Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Ek-BPLk4zTIEqxV02-icNCtaVXc.roa
File:                     Ek-BPLk4zTIEqxV02-icNCtaVXc.roa (raw, json)
Hash identifier:          w9FWvanMCpy92Kyxdvx+1hZhkhI5sGRxBEnKFBmypV8=
Subject key identifier:   12:4F:81:3C:B9:38:CD:32:04:AB:15:74:DB:E8:9C:34:2B:5A:55:77
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A2CDC63
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Ek-BPLk4zTIEqxV02-icNCtaVXc.roa
Signing time:             Tue 22 Mar 2022 15:45:26 +0000
ROA not before:           Tue 22 Mar 2022 15:45:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        45.158.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170712163 (0xa2cdc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 22 15:45:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=124f813cb938cd3204ab1574dbe89c342b5a5577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c3:59:70:5c:cb:08:89:bb:72:9b:80:10:d3:
                    fa:25:b4:54:44:0b:23:e9:81:e0:eb:52:61:36:05:
                    e5:9e:36:f6:84:93:3e:de:1d:f1:67:60:7a:ca:87:
                    83:3c:ef:f0:45:1e:3f:9e:8a:b5:ad:5e:2c:0d:2a:
                    eb:ff:e6:64:3d:75:e9:5a:2e:a2:2f:4d:fb:42:66:
                    0c:5e:40:4e:17:5a:9c:08:73:90:c4:b7:cb:9c:de:
                    2f:c3:f3:83:53:a5:88:73:c4:64:18:de:e8:a7:2c:
                    79:24:3b:3b:4e:a9:55:3b:fe:49:af:2e:a4:76:4e:
                    80:75:f3:f6:ba:5b:90:a1:59:14:1a:e3:d3:73:79:
                    f6:27:16:fc:c9:77:29:dc:8b:5c:3a:7f:28:df:cb:
                    9f:a2:7e:7b:4f:74:34:7c:8d:c7:e1:30:9e:8b:c5:
                    7a:5c:40:05:5b:3c:fe:7e:aa:74:5d:60:b1:3b:18:
                    f1:da:92:9c:41:33:12:1d:d0:e7:72:2d:31:24:40:
                    00:b6:85:74:1e:c3:58:9a:28:84:6c:54:37:67:95:
                    81:03:87:4e:0d:93:a6:23:6c:e3:36:22:e4:77:bf:
                    02:85:98:ad:80:66:43:ab:c3:88:ac:06:95:de:6c:
                    fe:49:f8:00:e7:61:af:b2:4a:64:24:f3:cd:2f:0a:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4F:81:3C:B9:38:CD:32:04:AB:15:74:DB:E8:9C:34:2B:5A:55:77
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Ek-BPLk4zTIEqxV02-icNCtaVXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:2d:d6:c1:38:d8:1e:13:3e:66:02:7c:db:60:34:89:75:
         0e:bd:50:bf:15:fc:65:48:b9:f0:ba:ed:ba:82:42:94:f4:fd:
         b2:ad:36:a8:82:8b:c6:51:7d:83:64:15:6d:ea:3a:47:b2:42:
         9f:c4:14:ea:f2:d1:24:24:ef:01:e1:bd:b3:75:34:e9:db:88:
         d4:96:02:8a:28:52:9b:b6:97:d1:1a:4c:dd:cb:63:e8:f9:ae:
         43:60:6b:bc:da:4f:7e:83:e3:92:e1:dd:2c:29:1d:3f:fb:92:
         7c:36:2f:a9:45:99:21:e7:40:13:8d:83:52:db:30:d3:be:31:
         4d:e3:5e:0f:80:9b:28:15:4a:cd:07:3b:f9:34:70:74:77:56:
         a2:d6:c2:86:c2:d8:70:39:22:5d:0a:0a:5b:82:47:61:3d:9c:
         85:57:a5:36:ff:2f:fd:b1:f3:2d:3a:d5:69:9d:ab:ff:6b:6e:
         f5:d5:15:a3:54:ba:0d:e9:f8:3d:f9:21:58:bf:98:1e:fa:b2:
         79:fa:2e:fc:00:93:a7:a6:04:a2:e9:29:4e:61:34:8e:5d:cb:
         da:dd:01:dd:22:aa:aa:80:ef:86:d9:b6:38:e2:e6:68:a3:d7:
         74:99:f4:e8:97:7b:50:ab:c9:6b:6e:af:a0:3b:c9:c4:63:18:
         73:48:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org