Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/WhzhPBS2Qpe7GfEN9HmOaXSwIsk.roa
File:                     WhzhPBS2Qpe7GfEN9HmOaXSwIsk.roa (raw, json)
Hash identifier:          bo+D3pbv/LzmkxKzp+tlH3yGWSCUQE052frGDrohPqU=
Subject key identifier:   5A:1C:E1:3C:14:B6:42:97:BB:19:F1:0D:F4:79:8E:69:74:B0:22:C9
Certificate issuer:       /CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Certificate serial:       035EBBFB
Authority key identifier: EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/WhzhPBS2Qpe7GfEN9HmOaXSwIsk.roa
Signing time:             Sat 01 Jan 2022 15:01:44 +0000
ROA not before:           Sat 01 Jan 2022 15:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62375
IP address blocks:        45.139.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56540155 (0x35ebbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
        Validity
            Not Before: Jan  1 15:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a1ce13c14b64297bb19f10df4798e6974b022c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:1b:a9:51:80:cf:79:47:25:4a:81:81:fa:
                    86:49:58:89:a9:d1:a9:26:8d:42:6e:c9:84:10:83:
                    1a:84:1c:34:cb:88:66:a3:72:34:78:9a:b3:11:3d:
                    89:30:d2:ac:66:5c:10:f1:23:f1:da:53:5f:24:b6:
                    6d:7e:74:5a:34:63:8e:98:25:fa:0d:7e:2d:d4:e3:
                    42:5d:ee:d5:58:fe:28:00:8b:29:a0:dc:c7:75:49:
                    f2:db:30:10:9c:0f:de:95:1e:31:17:85:1a:cd:54:
                    6e:8b:51:c2:78:a5:51:fb:d3:0b:9e:43:73:f2:9b:
                    0c:3d:17:40:a3:6b:2f:38:53:d7:c9:79:d7:39:10:
                    89:79:91:ef:53:02:8c:1c:89:3a:cd:91:bb:8a:1f:
                    f2:39:0f:20:cb:ac:32:c7:f2:76:ec:d8:0f:a3:e8:
                    8c:a1:6e:cd:c6:40:bb:9a:61:69:9a:be:60:0b:5f:
                    f0:84:93:60:43:b9:0f:b0:4b:f5:a1:3d:ce:5e:35:
                    84:34:bb:1d:87:5d:81:f4:cc:a4:a2:0c:b9:c7:d4:
                    1c:8a:f3:26:1b:d1:98:3c:07:ff:5f:2b:15:d1:0d:
                    de:44:be:da:7e:12:8d:54:22:04:21:6a:32:c1:97:
                    80:14:61:89:5b:39:43:65:e8:e8:57:99:f2:fb:fd:
                    f0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1C:E1:3C:14:B6:42:97:BB:19:F1:0D:F4:79:8E:69:74:B0:22:C9
            X509v3 Authority Key Identifier:
                keyid:EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/WhzhPBS2Qpe7GfEN9HmOaXSwIsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:14:48:a4:ed:7b:7e:0d:50:3d:5f:a0:06:f9:4b:1d:dd:
         55:f3:77:a8:98:b5:9b:fb:9a:82:3b:9a:cb:42:e9:52:e6:cb:
         e0:f6:0a:a7:85:54:ed:6f:e8:0b:16:9c:25:ae:25:de:51:57:
         08:99:1d:f6:14:62:07:98:dc:78:d8:72:b8:a4:90:c8:8c:f3:
         c6:4d:38:03:0b:2c:d9:d7:fb:09:aa:96:1e:cc:64:fe:52:01:
         2d:27:ba:09:8b:8c:76:e7:ea:3c:1d:66:38:23:e7:6e:73:08:
         06:aa:33:76:0a:5c:03:04:ef:9a:58:c9:7e:30:5c:ce:eb:32:
         95:31:27:4e:29:7c:bd:54:0d:1b:92:e8:d3:76:bc:14:7c:41:
         97:23:51:2e:11:e7:00:26:7b:d5:43:5c:16:70:b2:b8:36:56:
         81:92:71:d5:5e:60:0a:87:2a:c5:51:4d:30:6f:68:25:d6:c8:
         21:6b:63:f6:c3:03:0a:41:17:ab:e7:07:cb:9e:c2:22:05:0a:
         99:88:aa:c9:97:da:50:e3:cd:5c:af:e2:33:21:dd:e7:d5:7a:
         95:de:c3:75:a8:72:ac:e1:eb:b6:40:ab:a0:ba:0b:e4:4e:1d:
         ed:9b:de:66:07:bc:2e:14:c2:85:8f:26:31:e0:e6:60:f1:80:
         e1:e3:d2:c1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA167+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTg3YTgxNWRmNzVmMmFkN2QyMmUwYmViZjc2ZjM4YzQ5YjNmZmM1MB4XDTIyMDEw
MTE1MDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWExY2UxM2MxNGI2
NDI5N2JiMTlmMTBkZjQ3OThlNjk3NGIwMjJjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZBG6lRgM95RyVKgYH6hklYianRqSaNQm7JhBCDGoQcNMuI
ZqNyNHiasxE9iTDSrGZcEPEj8dpTXyS2bX50WjRjjpgl+g1+LdTjQl3u1Vj+KACL
KaDcx3VJ8tswEJwP3pUeMReFGs1UbotRwnilUfvTC55Dc/KbDD0XQKNrLzhT18l5
1zkQiXmR71MCjByJOs2Ru4of8jkPIMusMsfyduzYD6PojKFuzcZAu5phaZq+YAtf
8ISTYEO5D7BL9aE9zl41hDS7HYddgfTMpKIMucfUHIrzJhvRmDwH/18rFdEN3kS+
2n4SjVQiBCFqMsGXgBRhiVs5Q2Xo6FeZ8vv98OMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRaHOE8FLZCl7sZ8Q30eY5pdLAiyTAfBgNVHSMEGDAWgBTuh6gV33XyrX0i
4L6/dvOMSbP/xTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdvZW9GZDkxOHExOUl1Qy12M2J6akVtel84VS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvMmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8x
L1doemhQQlMyUXBlN0dmRU45SG1PYVhTd0lzay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
MmRiYTUxLWVhZDUtNDI4Mi1hYmIwLWQwNjJiMTk5YWFlZi8xLzdvZW9GZDkxOHEx
OUl1Qy12M2J6akVtel84VS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2LZjANBgkqhkiG9w0BAQsFAAOC
AQEAZ/wUSKTte34NUD1foAb5Sx3dVfN3qJi1m/uagjuay0LpUubL4PYKp4VU7W/o
CxacJa4l3lFXCJkd9hRiB5jceNhyuKSQyIzzxk04Awss2df7CaqWHsxk/lIBLSe6
CYuMdufqPB1mOCPnbnMIBqozdgpcAwTvmljJfjBczusylTEnTil8vVQNG5Lo03a8
FHxBlyNRLhHnACZ71UNcFnCyuDZWgZJx1V5gCocqxVFNMG9oJdbIIWtj9sMDCkEX
q+cHy57CIgUKmYiqyZfaUOPNXK/iMyHd59V6ld7DdahyrOHrtkCroLoL5E4d7Zve
Zge8LhTChY8mMeDmYPGA4ePSwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:00 2024 by rpki-client on console-fra.rpki-client.org