Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/0iZhnSKmNe2Vy6X7EvJo_bCZQWg.roa
File:                     0iZhnSKmNe2Vy6X7EvJo_bCZQWg.roa (raw, json)
Hash identifier:          6SZhmnlg/SzrUaDH37QyYPxe7l3GWGB7r3RbMrSJQx8=
Subject key identifier:   D2:26:61:9D:22:A6:35:ED:95:CB:A5:FB:12:F2:68:FD:B0:99:41:68
Certificate issuer:       /CN=e06ebea64c464dff30177b57d6028b67d1ee862e
Certificate serial:       01856BAEB20D216CDDB58503DDB4F42E9A14
Authority key identifier: E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/0iZhnSKmNe2Vy6X7EvJo_bCZQWg.roa
Signing time:             Sun 01 Jan 2023 04:54:48 +0000
ROA not before:           Sun 01 Jan 2023 04:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55331
IP address blocks:        37.77.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ae:b2:0d:21:6c:dd:b5:85:03:dd:b4:f4:2e:9a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06ebea64c464dff30177b57d6028b67d1ee862e
        Validity
            Not Before: Jan  1 04:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d226619d22a635ed95cba5fb12f268fdb0994168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:82:31:57:9b:19:04:5d:c0:90:f1:90:74:
                    6b:ce:49:82:33:8e:61:e9:f6:e3:b2:5b:0b:68:75:
                    d4:ad:45:b7:79:a0:07:89:55:3f:26:ac:99:65:34:
                    cf:69:3d:17:80:48:32:0c:51:a2:71:c1:f8:b8:a5:
                    51:a0:50:a5:89:7e:9d:c1:f1:94:53:7d:f0:40:d6:
                    60:98:71:4f:18:c5:29:26:e4:64:b9:e9:9a:da:33:
                    40:15:49:15:39:39:95:3c:dd:27:8f:7b:df:a3:5a:
                    6e:e8:da:c5:fa:83:4f:b0:89:25:7f:dc:64:b8:b6:
                    f6:c2:e7:13:d8:dd:7c:83:da:5d:5f:98:85:3f:a8:
                    d2:07:f5:87:ea:b8:f5:4d:82:e6:3b:7a:35:ab:c5:
                    5c:c1:fa:42:4f:8c:4d:01:f3:b2:29:cc:b5:21:aa:
                    04:7c:7f:10:2e:ab:b0:58:f1:0f:35:fe:b3:74:ef:
                    84:28:88:c3:c5:34:18:d1:ce:6b:40:44:4c:df:0e:
                    71:86:91:02:07:25:27:61:a5:a6:29:fa:7e:fd:e2:
                    fe:af:b2:29:be:66:c3:d9:ef:1b:c9:0c:3e:bb:38:
                    80:52:80:af:9c:4f:85:fb:dc:80:7a:8f:54:dd:dd:
                    77:35:08:7b:85:7f:19:1b:9b:db:49:00:7f:43:90:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:26:61:9D:22:A6:35:ED:95:CB:A5:FB:12:F2:68:FD:B0:99:41:68
            X509v3 Authority Key Identifier:
                keyid:E0:6E:BE:A6:4C:46:4D:FF:30:17:7B:57:D6:02:8B:67:D1:EE:86:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/0iZhnSKmNe2Vy6X7EvJo_bCZQWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/cb0683-bd45-4d03-b891-64f223f06599/1/4G6-pkxGTf8wF3tX1gKLZ9Huhi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:39:ea:fd:68:1e:79:41:4f:58:ad:b5:a9:58:ad:ca:fb:
         e2:4e:fc:41:bc:97:6a:3a:20:43:ce:46:42:7e:c8:f8:be:51:
         1d:5c:e1:b1:9e:47:45:07:04:a5:45:05:4e:b6:d9:c4:62:62:
         58:77:59:13:c6:f2:4f:4f:87:42:bd:ff:4c:ca:51:ab:86:c5:
         e4:8b:4e:48:a4:4d:7b:96:39:5c:d0:90:70:a3:f0:30:ab:f4:
         8d:41:9c:41:56:50:aa:c5:9d:ae:cf:69:ff:cb:74:6a:e3:fa:
         12:1e:51:9e:21:ba:64:35:9a:1f:82:8f:1c:b5:82:69:15:fe:
         2f:85:9d:5c:74:05:6b:00:9c:d3:f9:2b:69:cf:11:ff:15:58:
         a9:29:8e:ee:5e:4c:21:35:dc:b3:3a:b0:25:35:66:db:53:a0:
         05:5d:d0:cf:91:0e:fe:38:48:29:08:bc:3c:ea:48:99:e2:17:
         50:1d:20:82:6d:19:48:cf:5c:cd:92:13:a9:47:63:e3:af:60:
         a7:e6:bc:89:a5:2f:9a:59:72:07:3e:f4:6a:b8:59:a2:a2:4f:
         07:89:54:4b:53:55:42:dc:99:3a:0f:57:37:b5:bc:2a:14:ba:
         3e:bb:69:5a:eb:91:7c:5d:4d:5c:6a:1d:4c:1a:1c:95:02:8f:
         4c:9a:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 13:07:47 2023 by rpki-client on console-ams.rpki-client.org