Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa
File:                     1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa (raw, json)
Hash identifier:          WwHfIJBCJOWZwmBHZAmytj+3RwfqBNsJp6wnUSyBihs=
Subject key identifier:   D5:99:41:BE:FB:8E:28:A3:18:5F:C3:07:58:01:4F:9E:99:BA:47:10
Certificate issuer:       /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial:       01877AA9337837065CF77BC2F084485D9F67
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa
Signing time:             Thu 13 Apr 2023 12:48:41 +0000
ROA not before:           Thu 13 Apr 2023 12:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208293
IP address blocks:        5.133.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:a9:33:78:37:06:5c:f7:7b:c2:f0:84:48:5d:9f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
        Validity
            Not Before: Apr 13 12:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d59941befb8e28a3185fc30758014f9e99ba4710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3d:4e:71:99:ad:82:3c:c8:ee:4f:53:61:0a:
                    9a:96:a0:79:bf:38:8e:89:23:8e:fa:90:8e:b9:1a:
                    f7:1d:f6:74:86:1b:d6:59:ba:c2:4e:83:70:2b:7f:
                    4e:3c:de:53:b4:3d:4d:a7:ab:8d:8e:41:50:e7:0d:
                    2a:b4:21:0d:8a:f1:b7:9c:9d:d7:67:2e:04:f3:31:
                    d3:d7:a4:61:c2:ba:93:04:27:19:11:e8:e2:1a:0c:
                    7a:47:66:09:dc:1b:ff:99:a8:56:e6:3c:ed:18:be:
                    8a:d2:34:e2:ec:0a:b7:fb:f3:f9:65:7b:9c:70:98:
                    34:70:cb:4c:0d:87:4c:33:4a:84:e5:38:46:8e:43:
                    e6:0f:d3:61:59:ca:a6:33:ea:72:7f:be:74:79:ce:
                    2d:c4:de:47:8e:a7:b0:cc:fe:71:15:7d:3e:94:e6:
                    e2:93:f5:22:8a:1b:b8:17:87:91:42:e2:c9:91:fe:
                    29:dd:7a:1c:f3:c7:6b:ee:3a:f7:ff:0e:72:6b:8b:
                    4d:21:1b:e1:da:3a:93:03:3f:7d:0a:e8:b2:16:0e:
                    79:f0:f0:8f:fe:4e:cd:a3:c8:5c:62:fa:ee:b7:28:
                    06:81:1e:9d:bf:35:bf:8f:7b:d1:c8:6d:f8:a2:ee:
                    8d:4c:33:47:d2:a8:12:75:51:8b:7c:77:2f:d7:84:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:99:41:BE:FB:8E:28:A3:18:5F:C3:07:58:01:4F:9E:99:BA:47:10
            X509v3 Authority Key Identifier:
                keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/1ZlBvvuOKKMYX8MHWAFPnpm6RxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:da:e8:b0:d5:fb:0f:51:70:9c:aa:e0:6c:78:0d:6b:4e:
         94:1e:8e:12:8e:f9:72:f9:2e:a8:dd:23:7e:ab:34:e1:c3:cc:
         7a:0b:36:1c:be:a3:e0:bd:7f:03:d5:33:55:ab:fe:da:40:8f:
         82:9e:24:99:9d:9d:6b:17:fc:b6:57:21:cd:b8:6b:51:d9:02:
         94:c6:a6:6e:7e:6a:cc:0b:b2:8d:ef:1a:75:5e:5b:f5:5f:bb:
         70:66:87:b3:43:40:e3:27:a1:50:7c:7b:ef:a9:15:17:cb:67:
         ec:37:b7:ad:5f:59:c0:cb:b4:c1:ab:b2:2f:17:1e:6a:24:7c:
         e7:b0:ec:0b:2a:ba:3e:d5:90:76:92:dd:b0:82:08:93:20:aa:
         4c:6d:34:38:42:d5:71:01:23:23:6d:a9:94:3d:d9:10:5e:e7:
         e8:59:54:01:ad:b2:94:7b:9f:a8:ec:a6:fa:9d:4b:61:3a:ab:
         32:b4:e1:3d:54:26:f0:9d:d7:6e:ec:6d:2a:2a:13:43:90:79:
         8a:b2:72:98:ab:70:77:eb:15:2a:c0:17:96:2d:57:16:51:3b:
         fc:70:17:0b:a0:07:10:ca:88:4e:cf:9b:91:5e:e4:f9:c6:83:
         43:89:a8:11:e8:05:ad:be:0c:38:f1:f2:43:b1:c1:6d:aa:ff:
         b2:f1:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org