Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/1-jInMnuJ1Qf5WWv2TNl7js7Nlqg.roa
File:                     1-jInMnuJ1Qf5WWv2TNl7js7Nlqg.roa (raw, json)
Hash identifier:          h1SjmH2kWbRt3CzX7DcQ+wekNv/UJd6+RhYl4TwA/3g=
Subject key identifier:   FA:32:27:32:7B:89:D5:07:F9:59:6B:F6:4C:D9:7B:8E:CE:CD:96:A8
Certificate issuer:       /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial:       01821149460F1CFE40FAFCF5C47E23FA3B3A
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/1-jInMnuJ1Qf5WWv2TNl7js7Nlqg.roa
Signing time:             Mon 18 Jul 2022 12:29:50 +0000
ROA not before:           Mon 18 Jul 2022 12:29:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        45.150.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:49:46:0f:1c:fe:40:fa:fc:f5:c4:7e:23:fa:3b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
        Validity
            Not Before: Jul 18 12:29:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa3227327b89d507f9596bf64cd97b8ececd96a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:b8:2e:d3:b6:da:93:fe:13:6b:16:d2:61:
                    67:eb:33:45:9d:5c:83:e0:8c:f1:6f:3e:e9:1d:17:
                    af:3e:20:19:51:8c:0e:d0:c4:39:d6:b9:b7:4b:5c:
                    c6:7c:4f:23:6d:f2:df:46:b7:c4:a7:20:3d:86:6d:
                    b6:ca:36:0d:29:ec:87:29:84:f9:16:55:de:e3:30:
                    0b:52:d7:83:30:f1:4d:e4:47:40:af:f0:f6:76:d1:
                    ab:6b:02:12:a3:0a:4a:54:4f:df:97:f8:09:2a:53:
                    09:e7:e2:4b:5d:fe:4a:75:cb:0e:ca:17:9c:1c:c9:
                    20:23:2f:9d:b1:57:95:7d:a6:1a:e9:4a:bc:e5:40:
                    82:37:01:aa:d6:47:07:ed:37:19:52:08:4b:9d:05:
                    94:e8:6c:6e:af:0d:28:1c:2c:36:35:51:59:96:67:
                    d6:5c:fa:6c:c1:30:3b:b5:e1:65:ea:f1:0c:07:26:
                    68:c4:96:05:56:3d:7c:14:b2:b2:b7:f2:78:0b:f0:
                    26:e5:97:b4:a0:e4:52:52:9e:c1:23:6c:d0:a9:23:
                    87:eb:d5:9d:ba:5a:f2:f5:0d:6f:89:32:4f:e9:04:
                    02:3b:17:d0:2c:78:f5:69:f1:2f:45:44:6f:8f:36:
                    f6:2d:03:72:c3:26:ec:29:5a:20:2e:3c:a0:13:71:
                    0e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:32:27:32:7B:89:D5:07:F9:59:6B:F6:4C:D9:7B:8E:CE:CD:96:A8
            X509v3 Authority Key Identifier:
                keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/1-jInMnuJ1Qf5WWv2TNl7js7Nlqg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bb:a7:98:d7:ee:43:ea:84:18:28:7b:17:31:2f:22:35:13:
         55:5c:5d:55:22:f0:76:1a:bf:cf:84:29:b3:de:30:30:02:1b:
         e3:39:63:18:87:c5:42:1e:66:e0:13:cd:28:bd:b7:a3:9c:fe:
         ee:52:a6:c2:33:e3:8b:20:28:74:f5:21:bb:36:79:59:e7:b9:
         70:57:2e:26:dd:92:b5:4a:9c:6b:8a:e7:ca:62:c1:4a:88:74:
         f0:7f:17:50:c3:f7:7a:12:ad:bd:ab:51:f2:10:8d:03:23:41:
         82:65:3e:69:f8:2e:e1:94:91:dd:0d:5f:89:9f:e2:38:9d:36:
         1c:30:46:17:58:89:b5:51:9a:0a:18:83:8b:4d:ad:6e:8e:c8:
         bf:65:56:5f:b9:9d:8b:5f:37:6c:b1:ac:67:be:72:99:90:6a:
         b9:4b:c2:e3:88:a1:27:80:d1:5d:a2:dd:4f:87:15:e8:1c:ed:
         90:0c:9a:bd:cc:8b:66:53:36:c6:a6:92:ec:c5:ee:b8:7d:17:
         ce:61:5c:17:bf:05:d6:e3:57:4e:1d:f8:91:5e:4f:e4:af:5d:
         76:e9:cc:fc:48:56:10:dd:11:7b:5e:90:7f:b2:98:6f:36:c0:
         99:e7:f7:33:ee:84:05:00:f7:44:25:9b:da:52:66:67:f5:e4:
         1e:d3:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org