Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tktdyQPwHpO0uFBDoLJoavrQYqo.roa
File:                     tktdyQPwHpO0uFBDoLJoavrQYqo.roa (raw, json)
Hash identifier:          FsY43lA7t1Afe2robSUDp7mnLS3SMCRhVJTlLtAyPPY=
Subject key identifier:   B6:4B:5D:C9:03:F0:1E:93:B4:B8:50:43:A0:B2:68:6A:FA:D0:62:AA
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A77F259
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tktdyQPwHpO0uFBDoLJoavrQYqo.roa
Signing time:             Tue 12 Apr 2022 15:29:01 +0000
ROA not before:           Tue 12 Apr 2022 15:29:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.12.80.0/22 maxlen: 24
                          45.137.97.0/24 maxlen: 24
                          45.12.81.0/24 maxlen: 24
                          85.209.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175632985 (0xa77f259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Apr 12 15:29:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b64b5dc903f01e93b4b85043a0b2686afad062aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:8b:07:06:22:3e:79:df:42:61:cc:f9:99:
                    1e:fc:ee:ec:b1:81:da:7c:04:2d:dc:5a:32:cd:6c:
                    32:90:f4:d2:35:b2:7e:32:a3:a0:c4:a8:a2:20:68:
                    fa:0b:83:c3:6b:20:15:17:fb:21:9c:d0:38:c0:bf:
                    91:0a:58:bc:fa:32:22:9b:3b:de:c7:f8:75:47:0f:
                    c3:85:5c:19:38:e9:08:18:84:36:21:83:65:15:86:
                    d2:65:d3:84:de:75:06:47:5e:d4:2a:05:12:e3:8b:
                    6b:cf:77:e6:d2:09:cf:cf:39:aa:29:53:f5:7c:a1:
                    11:15:40:45:b9:73:f2:84:ef:62:c0:26:d0:4b:f5:
                    ff:ec:23:0a:cc:1e:18:84:40:5c:dc:38:78:ce:73:
                    6d:09:13:5b:30:f7:23:b4:37:d7:b6:37:64:0b:d0:
                    b2:e0:93:0d:97:8e:a9:6b:da:df:aa:91:29:78:2e:
                    f8:05:4f:d7:4e:67:35:af:a9:ac:d3:67:4d:94:7a:
                    9d:1e:06:e2:a0:89:e8:4c:57:1e:e2:1d:ef:c6:5c:
                    02:b8:f7:76:e5:f9:62:6d:c3:f7:98:59:cc:9f:34:
                    a3:f8:4c:b1:a6:b3:90:32:61:83:cd:f7:43:8a:e0:
                    da:ae:3d:a0:bc:09:31:dc:ae:69:f5:bd:6d:40:20:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4B:5D:C9:03:F0:1E:93:B4:B8:50:43:A0:B2:68:6A:FA:D0:62:AA
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tktdyQPwHpO0uFBDoLJoavrQYqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.80.0/22
                  45.137.97.0/24
                  85.209.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:cb:ba:5a:ea:eb:3d:0d:bc:f1:f0:a6:46:0d:e9:95:0b:
         f8:2e:b3:8c:ae:09:7a:6d:0c:b6:75:68:b5:78:52:01:4b:63:
         85:50:35:93:c3:23:ad:a1:40:c4:c6:7e:19:19:81:9b:57:7f:
         d6:7a:b9:e6:05:59:4c:64:bc:b1:9f:50:21:2d:d2:45:25:15:
         ba:df:c1:0d:7d:13:9c:52:06:d2:17:7a:1c:a8:c3:ca:2a:90:
         19:e9:06:1f:02:46:61:d4:4c:c2:84:09:53:57:c9:f1:c5:c3:
         b3:c9:9e:27:86:e1:55:54:b6:d6:f0:f0:63:a1:3a:90:d8:b6:
         ff:95:7c:45:6f:46:cc:d6:4a:86:df:df:5c:d1:ae:08:b0:92:
         37:09:83:c1:33:b7:ca:aa:03:77:3e:48:e1:51:a1:d3:ef:ac:
         d0:ad:81:11:63:8b:4d:cb:d8:fa:ac:3d:ba:76:ff:21:71:90:
         be:70:8d:a8:fe:6e:81:cf:8a:4b:8f:d9:41:e0:8f:06:65:3d:
         2b:6b:c2:9f:25:76:df:2f:dd:25:85:d1:9c:67:38:90:e2:47:
         0c:57:f3:ef:4d:a3:ef:9b:b9:cd:4a:21:66:cc:ac:25:9d:ce:
         48:a3:8c:7a:91:f6:d6:23:1b:f4:e8:68:44:18:d3:99:31:6a:
         1b:4d:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org