Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/ArThSGyPOoCrMIYgvFyMxxhQO9I.roa
File:                     ArThSGyPOoCrMIYgvFyMxxhQO9I.roa (raw, json)
Hash identifier:          7Sm2Q+QGtZWv4Wp34vMC+9zFKxMaaxhn2/ULAxUIxYo=
Subject key identifier:   02:B4:E1:48:6C:8F:3A:80:AB:30:86:20:BC:5C:8C:C7:18:50:3B:D2
Certificate issuer:       /CN=a0ba80b0c82149955a753443844041808445ddaf
Certificate serial:       07D24498
Authority key identifier: A0:BA:80:B0:C8:21:49:95:5A:75:34:43:84:40:41:80:84:45:DD:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLqAsMghSZVadTRDhEBBgIRF3a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/ArThSGyPOoCrMIYgvFyMxxhQO9I.roa
Signing time:             Sat 01 Jan 2022 09:53:58 +0000
ROA not before:           Sat 01 Jan 2022 09:53:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57335
IP address blocks:        45.130.232.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131220632 (0x7d24498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ba80b0c82149955a753443844041808445ddaf
        Validity
            Not Before: Jan  1 09:53:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02b4e1486c8f3a80ab308620bc5c8cc718503bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:c4:1f:d6:1f:d5:51:37:7d:13:d2:ec:a2:
                    07:91:b0:fb:ef:91:a5:f9:7d:8c:e8:5c:9b:bb:d3:
                    b5:08:e5:58:1a:5f:fa:5c:fd:bf:40:7e:34:f2:b5:
                    b9:f6:49:d1:f4:9d:b8:98:65:0e:4d:15:91:3c:c3:
                    c8:cf:ce:c3:e8:93:4b:c1:d0:df:d8:47:be:d8:25:
                    71:ed:2a:d9:7c:f9:1c:3a:65:d1:0a:7b:64:5e:3b:
                    1b:bd:9c:61:8c:c3:84:19:e0:60:4f:c7:2f:0e:ef:
                    0c:ea:c0:99:4c:ed:7d:cf:ce:92:d4:36:a1:22:26:
                    9c:20:1b:62:3c:4d:c9:93:c7:10:72:cd:59:5b:53:
                    de:8a:a1:32:22:d4:89:bc:3e:0e:51:20:9e:dd:86:
                    fe:57:45:21:45:52:8c:2d:b6:20:7e:02:b2:7b:46:
                    b8:51:96:50:87:48:77:ac:ec:23:50:94:67:59:1b:
                    36:d3:7f:c0:76:f7:66:e1:e7:3b:a4:e4:aa:6b:02:
                    6d:8a:24:ce:ea:53:f3:12:3f:1e:d6:19:ad:0a:c6:
                    3a:08:de:0a:31:e3:19:0c:d5:fd:0b:6d:19:59:75:
                    68:c0:3d:cd:12:f9:b0:c0:34:0d:1a:2a:7f:c0:2d:
                    b6:83:4c:f8:4e:b1:8a:df:53:e3:03:7a:34:72:18:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:E1:48:6C:8F:3A:80:AB:30:86:20:BC:5C:8C:C7:18:50:3B:D2
            X509v3 Authority Key Identifier:
                keyid:A0:BA:80:B0:C8:21:49:95:5A:75:34:43:84:40:41:80:84:45:DD:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqAsMghSZVadTRDhEBBgIRF3a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/ArThSGyPOoCrMIYgvFyMxxhQO9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/aa164f-e5ad-4237-9bb9-0e57bd92b798/1/oLqAsMghSZVadTRDhEBBgIRF3a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:01:9f:3d:e2:17:b7:d7:f7:6a:60:d2:c8:40:4e:d0:ff:
         a3:90:2a:e4:22:00:7d:98:6b:74:1b:72:6c:b8:d5:92:11:24:
         11:40:99:f6:27:e5:78:ac:87:75:c5:03:5d:6a:0b:55:9b:ee:
         1d:d6:47:f4:04:d3:06:c0:41:de:e8:d1:de:1e:6c:56:07:71:
         28:27:9a:66:f5:2a:3c:19:0e:b9:2c:8a:76:28:7f:fd:eb:f2:
         2c:57:91:3b:bc:7a:c7:ec:28:70:d9:b9:a2:76:2b:a3:f1:2a:
         1f:27:b6:b4:e2:45:1a:44:2d:f4:13:8f:33:9d:5e:cc:70:ce:
         a4:a0:44:b0:99:47:c9:fc:b7:3c:f3:5a:f5:ce:10:67:1b:29:
         c6:34:8b:9b:f3:e5:5f:4b:c4:9e:45:42:79:4b:f2:51:90:0c:
         f7:e8:88:cd:31:ad:5e:f6:d5:1e:a2:7b:ba:99:f6:1b:88:b2:
         4d:3e:99:62:28:50:14:fd:9c:bf:a5:4c:2e:4a:c8:e8:50:99:
         9d:69:de:37:55:eb:4f:47:0a:ab:20:6d:4d:75:8b:f1:c0:a5:
         d8:97:77:de:ae:e1:b9:7e:08:d6:04:c2:63:f4:0a:fc:9f:a5:
         57:49:e5:53:ba:94:27:5b:35:6d:47:d2:3e:88:e5:a3:c5:97:
         8c:22:9a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:15 2024 by rpki-client on console-ams.rpki-client.org