Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/LWBAjHIGdBxO-ycxBGfgRKOxfWA.roa
File:                     LWBAjHIGdBxO-ycxBGfgRKOxfWA.roa (raw, json)
Hash identifier:          oB7rOwnU5fB4RB+HM5WJBTHgrVw7bzT7BQHoJ/prqUo=
Subject key identifier:   2D:60:40:8C:72:06:74:1C:4E:FB:27:31:04:67:E0:44:A3:B1:7D:60
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       01850A4293EACE8A28C3FF9553AE89D7AEA5
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/LWBAjHIGdBxO-ycxBGfgRKOxfWA.roa
Signing time:             Tue 13 Dec 2022 06:53:33 +0000
ROA not before:           Tue 13 Dec 2022 06:53:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     270014
IP address blocks:        109.122.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0a:42:93:ea:ce:8a:28:c3:ff:95:53:ae:89:d7:ae:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Dec 13 06:53:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d60408c7206741c4efb27310467e044a3b17d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:0e:a8:31:ed:80:c1:62:b4:6b:12:03:ba:
                    d6:f8:d1:74:65:4e:2b:6b:be:21:21:16:81:67:66:
                    4d:f7:96:9d:81:cb:f0:2b:bb:bc:f1:77:d9:f1:c3:
                    d4:03:d2:b6:fc:16:ef:d3:e2:a5:2e:14:18:f8:0b:
                    bf:3d:dc:e3:d8:f8:d8:cd:cd:5f:5e:db:11:f1:8b:
                    d1:d9:ca:88:73:b4:59:0d:d3:a4:df:cb:2b:40:99:
                    d4:60:61:50:d9:47:08:3d:14:84:d5:5b:a6:87:03:
                    62:c6:cf:27:f9:80:47:dc:6a:b6:c4:c9:0e:b4:13:
                    d9:d5:37:f4:3d:54:8a:b5:b6:56:f0:b9:35:e6:da:
                    fd:75:de:1a:df:f9:34:70:5b:b2:71:9a:2c:64:33:
                    59:0d:27:1f:9d:a8:2c:d8:d2:a2:e9:46:bc:c2:a3:
                    ba:2e:0d:99:b5:ee:7b:6d:12:3d:02:e3:08:20:b4:
                    f2:fc:89:aa:f6:0b:54:a0:73:76:55:b3:d8:82:50:
                    01:39:79:fc:3d:e0:cc:a6:b4:ab:10:1e:42:c4:ba:
                    4c:73:8b:7f:f3:f9:60:3c:e1:6c:65:7d:1d:58:70:
                    23:b3:df:d1:c9:7a:66:bf:89:91:c1:30:28:9b:1d:
                    fc:18:ec:58:47:7c:84:6c:eb:d3:e4:3f:b3:71:1c:
                    51:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:40:8C:72:06:74:1C:4E:FB:27:31:04:67:E0:44:A3:B1:7D:60
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/LWBAjHIGdBxO-ycxBGfgRKOxfWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:c6:7b:0e:3f:29:9d:b1:56:ff:73:dd:fa:bf:3e:c8:b6:
         08:29:a2:8c:26:f4:1a:09:62:f1:dd:09:d0:9b:75:9a:71:1a:
         b4:50:be:fb:ff:8e:99:42:c2:ba:e1:76:a0:94:4a:0c:c1:57:
         75:b7:9a:f0:e9:a8:13:b0:eb:6b:6e:7f:67:6c:73:88:8e:75:
         21:2b:6c:96:f4:9c:79:04:ea:81:6b:37:90:10:a1:79:09:5f:
         0e:88:83:63:2a:ef:d6:24:30:80:f0:f8:38:78:28:24:3a:7f:
         88:e3:b4:3b:68:d1:5e:12:07:44:7e:a8:de:8e:67:27:5f:0c:
         6e:dd:b7:66:f1:46:2c:77:a6:e8:d8:27:c8:f6:c5:c6:86:86:
         3f:0d:46:44:5f:5a:a6:74:f2:fc:b3:46:9b:1c:5b:5d:4e:a1:
         c3:80:5c:83:93:97:c2:7f:12:3b:05:b9:25:8c:b4:0f:51:7d:
         9c:f1:62:58:dd:9c:d6:d2:6a:eb:a6:4d:47:50:f5:42:6d:df:
         83:1c:67:52:8a:98:e4:0e:23:01:55:d3:fc:37:14:13:aa:9b:
         35:78:1b:b8:2f:20:6d:28:b8:ad:0e:9f:c7:89:6e:ee:85:72:
         84:b9:50:e4:a5:fc:28:c2:a2:d1:c4:52:89:61:9b:13:57:b0:
         57:96:6c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org