Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/WhosMnuxXeZqAxEdKVmMJx0-2YU.roa
File:                     WhosMnuxXeZqAxEdKVmMJx0-2YU.roa (raw, json)
Hash identifier:          qxMkcEB/l4tWgjTrQ/eWSWYA95LOhnPVpGVv/RIMa+A=
Subject key identifier:   5A:1A:2C:32:7B:B1:5D:E6:6A:03:11:1D:29:59:8C:27:1D:3E:D9:85
Certificate issuer:       /CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
Certificate serial:       018571552E8D4E03FCD7F2F0B165D35265F3
Authority key identifier: 12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/WhosMnuxXeZqAxEdKVmMJx0-2YU.roa
Signing time:             Mon 02 Jan 2023 07:14:45 +0000
ROA not before:           Mon 02 Jan 2023 07:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400039
IP address blocks:        188.93.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:2e:8d:4e:03:fc:d7:f2:f0:b1:65:d3:52:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
        Validity
            Not Before: Jan  2 07:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a1a2c327bb15de66a03111d29598c271d3ed985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:f0:48:2c:b5:5d:06:0e:fa:e9:d8:fa:31:
                    ab:c0:2e:f8:ad:f3:c2:b0:38:9e:63:5f:75:fc:c1:
                    95:95:4c:77:f0:43:ef:5e:fa:28:10:27:97:35:54:
                    bb:b6:ee:68:4c:bb:a1:c8:89:03:e1:73:22:8c:d0:
                    31:e1:88:92:22:49:e6:ce:55:74:b0:6d:20:6f:a4:
                    96:14:22:34:d2:06:74:e6:3b:45:56:28:86:bc:dc:
                    ce:88:f8:dc:8b:c0:96:24:27:2f:bd:35:fe:7e:8a:
                    97:48:96:d2:da:c3:3f:52:3e:52:8d:ae:e4:57:8b:
                    53:c6:b4:95:8b:19:67:fd:7d:96:7a:92:6e:f0:a1:
                    6a:d6:63:c6:e6:dc:a6:e9:76:ed:48:cf:85:c8:6d:
                    ac:65:33:49:0f:bf:b8:87:05:d9:f6:9a:81:9e:cb:
                    14:f6:c4:85:65:a4:65:92:ae:4b:c9:e8:be:e5:9f:
                    e2:64:b8:28:09:cf:23:86:38:f7:d6:e7:82:a4:4d:
                    b4:33:3c:6a:c0:a4:21:9d:20:b2:57:b2:04:ee:c7:
                    6d:99:15:0f:51:33:38:7e:06:4a:15:ec:9e:ee:18:
                    0a:e6:22:c1:28:ac:1b:8b:15:5f:9d:12:e4:1c:77:
                    2d:99:51:da:22:09:29:12:be:30:d2:85:70:4d:13:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:2C:32:7B:B1:5D:E6:6A:03:11:1D:29:59:8C:27:1D:3E:D9:85
            X509v3 Authority Key Identifier:
                keyid:12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/WhosMnuxXeZqAxEdKVmMJx0-2YU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:3c:2d:f2:32:a2:6c:89:dc:27:18:8f:b1:a7:d9:93:50:
         fb:f1:cc:af:03:9d:1f:32:45:28:2c:98:61:a0:83:77:89:44:
         b3:f6:43:9a:ca:4a:40:06:72:5a:42:04:bb:b4:1b:96:38:2a:
         21:ea:fd:d8:87:c6:24:d1:d1:7a:df:95:31:69:c5:55:99:25:
         5e:c0:70:d4:57:dc:c2:11:ce:35:b7:89:e9:15:9d:73:80:f8:
         7c:78:f9:b3:87:14:58:7d:ba:72:30:14:06:75:02:33:f4:b3:
         7c:d1:1e:bd:67:09:9f:ce:fa:13:5e:2e:06:56:e8:bb:0d:34:
         00:56:f4:06:ce:11:b4:a7:a3:f1:89:48:30:f8:4a:23:bd:21:
         6f:e5:ef:e1:1b:39:33:4e:81:74:06:a4:ef:40:98:f6:10:04:
         ed:11:e2:39:9a:1c:6e:72:f1:3b:aa:ef:a3:f8:f3:3a:9f:b7:
         ce:b1:ef:72:bf:11:a2:f5:e5:9c:ab:bf:1b:41:b7:e0:e7:e3:
         12:ca:65:d5:ac:b3:d3:3a:a5:00:70:cb:a4:92:d3:40:d6:55:
         ae:c0:67:af:a7:a9:44:37:7a:03:c5:95:46:8a:6e:40:4f:8d:
         a2:f3:cc:aa:ac:f0:f1:14:dd:b9:fd:1a:06:fa:55:2d:61:94:
         a5:af:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:20 2023 by rpki-client on console-ams.rpki-client.org