Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/A05cenaKPezapAClw1gRytfy4Zs.roa
File:                     A05cenaKPezapAClw1gRytfy4Zs.roa (raw, json)
Hash identifier:          LHQTWz/7XWbuVceQPT3I9nkkkcJb+H/MPalkREDsAeM=
Subject key identifier:   03:4E:5C:7A:76:8A:3D:EC:DA:A4:00:A5:C3:58:11:CA:D7:F2:E1:9B
Certificate issuer:       /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial:       124E7C41
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/A05cenaKPezapAClw1gRytfy4Zs.roa
Signing time:             Tue 24 May 2022 06:26:29 +0000
ROA not before:           Tue 24 May 2022 06:26:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51559
IP address blocks:        185.160.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307133505 (0x124e7c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
        Validity
            Not Before: May 24 06:26:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=034e5c7a768a3decdaa400a5c35811cad7f2e19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cd:75:eb:d6:a1:ee:f9:32:e0:e8:d4:69:de:
                    4f:95:67:50:6c:a9:fe:59:eb:13:a6:5f:97:12:06:
                    d1:a0:c6:d5:47:f6:ce:6b:a7:40:49:13:ef:33:7f:
                    06:75:25:31:5f:f0:6c:6c:c6:00:17:4b:fb:e4:18:
                    86:23:a9:8c:f5:a3:c8:9b:2f:e6:38:e2:f3:9d:e6:
                    cd:b4:88:81:9e:8e:26:83:99:43:4a:86:05:ee:a3:
                    1c:16:91:62:e5:a0:d2:95:a0:fd:55:44:f1:d6:4d:
                    2e:65:e3:f5:ef:22:3d:90:fa:e4:dd:a9:f2:0b:66:
                    56:05:22:47:bb:04:bf:e4:fe:51:7e:a8:77:63:89:
                    fc:b5:b3:a6:1c:92:cd:c9:61:6b:9c:dd:14:98:b5:
                    3c:2f:8e:82:a5:8c:53:bc:5b:e1:53:6c:71:ff:e2:
                    54:68:2c:fa:14:8b:6a:9c:60:20:29:f6:ff:d3:dc:
                    af:c2:3f:99:91:c1:4a:57:af:a2:b8:ae:bd:62:19:
                    b4:67:7f:dd:96:6b:5d:3c:74:36:c5:be:b2:06:2f:
                    e4:3b:56:36:61:ab:06:d7:78:a8:bf:e7:b5:33:16:
                    32:9d:ce:29:91:8f:0c:77:25:e7:2e:69:79:b2:72:
                    9c:76:39:e8:80:f7:fd:63:2d:d8:51:eb:09:49:b1:
                    8a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:5C:7A:76:8A:3D:EC:DA:A4:00:A5:C3:58:11:CA:D7:F2:E1:9B
            X509v3 Authority Key Identifier:
                keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/A05cenaKPezapAClw1gRytfy4Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d9:99:99:95:8b:b5:aa:48:56:71:62:8d:78:84:89:2c:60:
         08:06:62:66:3a:64:a1:90:ee:18:92:a6:bb:8b:ee:61:eb:47:
         74:d8:7a:b8:8a:b4:24:25:3d:6b:c1:b6:48:db:c5:68:e0:64:
         09:f6:4a:0e:d0:e9:17:42:09:75:64:1c:c7:52:a0:5a:0c:9e:
         c8:08:ca:7f:b6:78:a7:0b:54:39:b0:f3:b1:fc:77:b6:57:e8:
         eb:ad:4a:00:1f:a1:e0:2f:2d:12:02:16:be:14:cd:ca:db:07:
         a5:4b:be:1e:ba:b7:ab:e6:bc:e7:43:5c:44:9c:ed:28:91:28:
         b4:bd:52:c6:99:0f:3a:70:c1:63:57:a0:a9:83:fe:a5:0b:fb:
         1c:0d:cf:62:f9:72:c2:14:eb:6d:71:a6:62:9f:68:d6:e1:65:
         24:7f:3c:25:b8:d1:af:50:f6:26:cf:5e:b4:f5:98:e4:60:79:
         5e:11:44:f2:fe:62:41:09:c2:67:85:50:c9:ce:f5:8b:59:28:
         79:3d:aa:6f:b8:ef:6a:3a:1b:25:d7:e0:86:3b:ba:4f:ca:a9:
         96:c0:c4:cf:93:41:1f:7e:0a:3a:1c:48:5e:47:b4:b1:ed:6c:
         8e:02:6e:76:c4:0f:67:92:df:01:d2:22:12:9c:56:fd:95:e6:
         14:d8:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org