:b8:64:0f:0c:44:ef:7b:54:b3:65:32:b0:34:
                    30:0b:2b:2b:db:e2:1b:5d:17:69:1f:92:2b:63:bc:
                    7a:45:ff:0e:87:3e:07:64:92:a9:83:25:10:aa:97:
                    c8:26:a0:94:d0:ae:1d:3a:fb:0a:c6:08:59:a2:ed:
                    d9:d0:c5:95:40:34:2a:2c:cf:7b:f1:e5:d9:29:4f:
                    a8:65:75:aa:5d:67:f6:9f:71:de:19:b0:08:09:56:
                    68:52:aa:80:d5:90:03:0a:39:7c:05:0e:9f:dc:ca:
                    80:d7:6c:43:37:ba:e8:2f:d0:04:a4:6b:9f:cf:fa:
                    82:72:b5:b9:95:01:3a:a1:57:00:b6:4e:5f:24:bf:
                    d3:fc:1e:04:22:5d:22:52:b2:de:73:3c:6a:b4:28:
                    36:66:d4:5f:ff:2a:70:d4:e9:5f:cd:5e:ac:0f:b0:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:42:40:D4:8F:22:34:3A:D0:48:57:9C:90:93:E1:0B:E6:AD:5A:2C
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/3136352e3134302e3134322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:03:92:43:38:cf:39:ee:01:28:d0:f0:37:21:aa:c8:cb:29:
         df:93:78:a3:c2:5f:83:0f:6c:17:64:45:33:9b:0f:3e:57:07:
         5e:94:dc:1e:40:19:07:62:47:24:48:9f:1b:d6:5b:b1:08:b9:
         f4:d4:86:57:fc:43:f8:92:a6:e3:0e:f3:ba:56:71:ef:8c:58:
         5d:c3:16:c9:8e:23:a1:41:15:1f:db:5e:48:20:ed:5e:31:2c:
         cf:6f:17:4c:df:65:0e:80:95:3a:48:af:06:9e:01:68:d7:4b:
         95:3d:e0:31:ce:04:f4:e2:e0:80:4b:d7:2a:fe:0b:54:80:4c:
         62:26:db:fa:21:09:9b:6a:a6:56:ef:ee:94:0b:ec:87:bb:3f:
         84:3d:58:ce:5d:8e:44:46:fd:cb:fc:53:0a:8a:d6:e2:ad:fc:
         eb:0c:3f:ad:8a:08:a8:f1:48:23:2f:4e:94:ea:2b:94:00:97:
         f9:58:db:d4:e2:03:c1:b4:dd:c7:49:8a:e3:e3:5d:2c:1b:f4:
         7b:7d:75:29:dc:0c:f5:c1:b8:1d:a5:44:7c:35:01:b6:cf:bb:
         87:b9:34:79:0b:d8:cd:db:78:ee:7d:2f:58:0f:f1:90:4e:cf:
         7d:f5:a1:61:fc:1b:58:44:9b:87:f2:d3:9f:c9:fb:4e:3f:bf:
         c9:86:42:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 16:43:40 2023 by rpki-client on console-fra.rpki-client.org