Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/eBjlODWLuha3Krs1cXlUROsDl4U.roa
File:                     eBjlODWLuha3Krs1cXlUROsDl4U.roa (raw, json)
Hash identifier:          Forita0bkAcxTMK+VTXJdqaVQHaEZmCiWV5nk4NZHJU=
Subject key identifier:   78:18:E5:38:35:8B:BA:16:B7:2A:BB:35:71:79:54:44:EB:03:97:85
Certificate issuer:       /CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
Certificate serial:       925871
Authority key identifier: 65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/eBjlODWLuha3Krs1cXlUROsDl4U.roa
Signing time:             Mon 17 Jan 2022 10:17:58 +0000
ROA not before:           Mon 17 Jan 2022 10:17:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211344
IP address blocks:        5.44.251.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9590897 (0x925871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65789ab4d903b2c73f79b2f66ed86a43a9640340
        Validity
            Not Before: Jan 17 10:17:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7818e538358bba16b72abb3571795444eb039785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:99:1b:56:c9:ef:0a:7a:de:05:a9:ea:b6:
                    41:bb:e9:87:93:10:a4:79:d5:ab:21:71:7e:51:65:
                    c5:7f:0e:1b:11:81:0d:2d:71:f4:11:aa:1b:19:93:
                    4b:7a:9c:6a:43:0c:09:18:c1:e5:e4:c1:d3:b6:09:
                    65:9d:ec:dd:0a:08:11:99:c3:04:49:ec:8b:b7:7c:
                    0e:9e:0c:bd:22:f0:38:99:a6:9f:15:e9:ed:af:b5:
                    1e:ea:84:cb:5e:7b:2d:64:89:53:48:f3:81:2d:85:
                    b6:7a:77:a0:a9:63:ad:23:d3:fe:de:40:35:b5:62:
                    97:d5:24:53:55:ba:01:42:d2:ec:f5:53:44:35:58:
                    95:bc:af:0c:ad:7e:6e:55:68:ab:7b:f9:4a:c1:6c:
                    e7:ea:04:9e:ff:2e:b1:24:20:1f:02:fd:45:5e:bd:
                    38:90:0e:36:2c:7f:55:65:a3:ec:e6:76:cb:52:a6:
                    0d:0c:c2:9e:22:91:b4:11:8e:26:ce:72:aa:01:4b:
                    12:e1:7c:28:ec:3f:00:d1:7a:4b:b9:25:25:4e:4d:
                    8c:f5:de:e0:d5:f6:2c:7b:71:0a:0b:f7:a3:e0:d4:
                    23:a2:ea:4d:12:dc:40:8e:e5:ba:8b:85:68:e0:02:
                    b7:39:e8:9c:24:f3:58:79:80:0e:c1:ac:6c:07:a4:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:E5:38:35:8B:BA:16:B7:2A:BB:35:71:79:54:44:EB:03:97:85
            X509v3 Authority Key Identifier:
                keyid:65:78:9A:B4:D9:03:B2:C7:3F:79:B2:F6:6E:D8:6A:43:A9:64:03:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZXiatNkDssc_ebL2bthqQ6lkA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/eBjlODWLuha3Krs1cXlUROsDl4U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/efa68d-e1fe-49b3-b887-61cce742d310/1/ZXiatNkDssc_ebL2bthqQ6lkA0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:7b:13:8d:ff:fd:9f:a5:a5:a5:e0:99:c7:a5:0f:2e:60:
         b3:f0:58:32:bb:b6:e6:0b:93:8e:db:66:d7:00:43:7a:ae:48:
         df:5d:bf:35:13:5f:90:5a:d4:8a:de:3c:fc:5f:c2:71:f1:11:
         f6:1f:50:b2:be:5b:e6:ad:f3:be:1e:72:f0:37:89:d5:ca:e1:
         d5:29:62:56:0b:21:94:e3:56:2a:5e:49:02:82:00:a8:86:71:
         71:c2:ef:25:e1:48:96:ff:b8:cc:da:aa:88:38:c5:ab:df:78:
         5f:29:ec:3c:97:89:89:40:0a:cc:51:35:a4:31:21:d6:ec:dc:
         4c:19:45:da:fa:00:eb:3d:3d:1d:b7:f8:eb:32:5b:de:81:fe:
         7c:be:af:fe:c3:f7:ea:e8:3f:f7:8d:ed:4e:64:c5:bc:52:e0:
         cf:8b:62:fa:0e:3f:e0:d2:db:8e:9d:33:2e:8c:10:9d:5e:8e:
         54:a0:5c:66:2c:4a:ea:3f:6b:61:79:22:7f:e3:f7:0b:49:07:
         6b:3b:2e:5c:78:4a:34:87:4b:60:b1:c6:ea:3a:12:dd:9e:d5:
         80:15:e4:c8:e7:c1:23:08:00:1e:d3:b7:76:02:75:b3:d6:50:
         1c:2e:24:46:61:fc:2e:07:2c:13:fc:3f:f3:1e:39:d5:9c:cd:
         3e:82:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:32 2024 by rpki-client on console-ams.rpki-client.org