Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5ZYk8-Py1S0wxPv4Fshncv4gHPY.roa
File:                     5ZYk8-Py1S0wxPv4Fshncv4gHPY.roa (raw, json)
Hash identifier:          uqGvtcuVd/7GEbhLRrO/Udhf0i4LQbSvhNVvK+kez14=
Subject key identifier:   E5:96:24:F3:E3:F2:D5:2D:30:C4:FB:F8:16:C8:67:72:FE:20:1C:F6
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018486620F5905836F5806ABA77D0880C40C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5ZYk8-Py1S0wxPv4Fshncv4gHPY.roa
Signing time:             Thu 17 Nov 2022 16:18:04 +0000
ROA not before:           Thu 17 Nov 2022 16:18:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        45.12.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:62:0f:59:05:83:6f:58:06:ab:a7:7d:08:80:c4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Nov 17 16:18:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e59624f3e3f2d52d30c4fbf816c86772fe201cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:38:75:a5:a2:4b:55:c7:37:39:fd:68:d4:65:
                    2a:3a:d1:ad:d5:5a:c5:52:53:44:ce:c0:4e:3f:93:
                    39:8a:2e:6b:04:2a:03:a5:85:25:92:df:ea:79:c9:
                    79:37:28:b3:f7:4e:28:5e:e2:e3:1b:d9:20:94:da:
                    98:5a:f2:7a:6b:be:50:81:4f:c1:00:f8:44:e8:58:
                    88:08:e1:5c:5f:e9:27:4b:ca:42:bc:05:f4:62:bc:
                    43:95:84:88:bd:28:22:9a:19:59:21:f6:39:c4:b9:
                    57:e8:34:f1:3e:e6:05:32:f4:89:fb:4a:02:cc:71:
                    53:6e:00:49:01:50:ed:88:c8:24:63:da:63:4c:8b:
                    1f:1e:16:13:cc:ae:5d:60:e5:c6:f2:56:ef:e5:d0:
                    6a:9b:f7:82:cc:82:c4:a9:66:9d:cf:7e:7e:12:cc:
                    80:08:00:97:a0:5a:89:3e:7c:2d:7e:3e:10:15:41:
                    25:84:21:d7:04:ab:b8:3a:f0:de:4e:a5:49:44:26:
                    8d:95:4b:bc:3d:96:e6:07:1d:09:23:80:8d:43:d9:
                    ee:4d:ae:7e:0a:2c:72:30:49:c8:63:10:07:9e:ac:
                    81:17:02:f6:b6:b2:1c:61:d4:2f:76:da:f2:88:98:
                    a8:78:a8:4b:ca:c4:1b:5d:47:fb:06:d4:ac:fa:ca:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:24:F3:E3:F2:D5:2D:30:C4:FB:F8:16:C8:67:72:FE:20:1C:F6
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/5ZYk8-Py1S0wxPv4Fshncv4gHPY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:67:4e:0a:51:8f:9c:34:1b:8b:c0:2c:a2:82:0d:fa:4b:16:
         2e:4a:2a:8f:58:20:a3:e0:3d:92:44:fd:c9:ea:22:e5:2c:20:
         16:19:91:c3:b4:f0:34:5b:32:44:18:b8:35:fc:87:a6:8a:73:
         96:6f:45:ca:67:41:c0:e6:bc:aa:6c:b8:c9:fc:02:46:3a:61:
         16:63:b5:fa:d3:ac:38:8e:f1:12:11:e6:35:da:af:e5:77:8b:
         29:62:77:70:da:cd:3a:42:b8:99:8c:4c:bc:ed:91:04:fa:81:
         da:a5:78:7f:ff:70:c6:20:36:55:d3:2a:b9:15:b1:6b:93:90:
         65:ed:9c:96:0e:34:94:8e:b2:41:1a:69:a1:09:c4:5f:7e:a2:
         2b:23:1f:cc:7b:99:50:35:41:bb:40:8f:a0:16:1d:e0:ac:95:
         4d:3b:bd:a8:a4:d6:1e:e8:37:10:1b:64:f4:09:68:78:84:e8:
         8a:d2:b3:4f:37:d8:b0:c5:00:9b:b9:3a:f0:ea:52:8a:ea:c9:
         32:34:4e:36:85:d5:09:43:0a:d9:fa:db:cc:41:5b:87:e3:25:
         4c:d7:1c:a1:16:7a:fb:a5:3e:ce:db:2c:cb:0f:1b:a8:95:95:
         12:e3:76:3a:5e:5c:f5:9f:4d:19:92:1a:68:2d:43:0a:6b:88:
         d7:13:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org