Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/9dwpiiaaj6KExiaa3NC6g2tooaw.roa
File:                     9dwpiiaaj6KExiaa3NC6g2tooaw.roa (raw, json)
Hash identifier:          yvXH63Ewyuzs4DiDHa7BXvurrXOtUn55NG/tcbSHqMU=
Subject key identifier:   F5:DC:29:8A:26:9A:8F:A2:84:C6:26:9A:DC:D0:BA:83:6B:68:A1:AC
Certificate issuer:       /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial:       018CC6B86F80306B159BE4962C2BB0669A6A
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/9dwpiiaaj6KExiaa3NC6g2tooaw.roa
Signing time:             Mon 01 Jan 2024 20:30:25 +0000
ROA not before:           Mon 01 Jan 2024 20:30:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208293
IP address blocks:        5.133.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:6f:80:30:6b:15:9b:e4:96:2c:2b:b0:66:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
        Validity
            Not Before: Jan  1 20:30:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f5dc298a269a8fa284c6269adcd0ba836b68a1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:26:e2:7d:e1:54:27:1e:4f:11:85:9d:9c:
                    9a:d6:66:7c:1b:5d:1a:a2:07:90:6f:91:eb:95:6e:
                    d1:55:ed:a6:25:97:2c:c3:bc:8d:d4:9a:5e:75:06:
                    4b:c0:6d:dd:7e:aa:5e:51:2c:5c:25:ea:26:c1:0b:
                    9a:81:5d:b2:aa:a2:f9:28:0a:e9:24:12:4a:de:4b:
                    d5:62:d0:90:a1:eb:5b:63:79:55:65:20:66:75:01:
                    da:18:4e:ba:29:9f:84:71:ef:d5:bc:19:18:dc:db:
                    9c:63:e3:f1:37:d7:36:75:64:ae:59:a7:3a:63:e6:
                    4e:de:98:4c:78:48:a6:47:78:3b:66:4a:39:7c:ec:
                    3b:50:93:ca:a0:60:f7:00:5b:02:30:0a:3b:c2:3b:
                    cf:2f:16:c6:57:40:8a:f4:d6:34:51:47:c3:35:0a:
                    0f:ed:33:24:d1:f7:54:aa:cd:72:33:73:d0:f6:ad:
                    62:e7:e6:19:23:84:15:b7:3e:9f:f5:22:64:22:41:
                    24:90:48:e1:74:bb:3a:d8:08:82:84:5a:40:67:83:
                    97:c5:e7:cd:74:dc:84:ee:2f:ab:87:c3:54:29:0d:
                    a4:c7:f4:f4:c7:97:25:91:b5:d9:a2:2c:66:79:f5:
                    32:22:9a:88:ec:95:71:ca:d0:31:1c:8f:85:9a:92:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DC:29:8A:26:9A:8F:A2:84:C6:26:9A:DC:D0:BA:83:6B:68:A1:AC
            X509v3 Authority Key Identifier:
                keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/9dwpiiaaj6KExiaa3NC6g2tooaw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.133.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:b3:bd:83:3a:6f:48:06:0c:20:91:74:99:19:b3:d1:b4:87:
         db:d8:45:8d:3e:58:88:9e:20:41:b0:a8:33:65:29:51:2c:4e:
         8a:b1:06:80:69:9f:cf:bc:76:a1:a7:6b:a1:b0:83:45:75:53:
         e3:04:0c:82:bb:e5:c7:8a:8f:10:18:2b:95:28:89:0a:58:1b:
         fa:77:7a:27:db:e8:fd:49:08:75:47:a4:c4:91:49:88:d7:6d:
         c5:55:47:79:8d:f3:78:a5:8b:0c:cd:6e:90:f6:67:ec:ce:02:
         0d:84:4d:60:dd:14:0d:6b:fd:d0:15:a0:00:c4:4c:3b:31:d9:
         9e:46:00:f9:30:94:34:b9:93:23:ca:f2:89:d2:b9:4f:10:43:
         13:88:b0:a9:e1:b2:b9:71:65:95:09:6d:e9:dc:c0:77:43:f9:
         4e:b2:d3:3f:e5:77:e0:45:01:f4:44:a5:e0:71:a3:d9:d0:8b:
         db:55:0e:20:2a:ce:d2:c2:36:ea:9f:aa:c4:5b:f1:78:6e:0b:
         3d:2b:eb:b4:0e:73:9f:8d:31:4a:86:89:fc:df:90:0d:8f:a9:
         ed:7a:7e:be:43:ac:7b:0a:7f:3d:5a:84:91:7b:a6:27:d7:1b:
         91:20:2f:69:eb:fc:5c:2b:03:39:22:fd:7a:53:09:45:f1:cd:
         ea:ce:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org