Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/Absm9tEnVT-4WTgIYrZfxwArjEw.roa
File:                     Absm9tEnVT-4WTgIYrZfxwArjEw.roa (raw, json)
Hash identifier:          qLViZLUxNOcyhqL6HGWkbREwZZcvwdWKib4/L4L5Fuo=
Subject key identifier:   01:BB:26:F6:D1:27:55:3F:B8:59:38:08:62:B6:5F:C7:00:2B:8C:4C
Certificate issuer:       /CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
Certificate serial:       01E7F6AA
Authority key identifier: 7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/Absm9tEnVT-4WTgIYrZfxwArjEw.roa
Signing time:             Sat 01 Jan 2022 03:56:21 +0000
ROA not before:           Sat 01 Jan 2022 03:56:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25591
IP address blocks:        5.183.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31979178 (0x1e7f6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
        Validity
            Not Before: Jan  1 03:56:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01bb26f6d127553fb859380862b65fc7002b8c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:5d:1b:26:a1:34:bd:c5:62:26:68:23:b5:
                    65:a2:03:8f:34:f0:97:04:0e:fa:ff:66:b7:b7:87:
                    65:ec:30:50:ee:81:20:e1:e3:c3:31:a6:9c:f0:d0:
                    30:76:cf:96:ce:30:f1:59:c3:09:21:ed:e3:f5:dd:
                    0b:97:83:9c:f6:5b:3c:90:b6:dd:fd:5a:8f:ad:5b:
                    e7:b8:8e:56:6a:56:97:c1:d4:ef:32:27:5c:f8:c8:
                    75:ba:1f:8b:59:ea:ce:91:c9:6e:0c:7d:e6:3d:16:
                    e7:99:82:e3:e3:7f:69:e1:76:a7:98:aa:be:df:d6:
                    74:01:b4:14:0e:67:db:2e:52:cd:6d:a3:a3:ca:07:
                    d2:ff:08:96:37:86:a5:3a:dc:e4:d0:0f:0a:c0:7a:
                    7b:29:81:8d:43:b3:80:82:57:bd:b5:c8:4d:d0:30:
                    af:bf:61:06:82:99:b0:0d:a8:15:d1:43:af:9f:d2:
                    74:c8:60:8c:52:02:90:2b:d2:80:eb:d9:1b:f4:b9:
                    8e:cf:5b:55:ed:0c:f9:83:a2:75:a5:6f:c8:f1:2d:
                    c0:3e:21:6f:a2:2a:f2:43:6f:e6:a2:5c:7d:c8:7e:
                    5e:57:90:b9:b0:68:e8:07:ee:19:be:09:a2:82:29:
                    e5:c8:b9:ba:42:57:c3:cc:61:bd:d4:25:5d:9a:22:
                    56:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BB:26:F6:D1:27:55:3F:B8:59:38:08:62:B6:5F:C7:00:2B:8C:4C
            X509v3 Authority Key Identifier:
                keyid:7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/Absm9tEnVT-4WTgIYrZfxwArjEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:28:cc:c9:59:28:59:0f:21:33:68:57:a9:10:d6:ff:6d:
         3e:85:ff:67:d2:6c:c7:ba:08:98:3c:1a:65:5f:b3:c0:e1:2d:
         1b:5f:aa:3a:92:37:6f:9c:34:00:b7:49:b7:e4:68:16:fc:78:
         53:cd:ef:e2:76:42:ed:09:81:27:cd:4f:14:1a:cc:a9:42:92:
         48:29:a9:59:08:66:b5:da:c7:d1:77:ac:53:65:33:6e:2c:17:
         95:78:ff:8e:9c:18:5c:52:17:1d:5e:e0:10:04:27:f9:61:a0:
         c8:82:22:c5:6d:70:9d:8f:85:91:40:fe:03:d9:71:d8:0d:ff:
         36:79:10:74:b3:c2:5a:a5:c3:d8:3c:12:14:74:f9:97:4a:00:
         f0:b8:77:06:01:29:16:2d:e0:7b:21:2d:41:cc:56:32:5d:15:
         5e:d8:97:5e:32:4a:e5:f1:8d:b7:ae:6c:7a:5d:dc:bd:41:16:
         d7:0d:99:6a:d3:c6:49:b7:ac:d3:fd:a9:10:f3:0b:c1:d9:06:
         1e:5a:8b:4d:71:28:a3:10:67:78:0f:4b:ea:f8:97:47:6c:fd:
         30:b9:af:4a:06:88:26:e3:20:23:f6:f2:3b:ac:cb:42:f6:ae:
         e4:d5:88:6c:2e:fc:2a:3e:5f:5e:8e:f2:48:7e:30:4a:b5:24:
         a8:f6:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:29 2024 by rpki-client on console-ams.rpki-client.org