Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/z1t6jHloW9uQ8QzDfNiJYfntC7U.roa
File:                     z1t6jHloW9uQ8QzDfNiJYfntC7U.roa (raw, json)
Hash identifier:          Wi7bt83huZE1Z2NoIp/+aFECTu0UvIhEKJ0xQFvC3AI=
Subject key identifier:   CF:5B:7A:8C:79:68:5B:DB:90:F1:0C:C3:7C:D8:89:61:F9:ED:0B:B5
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A48FCC1
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/z1t6jHloW9uQ8QzDfNiJYfntC7U.roa
Signing time:             Tue 29 Mar 2022 20:27:22 +0000
ROA not before:           Tue 29 Mar 2022 20:27:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35913
IP address blocks:        5.181.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172555457 (0xa48fcc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 29 20:27:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cf5b7a8c79685bdb90f10cc37cd88961f9ed0bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:05:61:68:66:98:e5:a6:62:28:2e:41:2e:
                    8c:5f:d6:b4:94:d4:7d:a4:2c:91:44:ce:37:2b:67:
                    25:20:d7:a4:18:f2:02:c4:1b:81:5c:99:fd:46:6d:
                    c8:bc:e1:32:2a:c0:65:c6:02:75:7f:25:3f:81:d3:
                    43:b9:91:ff:52:84:9e:16:00:87:e0:3f:82:98:ee:
                    ea:59:c4:68:8e:c5:0e:7c:28:a4:83:c3:70:b8:cd:
                    52:1b:2c:5e:41:4e:d8:8b:cd:c9:5f:43:a4:f0:a9:
                    77:cd:9f:d5:9f:12:cb:75:2b:5d:f1:74:bc:4d:07:
                    96:7b:f1:20:e1:05:0b:de:6d:b1:67:5f:01:3a:f8:
                    c4:85:6f:69:51:9c:3b:c9:ef:5d:02:a3:54:fc:c0:
                    6e:e9:14:20:92:13:a8:60:74:92:64:02:94:a4:e0:
                    36:e4:e8:c6:0d:63:ed:fa:91:4e:53:98:c9:78:96:
                    83:59:e7:90:f1:67:8e:96:ae:40:24:95:15:b2:a2:
                    fc:4f:e8:0c:dc:ee:0a:9d:35:54:21:73:d1:18:ca:
                    4e:ed:49:45:db:50:5b:b1:1f:10:28:2c:5b:ee:1f:
                    22:db:7d:a4:36:8d:7d:f4:15:cf:4e:88:96:51:71:
                    da:62:35:bb:61:e6:d2:cf:12:04:f6:38:84:3e:6f:
                    3d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5B:7A:8C:79:68:5B:DB:90:F1:0C:C3:7C:D8:89:61:F9:ED:0B:B5
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/z1t6jHloW9uQ8QzDfNiJYfntC7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:61:bf:5d:63:e1:64:64:68:75:03:3f:14:82:cb:d8:49:65:
         bc:a3:a0:f1:17:55:c9:4d:b9:b2:25:05:b6:d1:ed:d1:71:3c:
         74:99:f5:13:aa:0a:a3:32:58:d5:59:15:7e:08:62:54:6a:c8:
         4e:dc:d1:c3:76:5c:41:b9:26:07:44:cc:fa:14:de:e0:83:2f:
         7f:53:ee:02:92:1a:6f:27:a1:6c:bc:1f:1c:95:aa:05:d7:b7:
         e1:88:f4:7e:d8:88:a5:8d:56:2c:63:e6:02:2f:19:e7:2f:63:
         09:95:de:15:b9:ae:0e:4e:75:ac:97:e9:4c:7f:1b:d9:4e:84:
         2e:3d:be:a5:a0:a4:cc:53:b7:76:3d:f6:f4:a6:a2:a6:ec:dd:
         53:e2:9d:23:b4:11:af:3b:e8:b4:f6:13:64:33:b2:42:0f:5e:
         cf:31:e5:70:dd:ee:bc:8e:10:66:8a:1c:2c:56:c7:fb:57:61:
         7d:89:21:41:ff:7c:62:b5:05:1f:84:33:33:cb:a4:c3:37:e7:
         7d:68:38:ef:85:ef:28:16:b3:ce:93:90:49:d0:eb:6e:2b:18:
         93:fd:6a:2e:ff:9c:b2:6b:88:64:23:90:f9:c8:1e:59:69:ab:
         4c:b5:49:78:73:25:f2:94:a8:3a:8d:c2:a7:08:81:a0:a8:44:
         6b:87:e1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org