Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa
File:                     5SR6SiiM6G5FvlDYHagmh-s9tQM.roa (raw, json)
Hash identifier:          thee1Pr9017rdwqwSx/iq1k5iCDHtvMDcQa3ecM6Aeo=
Subject key identifier:   E5:24:7A:4A:28:8C:E8:6E:45:BE:50:D8:1D:A8:26:87:EB:3D:B5:03
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018339E9D8CB1344B02C7A96E260ADA2C81E
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa
Signing time:             Wed 14 Sep 2022 02:52:50 +0000
ROA not before:           Wed 14 Sep 2022 02:52:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52041
IP address blocks:        45.87.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:39:e9:d8:cb:13:44:b0:2c:7a:96:e2:60:ad:a2:c8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Sep 14 02:52:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5247a4a288ce86e45be50d81da82687eb3db503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:82:c8:e4:08:66:37:3c:29:8c:9a:88:52:
                    58:df:9d:20:21:e9:8d:71:b4:76:7b:fe:73:04:3c:
                    9b:ea:ad:f8:d9:c6:88:42:0a:8c:d6:7b:d7:68:4a:
                    82:d6:0a:00:54:03:7f:4d:44:0b:b8:24:4c:4c:86:
                    f9:88:0c:bb:99:3d:f5:12:1d:a2:6f:85:8f:ee:88:
                    9c:88:7d:83:c0:3f:bc:66:8c:e4:21:ff:03:0d:f9:
                    bd:9d:0b:a3:12:2e:a5:54:a8:17:28:56:12:a2:be:
                    17:3a:ef:4c:df:23:92:0a:0e:f5:ae:77:f3:71:9d:
                    44:b6:15:5f:78:70:35:6a:33:08:64:76:37:38:d5:
                    ab:a3:0f:97:2b:45:68:73:5b:9a:01:2c:68:49:23:
                    71:a5:6c:dd:c5:9f:9b:e6:be:b4:55:15:5a:79:18:
                    7d:4d:06:a6:ad:2d:20:85:af:75:22:56:bb:43:73:
                    b2:43:b8:e3:13:3a:56:1a:80:32:0f:a8:a5:44:16:
                    c5:36:d4:02:ef:b1:f7:2a:3f:b3:3e:89:0a:09:c0:
                    ac:e0:da:8f:45:5b:42:05:46:50:9b:26:4c:ed:65:
                    a8:4a:1f:39:0c:9a:86:a9:f8:67:da:1e:90:e0:b6:
                    49:02:bc:a0:c4:50:35:8a:74:f1:ee:31:8c:75:a5:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:24:7A:4A:28:8C:E8:6E:45:BE:50:D8:1D:A8:26:87:EB:3D:B5:03
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5SR6SiiM6G5FvlDYHagmh-s9tQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:54:4f:42:81:68:38:32:e3:af:22:86:a5:f9:c0:d3:e0:
         b6:0b:19:a8:62:40:92:1d:c0:84:6c:8a:b2:93:81:1d:00:99:
         e6:d0:d1:43:7c:17:19:0f:58:9f:9d:76:96:76:c6:0a:a6:ed:
         db:74:99:03:15:5a:8d:81:76:cb:95:1d:d1:68:8d:ff:4d:4b:
         ce:3d:46:e7:6c:29:1b:d6:f7:22:2a:d6:37:71:f1:f3:ab:ce:
         5c:44:99:b2:4f:93:80:b9:cd:a6:95:e1:39:71:e2:a3:ee:f1:
         db:94:3b:e6:30:eb:a8:7c:b8:8e:6f:5b:51:e4:3c:8e:24:1d:
         eb:a9:c7:72:01:18:d0:77:bc:53:d1:29:ae:22:55:3e:3d:17:
         9f:40:f6:54:23:96:52:a2:dd:f8:c6:ed:fe:6e:e2:cf:4c:91:
         83:fc:6b:91:3a:f7:b9:a1:cb:52:4a:bb:1c:a9:67:fd:73:49:
         2c:0a:9c:fc:f3:58:a3:24:10:d2:2a:2c:ac:56:14:1a:ae:e3:
         5b:e6:be:e3:02:1d:e7:88:09:81:68:52:8a:6f:46:2a:28:83:
         15:fe:c2:b6:23:79:92:16:9a:47:85:60:84:47:7c:c9:60:6e:
         04:17:9f:2c:75:ac:d2:74:36:67:8d:65:f3:03:7b:b6:89:4f:
         11:3a:b9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org