Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F5WMKo6ss-HlQISfv_GXYUVInC0.roa
File:                     F5WMKo6ss-HlQISfv_GXYUVInC0.roa (raw, json)
Hash identifier:          Zt+g+zBuLXHtdjVNA/O+fNC4eesf7qmKnx4W0JwDdvY=
Subject key identifier:   17:95:8C:2A:8E:AC:B3:E1:E5:40:84:9F:BF:F1:97:61:45:48:9C:2D
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0182AB3513C8A2E8C6EB76B4E852257AC44C
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F5WMKo6ss-HlQISfv_GXYUVInC0.roa
Signing time:             Wed 17 Aug 2022 09:49:18 +0000
ROA not before:           Wed 17 Aug 2022 09:49:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a06:a005:1800::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ab:35:13:c8:a2:e8:c6:eb:76:b4:e8:52:25:7a:c4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Aug 17 09:49:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17958c2a8eacb3e1e540849fbff1976145489c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:66:f7:0b:29:27:8d:da:a6:2f:7d:b4:35:
                    bd:68:80:ca:2b:08:fc:c6:31:30:5c:03:d9:3e:78:
                    6a:c7:94:fb:7f:08:7d:00:e1:98:5b:07:05:fd:27:
                    63:f9:36:c0:80:66:0a:1c:e7:82:67:cd:90:13:46:
                    8e:08:34:93:0e:5b:40:5b:01:e5:9d:66:f8:11:21:
                    34:b5:bd:68:ed:0e:00:0a:78:31:85:01:93:9b:fc:
                    c9:55:34:61:29:68:60:87:f7:45:14:94:bd:fc:08:
                    b5:23:25:79:fb:71:98:c4:b2:f3:6c:2d:f4:b4:a1:
                    00:a2:21:6a:93:95:be:28:fa:37:8f:2d:22:58:62:
                    8d:69:9f:b9:d3:3e:28:74:aa:7c:36:2c:4b:ff:78:
                    fd:7e:8d:74:a5:9c:8d:d4:18:16:64:76:cc:a0:f6:
                    75:c2:b1:28:09:17:7b:0e:94:61:c8:d3:b5:d9:a3:
                    70:5a:35:b7:74:0d:11:55:58:62:ee:63:76:22:55:
                    db:6c:bd:ed:fd:27:94:65:34:05:03:19:8b:0d:69:
                    8c:ae:ec:a8:24:03:76:25:f7:84:e9:c9:be:d9:6d:
                    3c:c6:af:21:ab:fb:83:34:cb:5f:b7:27:79:26:16:
                    40:7e:47:bb:f1:af:82:48:6f:ed:ad:91:a7:e4:e8:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:95:8C:2A:8E:AC:B3:E1:E5:40:84:9F:BF:F1:97:61:45:48:9C:2D
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/F5WMKo6ss-HlQISfv_GXYUVInC0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1800::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:46:b5:1f:c5:cc:da:c2:6e:91:b5:ac:41:2f:77:64:e8:13:
         eb:43:cc:7f:05:fc:06:80:ea:16:f7:c0:05:13:b8:b7:b4:5e:
         9d:22:68:61:ef:3b:59:66:ca:90:db:ad:06:83:32:ae:8f:0c:
         86:46:60:ef:32:89:1c:96:67:62:47:d5:38:ab:81:c0:d9:60:
         9c:bc:ff:c9:81:39:e0:aa:25:78:7f:ef:3d:9c:a1:bf:ee:0c:
         d6:db:bf:18:cb:7f:9e:57:0e:93:74:c0:11:5c:4f:c3:d0:17:
         d6:db:95:ef:2b:ae:17:07:e7:8e:54:fb:37:17:74:20:35:58:
         60:48:1e:7e:d6:56:51:15:dd:c4:04:45:77:9d:a0:6a:f0:4c:
         b3:79:b0:45:6a:df:8c:31:65:bb:7b:f5:6c:10:d4:f9:3e:45:
         02:8b:c7:73:87:c7:02:57:f8:2f:d5:ff:d6:51:24:9c:91:ab:
         02:74:d3:2a:15:76:d8:55:b0:e5:77:b6:14:7f:68:ba:ea:05:
         bf:18:fd:43:f0:56:fc:dc:fa:7f:53:a8:c6:10:2a:51:43:1b:
         02:31:16:77:78:ea:8f:65:8e:0b:09:34:c3:c6:9e:45:74:a6:
         eb:88:0e:cf:ef:16:17:27:9f:f0:b1:7e:b0:0b:1d:0f:f4:b7:
         ae:ea:72:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYKrNRPIoujG63a06FIlesRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwODE3MDk0OTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzk1OGMyYThlYWNiM2UxZTU0MDg0OWZiZmYxOTc2MTQ1NDg5YzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJRm9wspJ43api99tDW9aIDKKwj8
xjEwXAPZPnhqx5T7fwh9AOGYWwcF/Sdj+TbAgGYKHOeCZ82QE0aOCDSTDltAWwHl
nWb4ESE0tb1o7Q4ACngxhQGTm/zJVTRhKWhgh/dFFJS9/Ai1IyV5+3GYxLLzbC30
tKEAoiFqk5W+KPo3jy0iWGKNaZ+50z4odKp8NixL/3j9fo10pZyN1BgWZHbMoPZ1
wrEoCRd7DpRhyNO12aNwWjW3dA0RVVhi7mN2IlXbbL3t/SeUZTQFAxmLDWmMruyo
JAN2JfeE6cm+2W08xq8hq/uDNMtftyd5JhZAfke78a+CSG/trZGn5OijNQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBeVjCqOrLPh5UCEn7/xl2FFSJwtMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvRjVXTUtvNnNzLUhsUUlTZnZfR1hZVVZJbkMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBRgA
MA0GCSqGSIb3DQEBCwUAA4IBAQCXRrUfxczawm6RtaxBL3dk6BPrQ8x/BfwGgOoW
98AFE7i3tF6dImhh7ztZZsqQ260GgzKujwyGRmDvMokclmdiR9U4q4HA2WCcvP/J
gTngqiV4f+89nKG/7gzW278Yy3+eVw6TdMARXE/D0BfW25XvK64XB+eOVPs3F3Qg
NVhgSB5+1lZRFd3EBEV3naBq8EyzebBFat+MMWW7e/VsENT5PkUCi8dzh8cCV/gv
1f/WUSSckasCdNMqFXbYVbDld7YUf2i66gW/GP1D8Fb83Pp/U6jGECpRQxsCMRZ3
eOqPZY4LCTTDxp5FdKbriA7P7xYXJ5/wsX6wCx0P9Leu6nLu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org