Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/JmtJ-INEM_7jrxIHd0tiI0Kh_h4.roa
File:                     JmtJ-INEM_7jrxIHd0tiI0Kh_h4.roa (raw, json)
Hash identifier:          A8TKq8vs1RS+k63vtGklTxnb/o5+m76hAK7BwJ7Wa0A=
Subject key identifier:   26:6B:49:F8:83:44:33:FE:E3:AF:12:07:77:4B:62:23:42:A1:FE:1E
Certificate issuer:       /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial:       018A8DDE4AEFAA100E29DC4FDCE2AC755A4D
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/JmtJ-INEM_7jrxIHd0tiI0Kh_h4.roa
Signing time:             Wed 13 Sep 2023 09:27:50 +0000
ROA not before:           Wed 13 Sep 2023 09:27:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35478
IP address blocks:        45.142.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8d:de:4a:ef:aa:10:0e:29:dc:4f:dc:e2:ac:75:5a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
        Validity
            Not Before: Sep 13 09:27:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=266b49f8834433fee3af1207774b622342a1fe1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:b9:48:e7:75:80:4b:cb:f0:41:1e:58:5e:
                    bf:d3:0c:75:60:0b:b4:86:42:a0:ba:68:97:80:b8:
                    77:c3:42:38:fe:d5:c6:fa:90:be:8d:ae:28:14:43:
                    46:3b:21:f6:6c:4e:28:3f:63:ee:59:32:9e:59:22:
                    2c:9d:4b:fa:38:ab:e7:c5:d7:ca:d5:8f:18:25:a3:
                    96:50:22:e3:9a:fe:0b:f2:2e:6c:3e:91:7c:0d:5f:
                    cc:b2:8f:64:41:c8:ba:aa:f2:8e:a8:f1:d8:64:7f:
                    04:7a:ad:1f:c2:2c:77:49:6d:d4:9a:6b:f7:ac:5e:
                    71:d7:b2:6c:21:85:43:1d:d3:7f:d6:ef:98:1c:57:
                    d1:a0:50:28:95:d5:cf:1e:b6:43:6c:b1:f2:35:6d:
                    b8:d5:7f:05:0b:60:eb:a2:f1:25:62:0e:6e:fb:e4:
                    18:b0:53:ed:fe:c9:80:5e:c2:fc:59:92:d3:99:97:
                    15:a4:a9:d4:55:02:20:ea:46:2d:2e:b7:23:9f:76:
                    ab:7c:a3:a6:d6:2c:2e:c5:e2:1e:ac:43:61:bc:35:
                    95:16:57:8f:fe:2a:df:81:26:f5:83:74:0d:45:ec:
                    ad:f0:1e:62:53:98:b4:bc:c7:ac:a2:03:fa:50:c2:
                    2c:0c:1c:cb:f8:5e:af:66:0e:52:d1:a1:1a:db:0c:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:49:F8:83:44:33:FE:E3:AF:12:07:77:4B:62:23:42:A1:FE:1E
            X509v3 Authority Key Identifier:
                keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/JmtJ-INEM_7jrxIHd0tiI0Kh_h4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:54:26:72:c9:82:3b:56:58:a3:72:4a:7a:54:b0:09:0d:30:
         fc:ee:f4:dd:59:23:44:45:bf:e6:13:ac:51:46:8d:a5:0d:f6:
         fe:be:0b:ba:e3:15:f5:1c:7d:70:82:fb:4e:ff:0d:d2:ed:e8:
         83:3f:3b:d0:24:9c:0e:13:58:1c:09:52:02:2b:7f:92:bc:db:
         a6:47:03:80:e1:83:b9:b2:78:bf:2c:c0:13:33:ca:9b:ac:74:
         51:1c:4e:30:2e:f2:8a:b7:e3:4c:92:4b:88:3d:ed:09:12:79:
         6b:da:46:95:71:ea:a5:ed:0a:c4:bb:c8:16:e5:8f:a4:cc:2b:
         2f:da:37:04:4b:0f:ea:4b:87:c9:66:93:b0:87:6a:80:1e:7b:
         c8:cf:f0:c1:85:f4:26:65:85:34:ec:86:ea:0a:06:a0:32:34:
         50:94:37:3c:c7:49:b2:3c:e4:3e:12:50:b5:71:aa:7c:6f:25:
         20:f3:9d:24:de:d3:c4:d4:b1:54:fc:6b:1d:a4:bb:67:42:83:
         b4:64:13:ac:b3:71:09:87:34:9b:c3:c8:d7:67:47:35:40:15:
         32:a2:fb:35:ab:70:89:08:66:66:fc:f3:e9:5e:4e:5e:be:62:
         5e:e0:fd:69:5b:3f:e0:92:d7:ff:1a:d4:d2:32:ad:f9:95:cc:
         bf:3b:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:38 2024 by rpki-client on console-fra.rpki-client.org