Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PI297dw7X_T1jVdIwm_LK0pd3Xs.roa
File:                     PI297dw7X_T1jVdIwm_LK0pd3Xs.roa (raw, json)
Hash identifier:          ci2TY8QIIHZK4NN0TXr3igQ/HqkA+Mv+GupekPkLnk0=
Subject key identifier:   3C:8D:BD:ED:DC:3B:5F:F4:F5:8D:57:48:C2:6F:CB:2B:4A:5D:DD:7B
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0184C4E434C242C83C9C2B617476D54DD372
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PI297dw7X_T1jVdIwm_LK0pd3Xs.roa
Signing time:             Tue 29 Nov 2022 19:36:40 +0000
ROA not before:           Tue 29 Nov 2022 19:36:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207279
IP address blocks:        45.146.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c4:e4:34:c2:42:c8:3c:9c:2b:61:74:76:d5:4d:d3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Nov 29 19:36:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c8dbdeddc3b5ff4f58d5748c26fcb2b4a5ddd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:42:13:81:a2:64:ee:ad:24:a9:95:a4:ea:55:
                    2d:5d:e1:a1:9d:8f:1f:21:50:91:e2:90:e1:2e:61:
                    3b:b6:bd:e4:c5:b6:4c:82:7a:db:79:f8:f7:17:87:
                    b0:b6:c8:c5:30:63:aa:bd:79:cf:00:7a:68:b4:05:
                    41:4b:c6:5f:89:5b:41:5e:6f:43:27:e8:e1:65:38:
                    ef:0e:0d:30:cb:35:56:4e:15:4b:de:c4:ad:9a:0e:
                    92:c9:75:f9:9e:aa:55:3f:b1:6e:8b:b4:cb:34:93:
                    37:c0:12:55:e4:e3:2f:61:34:ef:c0:11:64:d1:d2:
                    1a:2e:26:42:67:c4:e2:5d:ab:f1:8c:c0:52:c2:01:
                    6d:54:00:6f:1b:d8:4b:29:49:99:55:c0:e4:ed:e0:
                    c4:8f:92:ea:c2:32:f5:6a:f2:71:29:87:91:a3:b8:
                    f5:23:ea:dd:c2:2e:a7:16:9f:c0:aa:f9:3b:4f:b2:
                    88:2f:a0:1c:da:11:35:3c:ab:44:c7:64:b0:ae:a7:
                    6a:cd:a0:e7:ca:45:f2:e6:66:74:2e:13:c2:0a:fd:
                    2f:9d:84:ac:a8:86:04:2c:f0:80:67:e6:c2:a0:d5:
                    a4:b8:2c:e1:e8:70:60:cc:3a:95:59:8f:13:d2:2e:
                    c1:da:6a:5b:ef:2d:e6:6a:ba:2a:bd:1d:d5:b2:dc:
                    86:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8D:BD:ED:DC:3B:5F:F4:F5:8D:57:48:C2:6F:CB:2B:4A:5D:DD:7B
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PI297dw7X_T1jVdIwm_LK0pd3Xs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:9d:fa:ea:fe:85:07:ef:8c:87:5b:10:79:56:f2:a6:0b:68:
         07:a0:5f:8f:7d:a9:13:b1:82:b7:77:37:d7:19:b7:a2:f7:d5:
         95:6f:5a:fa:58:ee:36:8b:a6:d3:18:d0:f4:94:67:be:03:28:
         d3:c9:5b:19:be:20:19:88:ce:87:48:87:dd:ed:2c:e7:b6:c3:
         84:2b:5b:08:ca:47:04:59:f9:d5:70:f7:21:61:96:18:cc:b2:
         d1:77:6c:0b:3c:af:83:8d:d8:81:30:ce:98:81:2e:ed:cd:f9:
         a0:88:31:14:ee:05:0c:88:f0:01:7b:44:60:01:15:f6:b5:83:
         4b:14:7f:cf:7a:64:20:45:df:09:86:cf:cb:1a:3a:cb:01:bc:
         a3:51:e5:ba:c2:58:4c:e7:22:ff:5e:0b:38:98:20:f0:af:d9:
         dc:37:13:9f:a0:cd:ce:1b:b7:fc:4a:e2:bc:eb:4e:23:76:6a:
         e8:44:e6:7b:df:20:a8:b6:34:6d:20:8a:fc:cb:08:72:e8:45:
         54:1e:4a:48:22:b0:6f:f1:0f:d1:4b:0f:e0:a7:75:4f:fd:bb:
         c4:c3:fb:1b:0a:bc:ec:31:b7:b0:f1:4f:4f:fa:ad:a7:0e:60:
         cc:df:89:e3:44:de:fe:cb:d9:07:88:71:95:02:53:e4:12:5f:
         3b:9a:95:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org