Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/TWWXpp1-KbaEp3mG9czA4I56KIM.roa
File:                     TWWXpp1-KbaEp3mG9czA4I56KIM.roa (raw, json)
Hash identifier:          KmvuAt02dp1obYHsTaqejs2PPyGaHvt05H2v5L4gMbk=
Subject key identifier:   4D:65:97:A6:9D:7E:29:B6:84:A7:79:86:F5:CC:C0:E0:8E:7A:28:83
Certificate issuer:       /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial:       13EA65E1
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/TWWXpp1-KbaEp3mG9czA4I56KIM.roa
Signing time:             Sat 01 Jan 2022 12:59:16 +0000
ROA not before:           Sat 01 Jan 2022 12:59:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19750
IP address blocks:        185.235.85.0/24 maxlen: 24
                          91.199.242.0/24 maxlen: 24
                          91.212.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334128609 (0x13ea65e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
        Validity
            Not Before: Jan  1 12:59:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4d6597a69d7e29b684a77986f5ccc0e08e7a2883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:73:5a:36:1c:f6:49:5c:05:8e:3c:1f:e1:
                    d5:08:6d:18:53:fe:11:9b:1c:4a:9c:b6:7f:6a:9e:
                    2d:0a:4d:bd:f1:46:a8:e6:fe:34:a5:ac:0c:2c:a2:
                    79:a5:dd:66:62:85:a0:fe:b8:03:e0:fa:96:0c:a8:
                    a7:d1:18:2e:97:77:3a:90:5b:10:53:44:80:04:4d:
                    a7:fc:b7:fc:e5:f3:81:93:3e:11:34:5e:11:7b:e6:
                    78:b8:22:b3:46:b9:f1:5f:76:f9:dd:79:5a:cf:6d:
                    f1:d6:7c:82:c5:8c:43:02:81:b8:db:4c:14:e3:eb:
                    65:eb:0b:c7:dd:26:2f:33:8c:94:c8:2d:99:cf:43:
                    a1:94:70:c3:47:43:14:84:1f:c2:6d:94:0f:70:b7:
                    29:64:51:6f:9f:03:6b:95:2c:ee:1d:eb:f9:44:4e:
                    9d:55:d0:1e:31:db:1e:3d:ec:1a:5c:cd:ff:ae:57:
                    b7:f3:c1:dc:fa:7f:27:0d:e6:64:1b:7b:0d:72:4c:
                    fe:2d:b6:45:3f:f7:06:bc:98:6d:20:e1:c9:e0:0f:
                    7a:6e:83:ff:41:d4:60:fc:00:76:37:27:73:a5:b8:
                    29:c5:b7:3f:fa:9a:69:46:46:5a:65:36:24:50:be:
                    d9:e8:a6:9f:ff:54:eb:ea:a4:67:a5:a9:cb:3c:4b:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:65:97:A6:9D:7E:29:B6:84:A7:79:86:F5:CC:C0:E0:8E:7A:28:83
            X509v3 Authority Key Identifier:
                keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/TWWXpp1-KbaEp3mG9czA4I56KIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.242.0/24
                  91.212.98.0/24
                  185.235.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:18:f1:d5:e2:67:d9:68:b8:e4:8f:a7:66:7a:72:28:7a:ba:
         49:e4:46:82:32:aa:6e:43:f4:ba:f8:91:35:fa:53:9a:1f:c0:
         a4:5f:16:8e:b0:80:23:88:cd:e0:a9:74:c4:50:68:dc:36:9f:
         29:44:4d:cd:40:f8:4f:b3:0a:02:08:85:c8:cc:d1:fb:51:d8:
         46:25:82:11:e2:42:52:0a:84:aa:c2:6d:bb:2e:49:20:8a:de:
         5c:b3:e2:8a:fe:74:3f:48:1b:ca:e8:59:41:97:f2:a7:ef:98:
         28:1e:a4:74:0f:e0:0d:12:69:69:e1:fe:db:0e:a4:30:f6:7a:
         28:5d:41:fe:90:49:03:e6:5b:21:39:b2:a1:19:e7:00:9f:68:
         d7:8f:cd:cd:77:5f:5d:74:7e:50:14:f0:bb:20:b7:ad:17:51:
         05:aa:1d:3c:4e:55:6c:60:a1:a1:fd:37:32:96:da:68:c0:25:
         19:13:a7:de:4c:91:b5:db:9e:85:64:4b:b1:b1:cf:b8:40:63:
         82:6d:f0:34:b6:64:b3:02:e9:55:dc:2d:47:45:5b:a6:7a:06:
         b6:99:45:97:0e:cf:0f:14:58:f8:22:84:69:9d:68:c6:9f:f9:
         31:9d:22:18:ec:c6:76:fc:a1:de:3b:92:51:7c:b1:60:77:5a:
         a2:7e:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:57 2024 by rpki-client on console-ams.rpki-client.org