Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa
File:                     TT20dthfWtCW7E0dmXCFdRT1Cxc.roa (raw, json)
Hash identifier:          zOnB8aXXinLCwQsJi4vmn7S0pOrwAqoz09nsamXCbdc=
Subject key identifier:   4D:3D:B4:76:D8:5F:5A:D0:96:EC:4D:1D:99:70:85:75:14:F5:0B:17
Certificate issuer:       /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial:       01856C01015536F0ABADA3042744D22BD2BA
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa
Signing time:             Sun 01 Jan 2023 06:24:43 +0000
ROA not before:           Sun 01 Jan 2023 06:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51559
IP address blocks:        185.160.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:01:55:36:f0:ab:ad:a3:04:27:44:d2:2b:d2:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
        Validity
            Not Before: Jan  1 06:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d3db476d85f5ad096ec4d1d9970857514f50b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:f0:f3:fa:8f:43:bd:f3:58:a4:4f:89:b3:
                    dc:57:67:b1:b8:30:b6:9c:98:63:14:02:d8:32:9e:
                    b8:4a:bb:a4:2f:c3:b4:7e:84:57:61:dc:cd:58:0e:
                    75:b1:ed:1d:f5:3b:d2:23:e4:92:77:e7:4a:c8:8b:
                    60:38:06:0d:14:ab:d5:e5:d0:bc:4e:de:9f:52:41:
                    a7:84:e1:4f:91:45:2b:fd:46:2d:82:a8:ac:30:ed:
                    4e:c1:27:55:39:46:cb:d8:eb:61:eb:19:aa:9d:cb:
                    cc:39:3a:bd:bb:4f:dd:dc:31:5c:5e:33:9c:70:bf:
                    46:03:07:04:7e:08:f0:80:2e:c8:bf:d0:15:6b:75:
                    da:49:6e:ea:a8:e0:1d:cf:1c:94:3a:cb:50:5b:16:
                    34:9c:7d:4a:bf:6b:52:c1:43:2f:bb:68:f9:77:8b:
                    b9:f2:58:c8:3b:11:4b:8a:b6:fa:fd:11:12:25:70:
                    9c:b4:83:f3:42:45:6c:23:5f:31:c0:8a:6a:e4:94:
                    7b:80:78:5d:21:90:ab:75:0d:20:57:62:49:78:d1:
                    13:cb:b2:7b:22:40:7e:68:b9:3f:37:df:20:02:38:
                    9c:c6:56:d1:d5:77:a6:fa:42:7d:23:db:8b:bf:71:
                    d2:71:a2:88:40:91:15:d8:24:c5:ec:8b:0d:14:76:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3D:B4:76:D8:5F:5A:D0:96:EC:4D:1D:99:70:85:75:14:F5:0B:17
            X509v3 Authority Key Identifier:
                keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/TT20dthfWtCW7E0dmXCFdRT1Cxc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2b:46:40:2a:49:9c:d4:42:93:a1:8c:cd:16:6d:3a:88:eb:
         82:b7:1b:72:e9:84:7f:22:32:50:3d:3c:3e:e9:55:bb:09:99:
         c6:24:77:a1:e3:36:af:e8:f6:03:6c:bb:83:23:e1:05:f2:7d:
         09:7d:4b:27:d8:00:b3:3d:51:82:73:76:44:d1:96:21:7a:05:
         f6:49:76:3e:4d:c1:45:3c:3c:eb:5a:b5:8d:1a:33:e8:e9:14:
         da:f4:5b:6d:e9:c8:12:54:7b:55:71:f0:74:41:14:3d:8c:a9:
         a3:23:dc:4c:fc:97:76:9f:fc:da:b2:fa:19:48:ad:47:60:01:
         33:a4:98:cd:2b:d6:39:de:07:65:c6:49:14:e5:90:ef:27:ba:
         62:a9:38:47:86:20:26:bc:59:cb:c5:b9:7b:e5:50:41:09:b7:
         e7:10:64:3a:0c:a5:b2:6d:06:fc:36:9c:db:94:9d:ca:90:fd:
         92:f1:7f:80:e9:d0:55:4f:81:a9:d5:e4:a2:09:4c:46:f1:6a:
         85:3e:bb:13:42:da:ab:37:e9:74:97:c2:c8:2a:42:41:d4:0f:
         9b:76:94:0e:2c:fd:30:22:42:55:19:08:ad:8b:ca:26:72:12:
         66:6d:ce:76:1f:67:03:1c:63:8e:c3:1a:d9:17:76:91:22:ce:
         80:40:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:18 2023 by rpki-client on console-ams.rpki-client.org