Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tsPZ8xoHamo9kSvJsYOH0pl3w9c.roa
File:                     tsPZ8xoHamo9kSvJsYOH0pl3w9c.roa (raw, json)
Hash identifier:          A/GtZNXcAB22AqirsCOFlbr8q1cKiKK/KScOIreezaI=
Subject key identifier:   B6:C3:D9:F3:1A:07:6A:6A:3D:91:2B:C9:B1:83:87:D2:99:77:C3:D7
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A1DA725
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tsPZ8xoHamo9kSvJsYOH0pl3w9c.roa
Signing time:             Tue 15 Mar 2022 23:41:17 +0000
ROA not before:           Tue 15 Mar 2022 23:41:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        45.158.58.0/24 maxlen: 24
                          85.209.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169715493 (0xa1da725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 15 23:41:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b6c3d9f31a076a6a3d912bc9b18387d29977c3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f0:90:5f:b8:86:0f:ca:f8:1f:ca:b1:1d:52:
                    6f:8a:ba:1e:60:1f:1f:ec:39:d5:3a:e5:46:9d:0f:
                    66:5f:37:92:9f:61:fa:9e:9f:9c:91:9b:1a:f6:9a:
                    ab:16:16:34:f5:8f:62:f0:9f:58:5b:7c:04:66:2b:
                    f7:87:5f:86:4f:8d:21:6a:fe:57:04:7a:37:f0:a2:
                    d5:ee:b0:ae:f4:e3:cf:e8:0e:a9:44:95:9d:26:e5:
                    30:fe:88:6b:98:a5:2d:8e:22:1c:84:26:e0:81:4b:
                    fb:12:89:3d:ad:7d:7d:d9:3b:0f:ef:fd:f8:71:32:
                    d0:84:b0:a7:5d:58:92:77:30:9d:cb:9b:8e:f3:4d:
                    db:38:39:b1:75:7c:c3:e7:74:c1:3d:d1:e3:10:84:
                    f6:b4:da:48:7f:cb:0a:ca:5f:35:72:43:d7:17:2c:
                    15:26:89:9a:97:87:90:af:b1:c6:66:e9:e9:8a:13:
                    67:32:53:e0:09:dd:df:4d:b3:b4:70:fe:b8:95:b7:
                    e4:1c:59:4a:82:24:e4:29:71:05:5c:9f:c8:76:32:
                    82:e2:95:33:e6:ce:03:8c:aa:7d:5a:a7:96:f3:d5:
                    3a:44:20:f2:38:f9:44:d2:42:31:ba:e8:9c:29:2b:
                    c9:94:3a:51:41:ca:0a:16:ec:61:62:9b:47:f5:90:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C3:D9:F3:1A:07:6A:6A:3D:91:2B:C9:B1:83:87:D2:99:77:C3:D7
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tsPZ8xoHamo9kSvJsYOH0pl3w9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.58.0/24
                  85.209.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:97:58:97:f2:2d:af:62:4a:92:24:e8:91:45:0c:4d:66:06:
         7c:cc:07:68:d3:c6:93:21:f7:00:d1:8c:e1:1f:d2:2e:12:5c:
         ee:0f:ad:ee:b3:d9:2b:a4:f3:62:66:4f:0d:73:c2:9f:42:14:
         2d:e2:c1:62:ad:1c:25:fd:f2:ba:90:20:b4:7f:8c:3f:0f:71:
         2a:39:1c:03:4e:ac:84:cf:2e:c3:4a:f2:03:4e:96:ef:f9:4c:
         9e:ef:59:8a:f7:d0:86:bd:ba:d7:5b:6b:cf:55:de:f5:31:ba:
         14:c8:c7:02:34:d2:ec:28:2d:22:d1:ad:64:49:64:6d:55:f9:
         af:d6:e7:24:08:cc:76:2b:9b:33:f7:59:56:79:fc:cf:ee:61:
         81:f2:b6:dd:88:7a:69:ba:9e:34:63:62:2d:18:91:d1:d1:0d:
         03:b2:cc:34:df:e4:d1:80:a0:80:12:aa:d9:a9:d6:9e:4d:7e:
         62:f1:26:b8:f4:4c:17:62:57:e6:99:75:c4:b1:93:c5:dd:34:
         63:24:e8:2f:2c:61:ca:df:50:d1:13:3a:b1:34:7d:6f:f8:bb:
         a6:0d:34:0b:98:5e:31:d8:6b:a5:66:f6:4c:20:ab:92:c4:59:
         0b:35:62:56:8a:0a:38:63:51:a4:8f:df:6b:fb:fb:89:e5:4d:
         43:5a:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org