Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa
File:                     CwSqtDCHnVqwPpN77pNw0m3prkw.roa (raw, json)
Hash identifier:          wJhxmbQ3CcgVjoKPmnDiAtvIEd9s9ARJHcYagUc9lww=
Subject key identifier:   0B:04:AA:B4:30:87:9D:5A:B0:3E:93:7B:EE:93:70:D2:6D:E9:AE:4C
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       01841D4C03F8A79AEAF953F3C03157A3011A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa
Signing time:             Fri 28 Oct 2022 06:33:51 +0000
ROA not before:           Fri 28 Oct 2022 06:33:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207279
IP address blocks:        45.88.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1d:4c:03:f8:a7:9a:ea:f9:53:f3:c0:31:57:a3:01:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Oct 28 06:33:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b04aab430879d5ab03e937bee9370d26de9ae4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:aa:d0:e6:12:02:de:30:de:39:46:bf:70:
                    d4:c8:39:94:2a:96:ee:b7:0c:30:07:fc:0d:95:09:
                    35:ba:c4:c9:77:b1:4d:ed:30:49:23:14:77:ba:1b:
                    ae:1c:8e:6a:7f:ec:f7:e2:6c:0a:54:5f:d7:43:a9:
                    7b:60:2b:39:c8:be:44:60:f6:c3:80:75:30:dc:8d:
                    e8:41:45:2d:cd:82:bf:01:d6:64:43:52:09:4f:8c:
                    2f:be:67:26:27:e8:b8:09:e8:be:16:d5:07:1b:fe:
                    e7:14:ae:86:0b:29:ce:cd:11:b7:6d:a6:ce:08:9c:
                    0d:6f:a9:75:ad:03:2e:1f:71:3e:e2:71:60:9a:aa:
                    3e:34:c7:ef:68:67:c3:84:58:7e:ee:31:c4:de:48:
                    69:c2:19:3d:66:be:56:8a:dc:7d:d7:f4:f5:44:4e:
                    36:ac:56:a9:07:50:12:ed:37:fa:d4:8a:da:7f:53:
                    ab:6f:d2:18:09:b6:3d:c5:08:41:03:1f:dd:7e:70:
                    d9:fd:96:1b:6b:98:71:73:10:ad:c1:11:b4:76:a0:
                    36:1d:a5:19:73:1c:37:13:60:f3:1e:5e:f2:e6:c6:
                    c1:98:f5:bc:43:0b:c7:3b:06:e7:55:72:0d:e2:33:
                    f0:bf:e2:ea:48:bf:d7:f8:1b:1d:86:28:d7:03:e6:
                    d8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:AA:B4:30:87:9D:5A:B0:3E:93:7B:EE:93:70:D2:6D:E9:AE:4C
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/CwSqtDCHnVqwPpN77pNw0m3prkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ed:92:e6:80:d3:ba:43:f1:d7:da:23:59:85:47:ff:b1:e3:
         1b:e7:2f:38:46:96:30:72:75:8c:32:ec:18:b3:72:50:82:69:
         74:e5:6f:de:49:df:fe:7d:f9:02:c7:35:94:fa:1c:8f:e3:02:
         fa:f0:96:50:13:b6:82:6f:fd:4c:48:00:e3:d7:7d:7b:4c:07:
         03:83:a1:b0:c0:ae:cd:e6:30:8f:af:9a:70:1b:3d:0c:59:22:
         c6:2d:45:1c:ef:34:d3:2e:67:3c:be:9a:55:77:61:52:4f:8a:
         3f:ea:3c:06:bb:8f:42:95:83:f3:7d:5c:0f:6c:84:bc:cf:27:
         47:65:da:d0:13:13:4c:7e:f5:c9:49:82:97:69:15:d5:ab:25:
         8d:ae:81:8d:3b:82:56:19:ca:b7:1b:63:cc:af:ba:f4:4b:ed:
         2a:57:44:44:83:70:49:60:a1:fc:83:0c:6d:23:26:87:68:01:
         67:5b:25:ae:ef:2b:f6:62:d2:48:f2:30:85:9f:98:0e:35:34:
         29:96:da:60:26:25:dc:4d:b1:31:5c:28:b7:cd:b7:31:01:e3:
         5f:a6:9b:ea:42:04:cf:cf:8c:8a:65:f3:fa:db:eb:0d:a8:48:
         ae:b9:3b:77:c2:25:db:75:17:2b:1d:75:1a:68:9f:cf:30:e2:
         cd:75:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org