Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DV0izMWrklRIg-V9Eh7UOnXCPrI.roa
File:                     DV0izMWrklRIg-V9Eh7UOnXCPrI.roa (raw, json)
Hash identifier:          cbt/7nqLgZCOc96J6CSYc9I4WYkiWru/s9xtqZUgz9I=
Subject key identifier:   0D:5D:22:CC:C5:AB:92:54:48:83:E5:7D:12:1E:D4:3A:75:C2:3E:B2
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0AB1A54C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DV0izMWrklRIg-V9Eh7UOnXCPrI.roa
Signing time:             Wed 04 May 2022 15:50:43 +0000
ROA not before:           Wed 04 May 2022 15:50:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     272027
IP address blocks:        2.56.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179414348 (0xab1a54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: May  4 15:50:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0d5d22ccc5ab92544883e57d121ed43a75c23eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:58:a7:24:5c:30:87:6f:86:87:60:20:eb:
                    30:20:00:9a:ae:4c:f7:62:55:39:eb:7f:5a:4a:8e:
                    1e:29:fe:80:5e:5f:f0:34:bf:fd:bb:80:10:fd:2e:
                    3b:ec:b9:ca:ed:e5:3d:7b:d7:5f:51:ce:d9:54:26:
                    9f:38:c5:0f:0c:0d:5a:37:e9:d6:a6:63:8c:b5:da:
                    be:5e:3d:68:40:17:75:9f:74:9d:46:71:71:39:48:
                    09:4f:49:e0:a7:55:1b:9f:88:81:69:a0:9f:aa:ab:
                    a8:62:fb:e4:97:03:81:a4:46:22:64:0d:22:47:55:
                    55:bf:bb:2c:cc:49:e9:2a:f0:b6:12:56:6a:84:2f:
                    58:c1:71:2d:a9:58:39:96:b3:1c:02:f2:f9:48:c6:
                    61:c7:30:a3:cb:52:ac:f0:d3:5f:48:7c:bf:68:44:
                    d5:ec:67:bf:26:27:db:77:2e:4e:4d:51:55:f0:fd:
                    64:dc:d2:dd:ab:a7:8c:ae:ba:f2:ef:f4:3b:ef:9c:
                    c5:bd:f4:e7:e7:9f:6f:b3:b1:2d:58:d8:e2:d8:f5:
                    35:95:2c:31:63:fa:94:2f:99:70:7a:d3:65:66:be:
                    48:2b:4c:76:61:c1:9a:a5:11:30:96:6a:11:df:4d:
                    ca:0d:65:87:d1:4f:3f:5a:23:74:20:48:eb:f0:5b:
                    3e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:22:CC:C5:AB:92:54:48:83:E5:7D:12:1E:D4:3A:75:C2:3E:B2
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DV0izMWrklRIg-V9Eh7UOnXCPrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f2:a8:b1:db:6c:d4:88:c3:08:77:b4:ea:6b:fb:e8:36:62:
         d6:e6:83:0d:5b:32:01:a5:d2:5d:fe:ed:86:cc:df:6f:af:ed:
         f1:29:1c:29:b1:83:19:c6:9d:81:59:1a:db:ab:f9:d9:bc:ca:
         54:9c:a1:00:a5:68:3f:59:b6:61:0a:c7:1a:2a:c8:5a:4e:fa:
         be:a3:19:61:1e:15:78:fe:6f:0e:cc:db:7b:52:92:fc:ed:04:
         2d:85:d3:b2:7b:44:8f:ac:18:1a:3e:b7:73:51:cf:b3:47:82:
         e1:68:36:36:44:7e:a1:5d:3b:9d:6b:26:f7:92:ed:d3:d7:41:
         7c:26:07:7e:c4:20:0f:7f:3b:75:37:25:73:45:49:9b:1b:0e:
         ba:98:54:ff:34:7f:30:38:6f:78:ab:c0:74:ed:7d:57:9f:58:
         09:3a:0c:19:02:9a:31:d3:f3:db:14:15:3d:8b:2b:cc:f0:76:
         12:0d:96:a2:a6:6b:68:60:0d:8c:af:45:f3:97:94:47:b2:9f:
         d3:d4:87:6b:e5:75:d0:6e:9b:6c:0d:28:48:6c:3f:85:96:b9:
         f2:76:3d:0a:f9:90:a2:ba:64:8c:0c:66:52:f9:e1:b6:c1:5a:
         cb:20:0e:2c:f5:33:83:23:fa:6f:a0:f7:0d:c1:01:35:10:bc:
         68:10:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org