Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Gfujxzefb8dNwJQxEPhohD8Nbjg.roa
File:                     Gfujxzefb8dNwJQxEPhohD8Nbjg.roa (raw, json)
Hash identifier:          h6xmzDhcw73VIJvNQROLXOz/FEIFs6ClhwLOCNWt++c=
Subject key identifier:   19:FB:A3:C7:37:9F:6F:C7:4D:C0:94:31:10:F8:68:84:3F:0D:6E:38
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0AEEEBDA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Gfujxzefb8dNwJQxEPhohD8Nbjg.roa
Signing time:             Thu 26 May 2022 15:28:01 +0000
ROA not before:           Thu 26 May 2022 15:28:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133973
IP address blocks:        45.158.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183430106 (0xaeeebda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: May 26 15:28:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=19fba3c7379f6fc74dc0943110f868843f0d6e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ee:7d:b9:92:4e:1c:e3:20:16:77:36:c4:9e:
                    96:74:8d:3e:e7:c1:be:a1:e3:4f:1e:27:58:0a:87:
                    aa:c3:43:51:54:69:f3:86:04:d0:f5:67:88:6e:b8:
                    20:81:f9:52:5f:7b:99:2c:f9:44:53:d0:81:1d:a4:
                    ec:9d:33:4f:83:df:78:df:1e:88:7d:17:c5:1b:cd:
                    ed:47:db:c4:37:f1:ca:94:78:fe:8a:76:4c:0f:0e:
                    67:3d:e0:48:c2:a3:41:06:a6:5e:f7:bc:2d:30:0f:
                    51:bc:bc:87:b6:89:4a:73:fe:34:e7:48:6d:ac:52:
                    fa:eb:62:a5:b5:6b:af:e7:5f:16:c7:9a:40:c5:15:
                    72:09:29:73:7f:26:60:18:a0:2f:b9:1c:bc:00:b5:
                    00:cf:1a:64:4f:0c:36:65:bc:76:ce:b1:35:ca:ba:
                    77:b7:28:98:62:49:13:17:f2:f2:1a:65:73:0b:d6:
                    13:8b:65:9a:06:98:e0:80:da:37:0e:0f:15:77:d6:
                    9c:a5:a8:de:00:bf:25:46:fe:6e:96:cd:d2:cc:4b:
                    4e:25:96:8b:ac:8f:46:22:48:16:66:8b:34:62:d3:
                    91:14:fe:79:e3:0c:40:cf:6d:98:75:5b:d8:52:01:
                    b8:12:0b:39:da:82:46:a8:c3:e3:32:96:e1:f9:f8:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FB:A3:C7:37:9F:6F:C7:4D:C0:94:31:10:F8:68:84:3F:0D:6E:38
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Gfujxzefb8dNwJQxEPhohD8Nbjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:09:fb:e1:ff:ef:49:2d:4c:64:87:bb:76:cc:e4:32:3e:da:
         25:6e:94:17:78:5a:bc:e7:08:10:1f:42:ea:c6:10:79:15:ad:
         a9:c3:16:23:c4:53:af:a1:b8:f3:f4:84:34:6d:8c:2d:6a:9a:
         5e:cc:0a:e3:16:05:78:8a:c7:d1:8c:94:39:34:e2:c5:18:b2:
         e4:4d:37:fa:73:25:3c:8c:2e:f6:a6:3c:6c:fe:10:dc:f5:6f:
         48:4a:80:ad:59:14:44:4b:e4:3c:00:c1:fd:83:cf:6e:72:63:
         e9:7b:1a:3f:02:4f:e0:d4:a9:1b:ef:87:3c:13:b1:c5:77:f5:
         91:7e:de:dc:e2:70:31:a2:b2:cc:93:22:3d:be:f0:2b:81:a7:
         56:08:4f:ec:10:df:e3:01:ef:46:f7:1a:8d:7e:cc:1f:51:1e:
         76:97:3f:b8:e7:18:a1:04:47:f1:f3:51:d5:ac:36:d7:34:2f:
         2f:3d:58:89:56:04:bd:35:5a:3b:3c:d1:f2:af:82:b0:c1:68:
         3b:af:01:5d:50:44:68:ad:18:72:97:cd:da:bf:42:21:1e:df:
         3c:85:da:cd:5f:62:5f:a7:9a:83:be:ff:cf:8d:85:bc:1f:66:
         d3:be:fd:94:00:3d:f4:ad:2e:19:d1:4f:f5:f1:ff:51:79:60:
         75:0c:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org