Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/li04IookSNZoGF6gr8re_Ohiqq0.roa
File:                     li04IookSNZoGF6gr8re_Ohiqq0.roa (raw, json)
Hash identifier:          SrIARELL65SvauPYns7h2qs80vRuXNVdmEJU4LCJE78=
Subject key identifier:   96:2D:38:22:8A:24:48:D6:68:18:5E:A0:AF:CA:DE:FC:E8:62:AA:AD
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0183A6A01B5B109B63F77D3C7306EC3D0BA0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/li04IookSNZoGF6gr8re_Ohiqq0.roa
Signing time:             Wed 05 Oct 2022 05:30:53 +0000
ROA not before:           Wed 05 Oct 2022 05:30:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44486
IP address blocks:        5.181.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a6:a0:1b:5b:10:9b:63:f7:7d:3c:73:06:ec:3d:0b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Oct  5 05:30:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=962d38228a2448d668185ea0afcadefce862aaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:73:91:11:b4:f1:93:00:b1:7e:79:11:d3:
                    b6:c4:c2:15:f4:3a:f8:e4:59:7c:cf:77:44:d2:1b:
                    2f:30:98:ac:41:f0:d2:90:d9:f1:f9:d5:6d:71:f2:
                    fa:e2:56:68:01:cb:60:c0:f0:aa:1b:4e:4b:db:7f:
                    d9:a7:ed:8e:9d:86:54:ae:53:98:1f:f8:2d:aa:ed:
                    ba:c9:a7:b9:9d:b3:70:33:19:30:e9:d6:3e:ad:ee:
                    20:b9:f8:42:07:82:cb:8a:e2:e8:14:2f:24:92:b2:
                    12:2a:4c:bd:29:d4:94:30:a0:dd:99:d8:c7:52:c3:
                    6d:c3:e5:06:6d:78:2b:75:89:43:04:91:79:b2:5f:
                    f0:a4:7d:57:e2:3c:71:7e:f8:5f:54:9c:fa:21:70:
                    4c:29:74:18:32:e9:27:98:06:f5:a8:32:18:d3:da:
                    2b:e4:47:70:8c:a4:33:f0:48:2d:3d:43:f8:a2:ca:
                    ff:eb:49:90:f8:4c:a0:e6:25:43:59:cc:1b:79:70:
                    42:8b:49:c4:9b:35:8d:e3:47:38:5b:dd:79:19:10:
                    2b:80:52:fa:52:6a:15:af:66:0d:0d:38:7b:54:c2:
                    7e:ad:16:ab:84:12:02:a4:08:a5:b1:96:90:f9:3e:
                    10:15:f9:cb:93:a5:8c:c6:af:bc:6a:3e:71:d1:af:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2D:38:22:8A:24:48:D6:68:18:5E:A0:AF:CA:DE:FC:E8:62:AA:AD
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/li04IookSNZoGF6gr8re_Ohiqq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:ab:40:94:d9:75:b1:fc:23:18:bb:4f:9c:99:e7:98:69:
         fe:49:8e:25:85:57:18:07:29:00:dc:28:3e:0d:30:1a:78:06:
         b0:de:79:fa:ff:28:c9:3d:e0:5a:01:d9:54:d1:83:91:07:5f:
         19:63:bd:ed:5c:c3:db:0e:c2:38:43:3d:a8:49:cb:d0:71:6a:
         20:de:b7:9f:8b:10:31:2c:e8:f0:f7:48:f0:dd:e8:25:b9:dc:
         cd:54:01:f1:20:e9:4a:8f:f9:de:3c:4e:a0:9b:91:8a:18:3e:
         02:f8:5c:c8:a4:12:7c:a0:75:9d:d5:95:bc:79:e7:9b:6d:06:
         ea:c0:59:67:85:26:07:45:cc:32:cd:03:50:a1:10:6c:5a:e9:
         bf:c2:51:0b:25:05:d5:2f:5c:85:0c:07:40:71:e5:ff:01:01:
         f0:05:fc:7c:7b:44:35:91:0e:9a:c7:35:6f:03:46:b4:ea:18:
         6c:b6:6c:20:9d:53:32:f8:b0:7f:1c:9f:cc:1d:5e:1e:7e:f7:
         a4:1d:ed:59:2d:4f:84:34:9e:b9:33:ef:6e:2a:54:68:7f:00:
         79:53:ae:d6:cf:0a:81:2e:d2:e1:a2:21:99:9f:bc:4a:27:8e:
         d0:3f:20:8c:93:81:1c:09:83:59:e7:01:da:11:d9:30:0e:a6:
         44:13:5a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org