Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa
File:                     Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa (raw, json)
Hash identifier:          6k0HE6GecUe5J3/+8I0JtgUy/sLbgXNfsElhF93/vvI=
Subject key identifier:   06:3D:EC:64:99:4F:78:02:DF:46:05:79:21:C0:E1:63:D9:E0:9B:B4
Certificate issuer:       /CN=9c378004b2d850fe49a35559e40abf09adee402e
Certificate serial:       073E80C2
Authority key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa
Signing time:             Sat 01 Jan 2022 12:56:33 +0000
ROA not before:           Sat 01 Jan 2022 12:56:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51088
IP address blocks:        45.144.196.0/22 maxlen: 22
                          2a0f:d440::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121536706 (0x73e80c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c378004b2d850fe49a35559e40abf09adee402e
        Validity
            Not Before: Jan  1 12:56:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=063dec64994f7802df46057921c0e163d9e09bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:36:39:0f:9f:04:37:a2:cf:e5:48:90:d2:
                    e5:23:75:53:e5:48:71:f7:f3:4c:89:c1:f2:38:f4:
                    da:c4:6b:21:c7:db:5f:7d:bc:56:ab:20:2e:b1:ac:
                    57:e7:59:17:3b:51:fa:32:7c:90:01:1b:f6:51:61:
                    b1:42:ee:3a:f8:29:93:dc:ff:2c:b6:08:92:f0:c8:
                    b4:14:3f:a6:b0:c9:b0:77:4e:af:93:fe:e7:4a:e8:
                    54:55:ed:fd:c0:10:b5:98:85:6e:b8:ca:24:6a:5c:
                    44:b2:4d:3e:c4:e4:17:7e:78:eb:bd:44:eb:18:06:
                    ed:ef:92:87:00:36:29:f5:3a:47:8f:bc:e3:58:88:
                    61:ab:d4:94:7a:8b:48:11:6a:39:df:53:74:32:11:
                    33:ea:a1:b2:6a:f5:35:7d:e8:82:ad:17:4d:23:08:
                    6d:a7:c2:f1:85:08:99:a7:ff:17:67:6e:96:10:5f:
                    10:53:a9:c9:41:fc:08:64:2d:2e:a6:0c:ca:38:07:
                    dd:07:27:c7:06:a0:77:d4:e1:cd:8d:2c:88:5e:a1:
                    9e:97:85:f0:55:6e:78:cd:82:e6:86:6d:eb:83:12:
                    9c:b6:6a:9e:16:16:9e:23:a9:2f:e8:03:d6:91:23:
                    a0:ca:d0:77:70:c3:a0:dc:90:ff:dd:7d:0b:28:8f:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3D:EC:64:99:4F:78:02:DF:46:05:79:21:C0:E1:63:D9:E0:9B:B4
            X509v3 Authority Key Identifier:
                keyid:9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/Bj3sZJlPeALfRgV5IcDhY9ngm7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.196.0/22
                IPv6:
                  2a0f:d440::/29

    Signature Algorithm: sha256WithRSAEncryption
         12:b3:3b:4f:ae:e8:b0:af:a3:ac:06:66:8e:39:8b:44:6e:74:
         7a:3b:da:87:e8:bd:fb:6f:fe:87:7e:c5:92:dc:a9:72:ad:f0:
         3b:16:3f:a2:5e:d2:08:f6:ed:a9:64:1a:ed:1f:3f:22:c4:3c:
         4d:a7:91:37:4e:07:ec:95:82:61:a6:63:3b:24:59:50:c8:e8:
         01:08:4d:ce:62:c1:21:7c:24:ea:81:8d:6d:b3:5c:57:6c:ac:
         a4:81:dc:3f:a2:60:d4:1a:4b:c4:d6:e1:2d:0a:db:8e:6a:47:
         81:e0:ff:bb:46:6b:ec:63:42:b4:87:35:8b:d5:f4:a0:ee:67:
         53:d8:34:b0:3b:a3:9c:d2:ab:51:9f:f7:10:e0:18:9a:8b:3c:
         50:ad:17:79:db:e3:38:af:bd:f2:dd:5d:5d:73:ed:a6:86:a2:
         77:07:06:5c:35:bc:fb:25:0c:db:b4:ac:60:c0:cb:f2:1d:c5:
         c2:09:84:e5:fa:c2:56:48:d7:7b:f8:67:bd:57:e4:9b:0e:15:
         87:62:1e:23:92:84:8d:96:1a:14:f1:36:50:4d:65:18:00:f1:
         e7:fa:2e:d0:c6:91:ad:33:8c:0a:6d:72:86:f6:c3:54:d3:70:
         a3:09:2e:de:1e:5a:62:42:04:fa:5c:1a:18:e7:bc:80:91:d9:
         bf:c3:e3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:34 2024 by rpki-client on console-ams.rpki-client.org