Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8ax6Grp22e4g2Vjifqelc_ZIfYs.roa
File:                     8ax6Grp22e4g2Vjifqelc_ZIfYs.roa (raw, json)
Hash identifier:          jU4GIACIEkoHsFK8oCVozpB0q7QjNq1Dpswya4EvQRQ=
Subject key identifier:   F1:AC:7A:1A:BA:76:D9:EE:20:D9:58:E2:7E:A7:A5:73:F6:48:7D:8B
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01856F8C4A2613DF623C6DEA446CBDF14AD8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8ax6Grp22e4g2Vjifqelc_ZIfYs.roa
Signing time:             Sun 01 Jan 2023 22:55:42 +0000
ROA not before:           Sun 01 Jan 2023 22:55:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44486
IP address blocks:        5.181.177.0/24 maxlen: 24
                          45.137.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:8c:4a:26:13:df:62:3c:6d:ea:44:6c:bd:f1:4a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 22:55:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1ac7a1aba76d9ee20d958e27ea7a573f6487d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:c9:51:e6:d5:03:f7:73:d5:7b:4d:f3:35:
                    c3:53:e7:0d:cb:84:71:be:01:ea:dd:b3:41:ad:24:
                    61:98:c2:71:f8:df:91:35:ac:79:38:2c:25:1e:42:
                    30:1a:b4:87:a3:a1:2f:40:7f:f5:d4:c8:9e:32:df:
                    79:a2:ac:46:36:49:54:cc:14:78:f8:1e:c1:ce:2c:
                    96:5f:27:6f:df:58:e3:be:0d:86:7e:28:02:ea:36:
                    f0:f8:bd:ea:d6:aa:ca:81:0c:0e:87:4f:70:02:84:
                    cd:77:88:5d:7a:db:76:f7:58:2c:c9:34:9f:6d:05:
                    2d:07:bb:e8:6c:54:bb:97:87:f7:9d:57:8b:dc:28:
                    c1:59:fd:29:80:76:a9:32:6f:a6:ce:f2:a2:5a:82:
                    fc:6f:55:e2:77:80:df:9c:07:24:a4:2d:fa:ab:57:
                    c8:41:e3:90:84:f1:8d:5b:5d:1e:12:df:97:35:30:
                    af:ea:d5:9c:b6:a6:be:37:b9:fe:41:70:62:ce:ef:
                    d8:55:cd:4d:c4:17:50:e0:ba:96:ac:6c:3d:31:8d:
                    65:41:e0:ce:d7:5f:d2:aa:b9:3c:dc:4d:6d:a5:b6:
                    d1:bc:52:3c:31:cf:55:00:68:fd:08:7b:42:69:61:
                    3a:67:e9:7e:74:bd:f1:07:b7:1b:61:6c:60:a1:af:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AC:7A:1A:BA:76:D9:EE:20:D9:58:E2:7E:A7:A5:73:F6:48:7D:8B
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/8ax6Grp22e4g2Vjifqelc_ZIfYs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.177.0/24
                  45.137.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:94:74:7d:27:0d:56:e9:d4:7e:07:85:34:85:b7:21:65:f9:
         f8:67:cb:34:6d:29:c3:4f:c6:c8:70:8b:70:f4:3a:9b:cb:00:
         d5:5d:62:df:a2:74:fc:fd:40:47:bb:51:ea:4c:eb:21:a0:99:
         0f:f3:39:a6:7e:b2:74:31:46:d9:7b:29:ad:f8:53:7f:f5:0a:
         02:e7:ce:32:40:36:7d:1f:06:f6:ca:ba:f0:39:e0:89:00:fa:
         5e:08:00:3a:b9:7b:05:f4:a1:33:76:b1:47:26:82:19:53:fd:
         90:ea:ff:83:6d:f0:b5:79:22:39:6c:eb:b7:d2:12:28:33:bc:
         ba:86:40:fa:ca:27:0d:b1:91:ce:b3:da:7b:c3:f0:a9:7f:0f:
         3b:fb:e2:59:b3:d5:c6:af:4f:fa:04:e1:78:42:ea:97:63:0a:
         49:e7:6a:cb:65:a4:5e:a0:fd:b4:e9:1f:38:b7:cb:c8:4d:ae:
         52:65:98:28:dc:3a:f7:49:58:77:26:e3:38:81:d9:8e:fa:5b:
         7c:6a:17:ce:fc:86:7f:4a:bc:a8:2b:f2:7b:e3:da:54:81:6a:
         a8:03:b4:4c:b3:18:24:91:7d:ae:d3:ba:b5:a0:0b:01:f3:16:
         a6:c2:4b:f1:2e:a2:93:43:0f:d8:c2:b8:4c:71:be:42:8c:b7:
         17:94:74:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org