Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/F90rdqO764bWdbLysNGhJk_H7iU.roa
File:                     F90rdqO764bWdbLysNGhJk_H7iU.roa (raw, json)
Hash identifier:          sI2eDmzYvzntap+tn4x5XX5EyErbVQsB8I2mTQ6gg00=
Subject key identifier:   17:DD:2B:76:A3:BB:EB:86:D6:75:B2:F2:B0:D1:A1:26:4F:C7:EE:25
Certificate issuer:       /CN=1f6551edd483908f99fb29d3485a619a09e33211
Certificate serial:       018572558911DF52C2866E5725A00AB06E1A
Authority key identifier: 1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/F90rdqO764bWdbLysNGhJk_H7iU.roa
Signing time:             Mon 02 Jan 2023 11:54:46 +0000
ROA not before:           Mon 02 Jan 2023 11:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63473
IP address blocks:        45.132.74.0/24 maxlen: 24
                          45.132.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:55:89:11:df:52:c2:86:6e:57:25:a0:0a:b0:6e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6551edd483908f99fb29d3485a619a09e33211
        Validity
            Not Before: Jan  2 11:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17dd2b76a3bbeb86d675b2f2b0d1a1264fc7ee25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:08:1b:7f:2e:7c:5b:eb:57:88:3e:3e:9a:
                    59:02:38:02:94:09:bb:e5:05:c4:2e:f2:52:07:70:
                    ce:f7:7b:c1:b3:48:9c:95:10:ff:61:62:2a:64:a6:
                    f1:e7:2a:99:c4:20:20:fd:f4:cf:bc:9f:91:d1:39:
                    10:9e:51:9b:ed:65:f2:d6:e8:4a:eb:80:e9:72:d9:
                    1e:e0:02:08:bc:e3:ac:73:78:a8:1a:0d:96:17:71:
                    1b:05:48:91:e6:a5:3b:8e:b8:42:da:1c:b9:0a:be:
                    ee:44:7b:56:fa:96:34:16:de:0f:63:b1:5c:4a:12:
                    73:97:6a:15:e0:f0:5a:df:b1:12:03:bd:9c:cc:7b:
                    d4:54:8a:f5:f9:68:2a:11:c7:64:cb:63:d9:f5:e7:
                    39:61:5a:19:da:ea:67:ea:86:8b:16:78:c9:7b:d9:
                    2c:4c:2d:a2:19:3c:2c:04:ec:92:75:fa:aa:43:08:
                    61:0d:61:dd:08:c9:40:c2:f1:7c:d2:a4:80:d1:17:
                    86:40:3f:6c:72:e0:43:ff:a1:e6:dd:13:9a:a8:06:
                    7d:83:e6:9d:8f:be:54:63:d1:b9:42:34:d1:3e:77:
                    74:0b:72:4f:b1:7c:18:2b:98:08:b0:a7:bb:de:88:
                    d7:18:92:17:08:cb:4b:5a:f2:bb:4f:b1:1b:06:ca:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DD:2B:76:A3:BB:EB:86:D6:75:B2:F2:B0:D1:A1:26:4F:C7:EE:25
            X509v3 Authority Key Identifier:
                keyid:1F:65:51:ED:D4:83:90:8F:99:FB:29:D3:48:5A:61:9A:09:E3:32:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2VR7dSDkI-Z-ynTSFphmgnjMhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/F90rdqO764bWdbLysNGhJk_H7iU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6aefaa-86bd-404a-9030-35b100090d4f/1/H2VR7dSDkI-Z-ynTSFphmgnjMhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:79:0c:84:fd:74:c6:d8:b6:11:65:72:8d:d8:35:ad:64:f2:
         68:ab:3f:2b:3f:5c:af:ee:15:56:1a:83:f6:6d:d9:68:7d:bb:
         78:8f:e3:79:c1:6a:e8:d8:93:09:6d:76:dc:60:ef:11:80:f4:
         48:85:5a:aa:f1:d8:0c:e9:68:c2:02:8b:5c:71:4e:be:2c:57:
         c6:32:e3:31:e6:de:25:7c:a3:94:49:b3:8e:5b:a2:5c:23:29:
         44:24:d2:f1:df:94:7c:9e:e5:fe:dd:dc:58:7b:9e:da:e1:cf:
         94:b2:54:58:1a:6b:3c:20:2b:93:9b:1a:86:56:7a:b7:a5:93:
         ab:59:9d:b5:b3:05:2c:36:f0:6b:78:7b:16:a3:e6:5d:82:5d:
         ed:54:af:f8:7c:b0:06:1f:52:e2:c8:ac:f1:a5:7a:c2:0a:67:
         a0:a0:51:dc:4f:e4:a2:17:06:bc:36:ec:31:b8:02:a0:ea:07:
         ec:9f:54:4c:f3:3a:09:60:bd:93:25:04:d4:19:eb:26:49:45:
         78:a6:a9:c0:41:70:9d:8b:8d:29:36:09:6f:34:00:3d:b0:b6:
         20:7c:ee:17:96:6b:b9:f2:df:b8:47:fc:48:81:7f:44:46:df:
         7e:0f:aa:ed:72:8a:eb:61:82:42:da:5c:db:9e:b4:53:8e:44:
         76:3f:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:53 2023 by rpki-client on console-ams.rpki-client.org