Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/VSkMgWxbN4zOwr1sr0h2Hx6s_So.roa
File:                     VSkMgWxbN4zOwr1sr0h2Hx6s_So.roa (raw, json)
Hash identifier:          dD24cgGCALACu3qHQyZHM+aF8021k7yoHEst+wy98Dw=
Subject key identifier:   55:29:0C:81:6C:5B:37:8C:CE:C2:BD:6C:AF:48:76:1F:1E:AC:FD:2A
Certificate issuer:       /CN=85649727630464fb08709ac936433978f4a10eaa
Certificate serial:       0524D235
Authority key identifier: 85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/VSkMgWxbN4zOwr1sr0h2Hx6s_So.roa
Signing time:             Sat 01 Jan 2022 14:07:56 +0000
ROA not before:           Sat 01 Jan 2022 14:07:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        45.144.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86299189 (0x524d235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85649727630464fb08709ac936433978f4a10eaa
        Validity
            Not Before: Jan  1 14:07:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55290c816c5b378ccec2bd6caf48761f1eacfd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:af:15:9e:f6:68:28:50:41:72:86:cf:a3:
                    4a:10:65:58:81:59:b6:50:5e:5e:e8:01:41:0e:ca:
                    cf:dd:b7:66:f8:83:13:c8:22:fa:45:a0:01:89:93:
                    ba:53:fa:9b:1b:7b:a4:2c:80:43:d6:34:db:b5:48:
                    04:5a:2f:f5:00:00:c4:d5:02:8f:3c:de:0b:bb:45:
                    72:65:eb:65:91:e5:90:35:59:99:6a:6e:10:9c:03:
                    43:73:7e:29:bb:fc:5d:5b:b8:00:ca:e0:2f:59:9d:
                    ef:ac:c6:ea:39:2d:eb:1e:32:13:f1:02:14:98:b3:
                    b9:18:63:05:e6:fe:f1:a0:3c:c6:5b:9e:f5:88:b1:
                    a6:ea:29:32:36:3d:78:1f:37:9f:5d:81:fe:a1:fa:
                    91:3d:57:16:e3:6b:53:ba:a7:f7:4a:5d:7b:4f:01:
                    57:d4:73:db:39:97:ba:14:33:38:cc:5a:7f:8a:6d:
                    e7:9b:b0:25:c6:69:60:cb:06:26:1f:ff:ae:2c:60:
                    ca:08:03:d1:ee:a9:99:95:ee:c2:3e:13:6c:03:ca:
                    20:b3:34:c2:da:72:40:ec:dc:92:6e:9d:e9:69:38:
                    61:04:ce:77:d0:c4:5e:1e:f9:62:ef:9d:66:86:25:
                    f4:32:b2:7f:48:1a:48:d0:15:86:09:4a:41:8d:69:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:29:0C:81:6C:5B:37:8C:CE:C2:BD:6C:AF:48:76:1F:1E:AC:FD:2A
            X509v3 Authority Key Identifier:
                keyid:85:64:97:27:63:04:64:FB:08:70:9A:C9:36:43:39:78:F4:A1:0E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSXJ2MEZPsIcJrJNkM5ePShDqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/VSkMgWxbN4zOwr1sr0h2Hx6s_So.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/4a95c1-1a50-4aff-bdab-0f6c9dd4f8fc/1/hWSXJ2MEZPsIcJrJNkM5ePShDqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:35:a0:1f:1e:1f:bf:ac:c0:bb:76:4e:c1:7d:3a:f3:7d:a8:
         72:ef:86:95:93:85:a7:b8:0d:1a:a4:72:ca:06:0d:6a:89:5f:
         c6:fa:1d:0c:b7:86:8d:58:f4:be:61:2c:f5:be:57:c2:e2:93:
         a8:4e:33:5d:89:3f:a4:4b:96:1a:47:05:0e:2d:db:12:4e:af:
         cc:1a:6a:15:b6:b7:6d:ea:b7:ac:a2:42:84:4a:80:ee:ac:c4:
         e9:48:d0:0d:f0:27:db:4a:89:fa:66:8f:12:1f:7a:e8:27:b5:
         9a:cd:b8:59:35:63:0d:00:1d:3e:9c:ef:24:18:cb:f8:51:05:
         0e:e3:c8:e2:08:48:54:31:4f:ad:b2:60:71:24:3d:3e:ee:a2:
         72:a9:7e:70:f4:0d:93:e0:fe:67:ff:5e:14:22:8d:75:d4:f5:
         4b:6e:05:f1:7f:53:e7:55:b6:b2:17:40:99:11:3e:fb:09:06:
         42:01:79:be:cc:b3:b6:8f:ab:52:bb:e9:6d:c4:78:17:d8:48:
         9e:01:4d:36:2e:f4:b0:68:d5:85:cf:ef:cb:0a:89:43:4a:17:
         f2:63:e4:cc:de:c5:ea:39:6e:ea:b6:fd:03:68:e1:d3:e0:3a:
         e9:60:27:d9:53:2a:d3:e1:a2:6f:76:2e:86:69:33:6a:f9:35:
         2f:89:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:58 2024 by rpki-client on console-ams.rpki-client.org