Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/T6DXMBzHoNS0K0Xx9HnbFZxZmg8.roa
File:                     T6DXMBzHoNS0K0Xx9HnbFZxZmg8.roa (raw, json)
Hash identifier:          wD7B5AiZLqxlB0VwEYvQ4NEsUkeaajnbzCFvTJistaM=
Subject key identifier:   4F:A0:D7:30:1C:C7:A0:D4:B4:2B:45:F1:F4:79:DB:15:9C:59:9A:0F
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0556EC78
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/T6DXMBzHoNS0K0Xx9HnbFZxZmg8.roa
Signing time:             Wed 08 Jun 2022 12:50:02 +0000
ROA not before:           Wed 08 Jun 2022 12:50:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        45.88.10.0/24 maxlen: 24
                          194.150.211.0/24 maxlen: 24
                          194.150.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89582712 (0x556ec78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Jun  8 12:50:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4fa0d7301cc7a0d4b42b45f1f479db159c599a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:9e:50:9f:ca:59:b3:8b:9b:3b:15:91:35:
                    f7:b6:35:06:79:f4:f8:b3:ad:f9:b2:9e:33:57:64:
                    a4:29:ee:19:f1:13:49:f8:4d:8a:c8:67:04:2f:72:
                    4f:0d:68:45:c5:b0:e0:49:54:3f:62:d5:67:25:81:
                    52:18:25:58:d1:6f:c5:c9:94:d3:54:2f:8d:b4:da:
                    2b:c7:6e:7b:d4:0d:40:1d:ee:6c:21:92:b8:58:ad:
                    6d:1a:d2:5f:93:fd:e4:0b:5a:bc:ee:16:4e:b3:8c:
                    01:40:0e:6b:eb:71:1f:f0:ad:8a:12:4a:ba:09:80:
                    22:08:f2:6d:c9:1b:dd:e0:08:07:b5:82:c4:9f:5f:
                    c0:06:60:f1:48:2e:b5:69:57:9a:e5:53:20:f9:f9:
                    77:08:14:42:ab:43:6e:37:7a:9f:fb:4a:c2:03:58:
                    8f:af:bc:67:94:61:e2:99:ab:de:58:d2:dc:08:b4:
                    b1:fd:7d:fe:02:f0:f5:99:56:16:d1:bc:54:e6:cc:
                    84:74:9d:fe:19:e3:13:16:1e:0e:77:44:9d:0c:48:
                    76:2b:c4:83:cf:8e:36:38:ad:1e:cf:46:4a:37:84:
                    1f:7b:23:5a:49:61:d9:7b:86:1c:b8:fc:a2:65:a7:
                    0a:58:8a:f9:30:ff:1c:24:2f:fe:ee:f6:45:10:e8:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A0:D7:30:1C:C7:A0:D4:B4:2B:45:F1:F4:79:DB:15:9C:59:9A:0F
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/T6DXMBzHoNS0K0Xx9HnbFZxZmg8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.10.0/24
                  194.150.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:88:bd:8b:7a:bc:d7:fd:22:3d:ae:77:26:c1:52:ef:03:
         ba:e8:8f:69:6a:d2:52:e6:ed:5d:65:e2:53:0c:46:78:74:b3:
         e1:0d:03:e6:45:c9:2b:6d:5e:3c:0e:aa:41:ca:39:47:7c:98:
         a9:0d:7a:a3:cd:6a:f1:82:f7:4e:ee:fd:d2:45:aa:03:2a:b8:
         e4:d4:2c:ab:b5:88:bc:d9:8e:5c:31:49:94:9c:b8:8a:40:8a:
         c8:0f:ff:98:67:28:e4:2a:76:b2:ca:13:64:b0:43:25:76:3b:
         85:a2:12:46:36:eb:47:33:1d:09:1d:06:ad:cb:63:78:65:77:
         53:29:84:aa:ce:45:3b:49:9a:fc:d0:3e:76:77:a4:20:37:2c:
         68:32:57:94:52:3c:d5:1b:e4:da:26:f6:88:ae:73:f1:40:41:
         72:f7:3d:47:54:d7:35:be:1d:2d:af:2b:2b:eb:6d:3b:f3:83:
         84:7b:54:e1:f8:b1:d4:2a:97:0a:a2:db:72:ab:1e:02:1c:f6:
         51:ca:50:92:d1:3b:bb:dd:9c:c3:47:11:c5:b1:b9:ee:90:e4:
         9c:ca:b2:9b:85:af:67:e9:2c:a8:b2:0d:82:f3:22:a2:28:4f:
         eb:a5:73:38:91:51:5b:51:1e:20:84:1e:a2:52:e0:01:c8:3c:
         98:e4:c5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org