Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa
File:                     _emAxkaqUlAFmnCipg51xYWdDyg.roa (raw, json)
Hash identifier:          H1eD6gNCIjauLGrErmILXRud9rbhazq1VP7KU0pSzEM=
Subject key identifier:   FD:E9:80:C6:46:AA:52:50:05:9A:70:A2:A6:0E:75:C5:85:9D:0F:28
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       09BC5DB2
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa
Signing time:             Thu 10 Feb 2022 14:13:24 +0000
ROA not before:           Thu 10 Feb 2022 14:13:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        45.158.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163339698 (0x9bc5db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Feb 10 14:13:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fde980c646aa5250059a70a2a60e75c5859d0f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:19:d2:3f:7f:bf:40:05:e3:64:11:14:79:47:
                    34:d2:55:0a:d9:01:2b:91:0f:0d:e6:c9:0e:e2:3e:
                    3c:0c:ec:01:83:8d:54:a5:7a:6a:20:02:88:ac:bb:
                    86:78:f3:78:a2:39:eb:60:f2:df:0e:ab:bd:1d:27:
                    5c:08:c1:11:a5:fa:c7:7d:d0:31:d7:a5:60:6f:0e:
                    24:1d:22:99:73:39:be:11:14:c6:93:d5:f1:d3:bd:
                    eb:4c:25:87:be:3a:66:4f:82:0e:f5:ef:f6:33:86:
                    64:73:9b:9f:6d:e5:c9:d0:ed:bf:65:26:75:00:c5:
                    15:50:20:ed:18:b7:6a:2c:10:64:bd:1a:64:77:05:
                    22:c6:db:52:6d:0e:a9:9e:61:23:44:db:39:00:8c:
                    77:dc:fe:27:97:82:2f:20:55:5b:92:3d:6d:3d:2c:
                    9c:30:a3:2a:3a:e7:be:cc:63:57:48:bf:a5:93:86:
                    c9:19:cc:28:59:9f:53:a4:86:d5:8f:34:cb:7a:39:
                    aa:0e:0b:e7:47:5b:50:11:f9:b2:1f:16:53:7b:54:
                    fc:c2:97:16:ad:a7:c8:73:c2:41:96:49:1b:c4:cf:
                    f8:fd:28:4b:7a:b7:c9:01:b4:7b:f6:b8:f8:be:e6:
                    2a:48:a0:67:c5:1f:00:d9:3b:ce:d8:39:31:0a:85:
                    ac:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E9:80:C6:46:AA:52:50:05:9A:70:A2:A6:0E:75:C5:85:9D:0F:28
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_emAxkaqUlAFmnCipg51xYWdDyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:3f:f5:a4:4f:9a:62:09:7b:f7:86:5f:8d:1d:6b:4b:01:
         f9:e2:c8:54:0f:e7:38:5a:62:53:aa:ac:79:ba:28:e2:19:13:
         06:85:81:07:22:bc:49:20:da:38:6a:f0:00:ec:e4:a1:3d:79:
         cd:9d:bb:e6:05:7f:b8:ff:59:07:79:78:2c:01:c6:78:c8:21:
         54:d8:98:dd:72:ab:25:41:d2:7b:84:06:77:28:5e:da:cf:fc:
         69:9f:ac:18:a2:0d:47:14:e9:bc:1b:e6:d7:42:1e:51:15:c8:
         c5:1b:59:78:ab:3b:88:05:7a:0d:03:cc:5c:41:1c:75:91:fa:
         4e:c4:d8:8b:8e:d0:4f:83:22:82:a7:0e:91:36:c8:7d:8a:f9:
         c9:41:0b:29:84:f8:87:89:ae:c6:ff:6a:2f:c6:b9:44:c0:dd:
         81:b0:3b:e3:5e:31:ea:98:05:44:15:84:7a:13:bc:dd:c5:91:
         d3:99:e8:ce:59:d5:70:32:4b:c2:92:63:92:fa:07:49:91:3d:
         44:79:dd:b8:a0:5a:84:58:f4:5e:b4:90:72:5c:11:41:b2:fd:
         ea:14:b4:57:9b:01:eb:1e:e1:7b:4c:95:45:9d:3e:54:be:35:
         14:fa:e9:43:d4:c0:cc:26:e6:0d:fe:b8:7c:a2:da:43:ab:45:
         22:3b:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org