Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/snt8JEkmOA9iv1_nmOD4YY7quDw.roa
File:                     snt8JEkmOA9iv1_nmOD4YY7quDw.roa (raw, json)
Hash identifier:          EWAOlLJ5UHBKRVQusy30N4TCNchazOheJuMqp7W7aus=
Subject key identifier:   B2:7B:7C:24:49:26:38:0F:62:BF:5F:E7:98:E0:F8:61:8E:EA:B8:3C
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0182A89729C7651BCBBDCEC7FD16C5CF0E94
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/snt8JEkmOA9iv1_nmOD4YY7quDw.roa
Signing time:             Tue 16 Aug 2022 21:37:35 +0000
ROA not before:           Tue 16 Aug 2022 21:37:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     267121
IP address blocks:        45.80.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a8:97:29:c7:65:1b:cb:bd:ce:c7:fd:16:c5:cf:0e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Aug 16 21:37:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b27b7c244926380f62bf5fe798e0f8618eeab83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:d2:2c:45:6e:a5:21:4a:72:ad:a8:2a:52:
                    24:ad:85:6c:05:43:c3:54:f1:7e:b2:6f:c8:11:94:
                    95:42:05:37:ab:2b:f2:57:85:d2:7f:a6:c5:4e:a9:
                    2e:2e:f9:ad:e3:eb:45:f0:03:25:0a:74:bc:96:7a:
                    6d:78:32:d1:48:f6:05:d2:7b:f5:1a:b6:d2:18:c7:
                    8c:7b:51:70:49:89:90:21:ad:46:bf:65:5c:99:66:
                    3c:69:b6:fc:73:f2:e0:17:15:1f:a2:1e:58:cc:58:
                    ca:85:bc:03:c3:6c:e6:d1:41:44:85:75:a1:e8:e7:
                    95:a4:d4:86:33:f8:ed:9b:b7:b9:50:01:6e:a6:1a:
                    50:0f:0f:41:7b:3b:b5:bd:42:bb:3e:3a:96:52:b5:
                    d7:ea:1c:80:24:8f:2a:d8:06:15:48:ee:3b:53:f0:
                    26:70:c0:25:66:52:1f:dd:39:1d:cc:54:55:d5:1a:
                    c7:04:33:4b:e4:4b:ae:1c:ac:15:30:06:d2:bc:ce:
                    f8:7f:71:68:fa:a8:c5:56:d9:bd:a6:5e:99:47:6d:
                    3e:93:b5:4a:09:c5:cc:c8:ab:2c:fb:4a:57:93:e4:
                    28:58:98:e8:42:21:b1:32:bc:2b:e5:79:b4:0d:eb:
                    14:27:90:34:bf:93:7c:20:ce:99:79:53:99:a1:d9:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:7C:24:49:26:38:0F:62:BF:5F:E7:98:E0:F8:61:8E:EA:B8:3C
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/snt8JEkmOA9iv1_nmOD4YY7quDw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:84:bf:b7:55:da:d5:60:b6:84:a3:83:36:74:73:87:49:a9:
         03:5c:f3:ec:32:38:bd:a2:2a:d4:84:75:ea:fd:76:dc:15:ca:
         ac:56:d3:19:78:dd:d2:ae:8a:5a:c7:5f:5f:fc:0d:47:01:26:
         60:c6:a4:0d:d2:04:1b:2f:0e:6d:b6:ff:26:f4:36:60:10:41:
         bf:64:f4:d2:1d:ab:85:68:fb:24:be:bd:95:58:32:ac:ce:06:
         06:82:77:9c:bb:39:79:0c:58:12:b1:8a:6f:a9:98:ba:5f:6a:
         90:e2:d3:6b:b2:96:a0:3e:11:93:67:7a:8e:da:bb:89:78:b2:
         07:10:6a:15:57:0b:cf:5b:87:d9:84:47:96:06:b3:bf:35:8f:
         b7:8f:2a:01:91:1c:fe:3c:af:19:3f:7f:fb:58:e9:cd:4d:3c:
         6c:68:a5:51:27:5a:a0:1a:1f:ae:69:7d:d1:33:40:87:ac:d8:
         0c:15:77:5e:62:04:fd:f7:d0:1c:d1:20:5d:f2:02:5f:2a:5f:
         72:7f:eb:fb:a1:72:9e:f5:16:5a:28:36:9f:c7:05:51:e9:8a:
         8c:55:dc:89:93:8f:c4:5e:0a:5e:aa:51:6c:32:03:26:69:4c:
         7e:ab:58:e0:93:39:13:bb:06:e6:95:7c:dc:db:b2:5b:4a:69:
         61:a2:c3:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKolynHZRvLvc7H/RbFzw6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIwODE2MjEzNzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjdiN2MyNDQ5MjYzODBmNjJiZjVmZTc5OGUwZjg2MThlZWFiODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxvSLEVupSFKcq2oKlIkrYVsBUPD
VPF+sm/IEZSVQgU3qyvyV4XSf6bFTqkuLvmt4+tF8AMlCnS8lnpteDLRSPYF0nv1
GrbSGMeMe1FwSYmQIa1Gv2VcmWY8abb8c/LgFxUfoh5YzFjKhbwDw2zm0UFEhXWh
6OeVpNSGM/jtm7e5UAFuphpQDw9Bezu1vUK7PjqWUrXX6hyAJI8q2AYVSO47U/Am
cMAlZlIf3TkdzFRV1RrHBDNL5EuuHKwVMAbSvM74f3Fo+qjFVtm9pl6ZR20+k7VK
CcXMyKss+0pXk+QoWJjoQiGxMrwr5Xm0DesUJ5A0v5N8IM6ZeVOZodkdRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJ7fCRJJjgPYr9f55jg+GGO6rg8MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvc250OEpFa21PQTlpdjFfbm1PRDRZWTdxdUR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAFMA0G
CSqGSIb3DQEBCwUAA4IBAQBShL+3VdrVYLaEo4M2dHOHSakDXPPsMji9oirUhHXq
/XbcFcqsVtMZeN3Sropax19f/A1HASZgxqQN0gQbLw5ttv8m9DZgEEG/ZPTSHauF
aPskvr2VWDKszgYGgnecuzl5DFgSsYpvqZi6X2qQ4tNrspagPhGTZ3qO2ruJeLIH
EGoVVwvPW4fZhEeWBrO/NY+3jyoBkRz+PK8ZP3/7WOnNTTxsaKVRJ1qgGh+uaX3R
M0CHrNgMFXdeYgT999Ac0SBd8gJfKl9yf+v7oXKe9RZaKDafxwVR6YqMVdyJk4/E
XgpeqlFsMgMmaUx+q1jgkzkTuwbmlXzc27JbSmlhosMV
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:01 2025 by rpki-client