Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gp-6V_UU5iAKZXf7xWcombLMh0o.roa
File:                     gp-6V_UU5iAKZXf7xWcombLMh0o.roa (raw, json)
Hash identifier:          Ol4E2Qq4X9659MVGVzam0b4UGeB0iFxFS5grhNBTZGA=
Subject key identifier:   82:9F:BA:57:F5:14:E6:20:0A:65:77:FB:C5:67:28:99:B2:CC:87:4A
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A4E4E21
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gp-6V_UU5iAKZXf7xWcombLMh0o.roa
Signing time:             Wed 30 Mar 2022 19:15:12 +0000
ROA not before:           Wed 30 Mar 2022 19:15:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        2.56.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172903969 (0xa4e4e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 30 19:15:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=829fba57f514e6200a6577fbc5672899b2cc874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:16:42:06:fe:0b:01:92:94:23:ff:fe:94:
                    bc:a4:e4:66:d1:11:73:c6:cb:e0:d5:98:af:28:34:
                    5f:bf:11:2a:ef:65:f1:cc:77:27:e2:d1:bc:b7:b3:
                    6e:d2:f5:68:a6:04:eb:b6:32:c6:07:4e:af:d3:16:
                    30:65:0c:f1:09:11:6e:67:a7:62:ab:75:4d:1e:f1:
                    e8:29:94:e4:f2:23:16:a3:7e:a7:a1:30:65:72:2e:
                    c3:cc:b1:0d:05:e7:2c:3e:59:f8:de:11:47:b4:8e:
                    8d:b3:7e:42:b0:1f:37:99:51:49:16:17:a9:c3:5f:
                    eb:89:98:ea:a6:74:d9:c1:9e:d2:2f:8d:01:0f:1a:
                    86:0e:c3:0e:3b:5a:7b:f8:71:e5:89:aa:18:07:11:
                    59:d3:d8:16:ee:64:57:0e:05:a5:dc:82:13:55:6d:
                    d7:a2:53:52:7f:30:3a:1d:f9:82:00:cd:92:a8:40:
                    ea:6a:33:af:c2:10:80:82:31:92:8c:ac:d7:71:0a:
                    fa:ee:22:5a:fd:03:6b:82:a2:f5:e2:81:35:8a:e0:
                    49:1f:be:8b:fa:ac:0d:e1:5b:1c:7a:70:5b:ed:d9:
                    b2:f8:32:4a:3b:27:f6:e5:f0:8b:cb:57:7d:b2:3b:
                    08:b8:0b:67:25:e0:73:88:84:af:04:a8:5f:15:81:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9F:BA:57:F5:14:E6:20:0A:65:77:FB:C5:67:28:99:B2:CC:87:4A
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/gp-6V_UU5iAKZXf7xWcombLMh0o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:aa:b2:f7:66:6a:70:f9:9f:b7:9a:f2:46:4d:c1:d9:1d:
         d6:8f:ad:b7:c9:52:7c:71:05:25:69:9e:e6:87:b7:eb:d1:d3:
         1e:18:dc:9a:a8:bd:16:ec:67:fd:7c:2a:46:a0:60:97:62:e6:
         94:94:12:59:5c:a7:b3:95:38:d5:9d:9e:5d:3c:c8:ff:a6:f9:
         c8:5d:21:32:bf:ca:c3:43:43:78:31:0c:13:c2:d6:73:8b:b4:
         ed:fc:0b:af:61:df:7f:4d:e7:78:15:81:06:1a:df:2d:b4:94:
         5f:21:94:6e:a1:d2:ec:10:ad:7e:ea:26:57:fa:d5:26:9e:1e:
         69:11:a9:30:c5:e9:a5:19:a3:2d:a1:8f:a7:14:40:0b:dc:4e:
         89:85:10:dd:42:1e:24:9e:e0:4e:49:2b:a5:9e:1e:fd:39:65:
         b1:7f:f5:35:4f:2f:64:75:f8:8e:f6:ad:31:ff:d5:6e:70:bd:
         dd:24:75:ca:8e:25:51:fd:41:65:7a:97:b9:36:6b:06:01:cd:
         64:eb:6d:73:d2:d4:0b:be:24:41:7c:0d:3e:cc:b7:a8:4f:1c:
         ec:b1:53:f4:10:10:c4:d6:04:5a:24:ec:58:94:24:8c:73:52:
         40:00:1f:30:59:31:99:02:ac:92:e0:bc:cd:8d:9b:0c:96:db:
         32:a7:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org