Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/hM633lH2iBDoC9H5UjDosCEjt4M.roa
File:                     hM633lH2iBDoC9H5UjDosCEjt4M.roa (raw, json)
Hash identifier:          Fe+7KvAixlom4r7VJPY+keDFsdy05V3U44WLWbaE7DY=
Subject key identifier:   84:CE:B7:DE:51:F6:88:10:E8:0B:D1:F9:52:30:E8:B0:21:23:B7:83
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       018443FB3EF78E6CC395FB4A8D1743DB7491
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/hM633lH2iBDoC9H5UjDosCEjt4M.roa
Signing time:             Fri 04 Nov 2022 18:50:49 +0000
ROA not before:           Fri 04 Nov 2022 18:50:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147287
IP address blocks:        5.181.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:43:fb:3e:f7:8e:6c:c3:95:fb:4a:8d:17:43:db:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Nov  4 18:50:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84ceb7de51f68810e80bd1f95230e8b02123b783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:04:3c:a8:13:20:98:b5:89:24:41:6a:78:6e:
                    69:ca:3a:6a:0e:61:3c:21:96:14:e0:20:ff:29:03:
                    51:13:2e:8a:87:82:a7:6c:0b:7c:50:2a:bf:59:b7:
                    cc:ef:20:a0:2d:e9:8a:e1:e6:60:d7:9c:23:00:f8:
                    3a:c7:2c:ce:b7:f1:ea:75:e6:d1:a4:7f:bb:a4:83:
                    4b:bf:1f:15:45:47:20:83:6f:65:8b:59:e1:e5:29:
                    4c:85:57:77:23:e1:9f:7e:5d:90:f4:d9:ac:fc:97:
                    c1:54:b4:56:2c:ac:35:06:31:bd:5b:63:ec:c6:5b:
                    c2:7d:c5:df:92:fd:fe:fd:c3:bd:4b:b7:35:e4:6f:
                    fc:63:14:7e:ca:51:e7:dd:5d:51:45:a1:07:d5:6c:
                    b5:52:63:13:0d:92:0b:96:79:93:af:4d:ea:f3:36:
                    3c:35:ce:0f:56:da:9d:a0:8e:55:5b:29:04:03:08:
                    d0:a0:d2:1f:3e:17:fd:91:fd:7d:f0:33:8f:51:ad:
                    4d:ec:69:c8:29:f7:51:b5:30:c1:31:fc:74:40:fd:
                    75:7c:b6:fe:51:be:3b:1d:37:c9:47:ea:d4:df:e5:
                    69:29:16:a5:07:99:3f:0c:27:23:89:0d:2a:58:ea:
                    f0:f3:16:42:6b:0d:69:cc:49:d0:01:5f:d8:0b:f9:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:B7:DE:51:F6:88:10:E8:0B:D1:F9:52:30:E8:B0:21:23:B7:83
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/hM633lH2iBDoC9H5UjDosCEjt4M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:e6:2c:d2:49:d1:04:0e:d1:b6:fb:0c:af:bd:c9:47:02:
         a9:73:8b:92:75:5a:c0:a7:cf:20:e2:e0:d8:a7:78:3d:a0:69:
         c7:e5:9b:ab:e1:b2:10:14:13:e9:f8:85:c5:d3:5a:54:c0:91:
         6a:4a:89:85:fd:61:7b:15:18:dc:d2:d4:19:50:7f:26:9b:21:
         f4:36:65:43:69:f4:12:79:b6:4b:c6:fc:c2:71:f2:fc:6e:ef:
         fa:7d:74:d9:c9:35:92:64:3c:74:c8:7c:f2:57:47:9f:89:d3:
         85:ab:dd:05:99:52:47:9b:41:5b:a4:31:fb:a7:4b:a7:32:56:
         8f:8f:c2:83:00:1c:79:eb:f9:1b:3b:bd:33:95:a0:54:52:80:
         43:ac:0d:4f:c9:b2:28:ee:6a:db:d2:67:3d:e6:f1:a2:f2:ae:
         b3:cb:47:a8:81:af:eb:3c:85:8c:51:4e:23:b9:b9:cc:0c:4c:
         db:52:23:fc:da:f9:5e:ed:87:bf:b6:59:31:2b:15:db:81:f8:
         f4:50:d1:d2:8d:4e:5a:5a:30:0a:7c:23:13:c7:fb:45:e7:7a:
         19:74:d0:c8:bd:d7:d6:65:9a:cb:d3:84:bc:5f:92:87:c7:6f:
         a9:08:92:31:db:49:0c:5e:9a:41:5b:5e:d6:44:f6:76:51:fb:
         1c:8a:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org