Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/p9rswPcHd70UPKTpEdfzyzv66EU.roa
File:                     p9rswPcHd70UPKTpEdfzyzv66EU.roa (raw, json)
Hash identifier:          jFQ7sKy0GnOFPmnmJ7YhTqKr9O2DDSYVoBwnC4CfoFM=
Subject key identifier:   A7:DA:EC:C0:F7:07:77:BD:14:3C:A4:E9:11:D7:F3:CB:3B:FA:E8:45
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       0184A6F888466C41CF64E98F3CF574E688FA
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/p9rswPcHd70UPKTpEdfzyzv66EU.roa
Signing time:             Thu 24 Nov 2022 00:10:16 +0000
ROA not before:           Thu 24 Nov 2022 00:10:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.149.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a6:f8:88:46:6c:41:cf:64:e9:8f:3c:f5:74:e6:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Nov 24 00:10:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7daecc0f70777bd143ca4e911d7f3cb3bfae845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:21:75:38:98:7e:1c:ca:de:1f:68:b0:a5:7a:
                    62:08:69:06:32:bc:5b:e1:77:b9:3b:67:1a:fc:50:
                    6d:d9:57:bd:67:b5:2c:13:e6:8e:76:b8:d4:7c:1d:
                    d0:f9:67:31:9e:4e:d3:f0:55:7f:c5:5f:eb:0f:e2:
                    b3:bc:57:5a:e1:4a:23:1d:e2:e2:88:61:85:fa:b6:
                    fd:50:ef:af:80:33:9c:d3:36:ac:37:9d:49:b3:2b:
                    3a:1b:f5:ed:7b:e5:86:41:d0:17:5c:1c:cb:e5:bb:
                    63:b9:2b:dc:76:65:ac:de:df:e4:6f:74:94:8d:b6:
                    92:05:09:33:98:75:3a:91:66:ed:ea:d1:6c:a7:76:
                    a3:72:72:03:dd:30:cb:0d:6f:5b:4c:32:fc:4c:b6:
                    0c:bb:a9:93:9e:37:09:db:64:de:5f:e4:2a:59:8a:
                    90:10:d6:e1:fa:4a:2b:54:d2:5c:7c:3f:ec:af:6a:
                    ce:64:b7:92:87:13:a9:96:d1:b2:48:8c:b6:a6:d8:
                    d1:e1:d7:8e:a0:ca:11:b2:9c:9d:36:12:1e:5e:21:
                    da:62:be:40:d5:72:df:70:5f:23:5f:93:0a:bb:7a:
                    11:a9:36:ab:d4:4a:d8:02:0b:f6:7b:be:c0:fe:eb:
                    05:3f:0e:da:d7:3b:fb:dd:90:18:65:8a:9b:18:c5:
                    55:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:EC:C0:F7:07:77:BD:14:3C:A4:E9:11:D7:F3:CB:3B:FA:E8:45
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/p9rswPcHd70UPKTpEdfzyzv66EU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:76:4c:a1:74:0c:dc:98:c4:6b:c1:78:49:99:aa:a1:7e:
         42:d2:47:3b:f8:b1:c0:c6:f8:8d:92:32:68:cf:63:c2:2d:d9:
         07:d5:c0:81:54:f9:02:a5:46:eb:b4:b9:1b:3d:6b:26:80:a2:
         15:f5:c8:3e:2c:f9:ca:76:27:2d:86:ee:e6:bb:39:53:0a:51:
         9c:8d:24:59:0f:7a:c9:4b:dd:b2:14:32:7d:33:dc:6c:db:49:
         cf:e1:af:39:81:3c:2d:44:4c:76:64:b8:1d:d3:13:b9:00:00:
         7a:62:3e:63:6b:e5:c0:89:57:5d:11:3d:1a:51:f1:c6:16:bf:
         0a:57:5e:86:e3:1b:83:69:d4:b9:01:ee:7f:a2:ba:41:da:8e:
         f4:4e:96:4b:bf:d2:43:0a:b8:6b:9c:a3:62:63:b0:d7:a5:98:
         4f:40:e8:2b:01:70:1f:85:c4:47:0d:34:27:c6:7f:83:ed:d5:
         a7:2b:d1:81:72:8f:ca:29:36:17:ec:4d:d5:85:59:c7:42:e7:
         68:11:52:91:5c:86:13:3e:5f:74:6a:8b:fd:1b:3d:1f:fa:06:
         e2:ef:7a:04:4a:a5:eb:6b:93:c2:6a:6f:2e:1e:2f:da:d9:5d:
         f4:d4:bd:7f:65:68:f9:c4:31:5c:28:8b:dc:ae:5f:95:f8:36:
         58:24:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org