Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpEs8eCPnBlDJgatllj6nfxI-9Y.roa
File:                     RpEs8eCPnBlDJgatllj6nfxI-9Y.roa (raw, json)
Hash identifier:          RTIV8xO/OzV8TDKwecPirayxbwHBlrJsSPGYwYhd0ME=
Subject key identifier:   46:91:2C:F1:E0:8F:9C:19:43:26:06:AD:96:58:FA:9D:FC:48:FB:D6
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01840FB3CE3729550629E2DA6051BA18B048
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpEs8eCPnBlDJgatllj6nfxI-9Y.roa
Signing time:             Tue 25 Oct 2022 15:12:32 +0000
ROA not before:           Tue 25 Oct 2022 15:12:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60602
IP address blocks:        5.181.176.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0f:b3:ce:37:29:55:06:29:e2:da:60:51:ba:18:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Oct 25 15:12:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46912cf1e08f9c19432606ad9658fa9dfc48fbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:ee:04:92:86:5d:94:6a:a0:47:5d:20:e9:
                    35:12:9d:fd:b6:4b:98:f0:d0:26:35:35:28:df:8f:
                    a7:01:12:d2:b2:29:eb:5c:02:6e:75:92:13:e5:65:
                    40:dc:83:31:cc:fb:87:cb:e7:83:72:f9:96:fd:5c:
                    fe:71:59:b4:85:2a:f2:cf:b1:aa:a2:85:0b:bb:76:
                    dd:c5:73:30:a9:93:7d:c4:a4:b6:b6:8a:52:09:62:
                    20:b9:e9:2c:65:b1:00:a1:9c:99:14:99:99:3e:fc:
                    0d:38:50:24:59:1d:88:57:0f:e7:0e:90:26:5f:bb:
                    4b:ad:c1:ab:14:f6:57:08:d3:92:dd:22:f0:28:e0:
                    97:90:1c:86:da:63:26:aa:6c:70:dc:92:47:55:9d:
                    5b:c7:63:20:7f:1e:73:1e:c1:e7:cb:08:f4:e2:84:
                    1e:ce:73:f6:42:1f:5b:e5:cb:5e:ce:0c:f0:35:93:
                    46:8b:53:2e:b1:c8:3d:3d:b4:ad:8c:8b:32:3b:41:
                    40:64:11:39:89:71:dd:27:97:06:a4:3a:7a:50:72:
                    48:17:ce:5d:9a:f7:c1:27:60:b2:79:ec:30:b4:4a:
                    57:ea:0f:60:3f:db:ba:12:c0:cb:c3:eb:5c:8c:4e:
                    eb:f5:61:df:a6:49:f7:c1:26:a9:90:9c:42:34:59:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:2C:F1:E0:8F:9C:19:43:26:06:AD:96:58:FA:9D:FC:48:FB:D6
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpEs8eCPnBlDJgatllj6nfxI-9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:f4:67:b6:b6:de:e1:6e:86:ae:93:8f:42:7b:03:9e:e0:ce:
         ac:ad:48:ad:26:1d:67:1d:02:54:9d:b4:7d:17:29:2d:c1:3d:
         fe:b1:8e:46:85:50:ee:14:81:73:13:58:e7:cb:24:81:af:58:
         01:9c:78:52:97:b4:8b:52:d3:6d:77:f6:06:ab:01:39:e8:d4:
         d6:5a:60:62:d8:f7:d9:27:fc:ae:53:1a:d7:90:3e:bb:b8:ea:
         09:18:9a:f2:cb:8e:c9:1f:78:ea:07:5e:f3:b9:8c:ad:97:ac:
         c2:61:25:1e:4a:3a:5f:c7:52:c1:69:09:50:a9:04:97:d9:6d:
         95:10:ef:17:ca:da:32:a6:c8:6d:89:99:bd:bc:65:39:27:9c:
         36:27:1e:0f:62:8a:b4:bc:d4:ed:a5:a9:53:0f:c1:f0:48:93:
         80:c7:f7:f0:0c:ad:0a:49:26:be:93:ff:6c:78:16:6d:36:c3:
         7e:6e:4e:98:e7:de:f6:89:3a:cf:bb:74:cb:70:26:65:ad:c7:
         59:51:d9:5a:e0:56:ae:d5:0e:08:bd:22:27:69:19:d3:14:72:
         c6:e5:71:62:c4:47:7e:1b:bb:0b:c7:2d:46:89:27:60:56:04:
         a2:ce:d4:6a:87:a8:0d:bc:f9:82:46:2e:92:48:64:3c:25:37:
         8c:0e:ea:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQPs843KVUGKeLaYFG6GLBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIxMDI1MTUxMjMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjkxMmNmMWUwOGY5YzE5NDMyNjA2YWQ5NjU4ZmE5ZGZjNDhmYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/3uBJKGXZRqoEddIOk1Ep39tkuY
8NAmNTUo34+nARLSsinrXAJudZIT5WVA3IMxzPuHy+eDcvmW/Vz+cVm0hSryz7Gq
ooULu3bdxXMwqZN9xKS2topSCWIgueksZbEAoZyZFJmZPvwNOFAkWR2IVw/nDpAm
X7tLrcGrFPZXCNOS3SLwKOCXkByG2mMmqmxw3JJHVZ1bx2Mgfx5zHsHnywj04oQe
znP2Qh9b5ctezgzwNZNGi1Muscg9PbStjIsyO0FAZBE5iXHdJ5cGpDp6UHJIF85d
mvfBJ2CyeewwtEpX6g9gP9u6EsDLw+tcjE7r9WHfpkn3wSapkJxCNFmTeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaRLPHgj5wZQyYGrZZY+p38SPvWMB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvUnBFczhlQ1BuQmxESmdhdGxsajZuZnhJLTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBbWwMA0G
CSqGSIb3DQEBCwUAA4IBAQDD9Ge2tt7hboauk49CewOe4M6srUitJh1nHQJUnbR9
FyktwT3+sY5GhVDuFIFzE1jnyySBr1gBnHhSl7SLUtNtd/YGqwE56NTWWmBi2PfZ
J/yuUxrXkD67uOoJGJryy47JH3jqB17zuYytl6zCYSUeSjpfx1LBaQlQqQSX2W2V
EO8XytoypshtiZm9vGU5J5w2Jx4PYoq0vNTtpalTD8HwSJOAx/fwDK0KSSa+k/9s
eBZtNsN+bk6Y5972iTrPu3TLcCZlrcdZUdla4Fau1Q4IvSInaRnTFHLG5XFixEd+
G7sLxy1GiSdgVgSiztRqh6gNvPmCRi6SSGQ8JTeMDuq4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org