Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/6iiYrL02kaOw9xJ8FpmPLo8v6XU.roa
File:                     6iiYrL02kaOw9xJ8FpmPLo8v6XU.roa (raw, json)
Hash identifier:          3j6ZnlxMSc4trBd0AbVQMEVb+eHj7bcOUORqPGVVKRE=
Subject key identifier:   EA:28:98:AC:BD:36:91:A3:B0:F7:12:7C:16:99:8F:2E:8F:2F:E9:75
Certificate issuer:       /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial:       01847540746589DC0915E73D67C0E1DCB00F
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/6iiYrL02kaOw9xJ8FpmPLo8v6XU.roa
Signing time:             Mon 14 Nov 2022 08:27:49 +0000
ROA not before:           Mon 14 Nov 2022 08:27:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61138
IP address blocks:        45.154.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:75:40:74:65:89:dc:09:15:e7:3d:67:c0:e1:dc:b0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
        Validity
            Not Before: Nov 14 08:27:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea2898acbd3691a3b0f7127c16998f2e8f2fe975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:35:eb:b7:3d:cf:d8:1c:11:c4:ec:e9:7c:71:
                    c3:c4:12:78:bf:b6:08:d3:62:24:bc:76:f3:77:ce:
                    fe:1d:f4:43:8c:71:37:5f:01:cc:4c:ec:d6:b2:b0:
                    15:33:73:55:2d:c0:ce:3e:61:03:f9:cc:cf:e0:59:
                    c9:13:12:4d:89:60:fc:e6:05:65:9f:09:77:13:46:
                    45:04:1d:9b:15:3b:dd:57:3c:e0:4d:13:bb:59:0c:
                    1f:45:4f:bb:99:e1:b5:bc:6f:d5:06:08:63:71:87:
                    75:c2:26:89:e1:28:62:95:db:3d:11:1e:31:10:35:
                    95:94:b8:68:05:1f:73:e5:f2:1d:19:51:9c:9f:ca:
                    f7:18:74:ab:46:53:9b:f5:e5:7b:fa:e7:dc:a1:a8:
                    36:88:dd:15:b8:d4:2f:11:87:1c:94:33:c0:14:72:
                    ff:f6:c6:6b:1d:03:0b:58:84:fa:81:3e:78:6c:03:
                    05:bf:55:ec:34:f0:a5:5f:dc:b7:c5:33:78:ec:d1:
                    32:34:3c:b7:e1:60:b8:70:ab:b1:af:3e:9b:cf:8e:
                    2a:4f:35:a1:0b:ff:3b:4b:d4:62:50:9d:44:32:0f:
                    b3:5c:e4:eb:fa:47:ce:8f:b9:40:4f:c8:a6:c6:89:
                    e7:3d:44:f2:69:5e:6c:bd:03:34:b1:50:86:a5:2c:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:28:98:AC:BD:36:91:A3:B0:F7:12:7C:16:99:8F:2E:8F:2F:E9:75
            X509v3 Authority Key Identifier:
                keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/6iiYrL02kaOw9xJ8FpmPLo8v6XU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:9e:42:67:fa:1c:c9:7a:e0:52:ec:a0:0f:c6:8d:06:f4:f5:
         6e:22:54:ac:cf:8c:49:be:04:cd:a7:ac:c4:cd:03:c5:e1:87:
         c7:17:aa:88:5a:55:f1:8f:41:90:3d:c6:b4:b3:31:10:43:d1:
         fe:b2:6e:f6:8c:5e:06:c8:84:6d:ed:2d:38:23:05:af:2b:e0:
         aa:17:f6:80:6e:bb:f9:5a:2c:9a:ec:1a:3f:2c:af:5a:c9:b9:
         25:6a:fa:13:c3:9a:03:11:7b:d8:3d:1e:77:f5:10:f1:ca:58:
         4a:a2:2b:62:95:15:3d:36:52:d0:8b:06:ee:5e:f4:b8:d6:ec:
         96:cf:7f:40:55:94:68:f2:0c:44:db:50:6e:9f:94:76:89:e9:
         8e:65:6f:3c:39:cc:f3:cb:6a:d6:da:f7:0b:17:aa:13:66:79:
         b3:f4:e4:88:a3:ae:0c:ee:87:fc:2d:e0:29:5b:2b:19:10:34:
         0a:dc:4c:a2:6d:bb:f3:ae:2a:5b:5b:c1:ec:39:7d:46:d2:b2:
         37:f5:b8:d6:65:f3:21:23:b5:d3:bf:6a:c7:b5:5b:5d:96:53:
         7e:cd:9a:26:74:90:7a:b4:53:af:bf:d8:2d:10:e5:8d:c5:9f:
         2e:0f:5c:b1:44:90:21:4c:2b:ec:0a:9c:e0:97:c1:29:8d:9b:
         33:51:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org