Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/dp-sYktWIGsbyN2xamOGbGSYOk4.roa
File:                     dp-sYktWIGsbyN2xamOGbGSYOk4.roa (raw, json)
Hash identifier:          ec7ro/Fm3x3zCs3x4W3fmDc38gkTEEXVBzRLhc6gnIY=
Subject key identifier:   76:9F:AC:62:4B:56:20:6B:1B:C8:DD:B1:6A:63:86:6C:64:98:3A:4E
Certificate issuer:       /CN=2777c445a06e0430c0a0831e04f62e215d1559ac
Certificate serial:       018570951D281EE57B2258848A49888F31C0
Authority key identifier: 27:77:C4:45:A0:6E:04:30:C0:A0:83:1E:04:F6:2E:21:5D:15:59:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J3fERaBuBDDAoIMeBPYuIV0VWaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/dp-sYktWIGsbyN2xamOGbGSYOk4.roa
Signing time:             Mon 02 Jan 2023 03:44:58 +0000
ROA not before:           Mon 02 Jan 2023 03:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201476
IP address blocks:        5.183.12.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:1d:28:1e:e5:7b:22:58:84:8a:49:88:8f:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777c445a06e0430c0a0831e04f62e215d1559ac
        Validity
            Not Before: Jan  2 03:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=769fac624b56206b1bc8ddb16a63866c64983a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:a7:ec:54:62:98:60:29:0a:ad:83:22:71:
                    35:29:6b:5e:e7:28:8e:eb:07:07:68:0f:4d:1f:54:
                    6c:1c:0d:12:7a:e2:cc:c5:07:2c:69:09:8c:7a:db:
                    d3:1f:c9:2e:f6:4d:4e:29:72:90:8c:7b:b8:d4:7a:
                    7d:91:cb:2e:45:c9:ea:bb:69:60:ba:19:b2:80:70:
                    36:ce:4d:a5:70:3c:8a:7c:38:8f:31:c7:53:f2:4d:
                    27:13:38:f3:f3:e3:d9:08:7c:d4:57:62:8f:7b:4f:
                    c7:a3:e0:c5:d5:3f:fc:aa:84:e0:36:ac:65:86:30:
                    ca:fe:e7:18:53:bf:fc:93:77:ff:cb:f7:1e:c1:78:
                    b1:40:2e:10:9f:01:d8:56:0a:c8:92:ad:2e:cb:a5:
                    02:3c:84:fe:96:6a:4d:aa:d9:6c:24:0c:ef:9f:5d:
                    e6:a8:c3:3d:02:2a:bd:c5:f9:70:a0:58:91:ec:1f:
                    a1:8b:0f:3b:42:6b:0f:b5:11:11:3e:14:37:ba:98:
                    2c:82:f6:e5:74:42:b2:9f:c5:69:f0:4c:f0:33:21:
                    d4:00:a0:05:74:fb:3f:a4:0a:08:3a:4e:c0:4e:03:
                    f8:75:a4:4d:7f:1b:45:91:2f:d2:57:8c:34:da:15:
                    18:71:98:ee:d9:ab:33:c6:92:82:86:f3:04:0a:82:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9F:AC:62:4B:56:20:6B:1B:C8:DD:B1:6A:63:86:6C:64:98:3A:4E
            X509v3 Authority Key Identifier:
                keyid:27:77:C4:45:A0:6E:04:30:C0:A0:83:1E:04:F6:2E:21:5D:15:59:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3fERaBuBDDAoIMeBPYuIV0VWaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/dp-sYktWIGsbyN2xamOGbGSYOk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6a6e34-6bb7-4cf1-b709-d050c323c34b/1/J3fERaBuBDDAoIMeBPYuIV0VWaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c2:2d:22:0d:1a:64:f3:8c:60:28:64:b7:63:39:f7:2f:fe:
         a3:15:59:4f:87:44:bb:d6:3a:de:cf:7a:90:6e:1e:d1:af:92:
         37:16:01:17:99:56:24:02:8a:b5:50:0c:f5:45:a7:5e:29:52:
         99:b2:02:17:1a:fb:d0:9e:25:ae:06:b6:96:8e:38:30:b9:61:
         9f:de:8d:2f:0f:40:26:90:84:2a:aa:cf:7e:43:44:bf:ee:3b:
         b2:f1:c4:5a:97:0f:f9:80:05:9c:35:e9:79:70:c2:3f:ea:72:
         fe:a9:ad:42:0a:d2:eb:fc:cc:8d:91:57:5f:54:da:c2:6a:8a:
         c4:6b:34:f6:91:d5:d8:2b:e5:d8:10:6b:85:8f:46:76:6a:ee:
         ca:ae:bc:c9:5f:8f:be:4e:2e:2a:b4:d6:76:cb:60:70:1e:9d:
         e9:c2:35:b2:b9:80:02:90:08:ed:51:ad:f9:68:df:e9:d1:43:
         30:e3:d6:f2:47:68:f3:b3:f2:99:06:b3:0a:6a:60:e1:74:43:
         a8:c2:5f:6d:96:e3:4d:41:d3:4c:7b:95:d7:0a:ad:65:b2:c9:
         56:ab:9c:11:61:bd:f9:ad:98:99:2a:2f:b3:75:ff:8b:c3:68:
         05:43:d8:cf:4b:ae:02:ca:cd:36:c0:90:ba:b3:cf:ff:98:cb:
         19:ec:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:44 2024 by rpki-client on console-ams.rpki-client.org