Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/775315-8f7c-4959-bb62-11e4ce931529/1/pUa-21pQK_Yeb-bAJJxQUldmWVc.roa
File:                     pUa-21pQK_Yeb-bAJJxQUldmWVc.roa (raw, json)
Hash identifier:          05rSEEIMS7m+Ht5o9/nUdFRof0XZZTRIARXr8Qx9iB4=
Subject key identifier:   A5:46:BE:DB:5A:50:2B:F6:1E:6F:E6:C0:24:9C:50:52:57:66:59:57
Certificate issuer:       /CN=0f137ae73676a5d6d5496b6218b33eb32cff64c6
Certificate serial:       F923
Authority key identifier: 0F:13:7A:E7:36:76:A5:D6:D5:49:6B:62:18:B3:3E:B3:2C:FF:64:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DxN65zZ2pdbVSWtiGLM-syz_ZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/775315-8f7c-4959-bb62-11e4ce931529/1/pUa-21pQK_Yeb-bAJJxQUldmWVc.roa
Signing time:             Tue 24 May 2022 16:15:14 +0000
ROA not before:           Tue 24 May 2022 16:15:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     394474
IP address blocks:        212.6.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63779 (0xf923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f137ae73676a5d6d5496b6218b33eb32cff64c6
        Validity
            Not Before: May 24 16:15:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a546bedb5a502bf61e6fe6c0249c505257665957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:e7:ff:72:e3:4e:0e:d6:f7:f5:3e:16:cd:
                    69:7e:d4:ae:d0:4d:9f:40:d2:5f:f2:89:62:1a:1a:
                    f6:51:8d:6f:60:64:ff:dc:40:e7:2e:78:77:83:e3:
                    27:53:9b:eb:b0:0a:c5:5d:f0:85:d1:b2:a6:03:3c:
                    59:04:f4:95:38:99:ff:9a:16:4b:2f:26:1b:d8:5b:
                    6f:ee:a6:a1:51:ce:80:21:98:ea:41:c8:97:7f:1b:
                    7d:03:72:d7:1d:20:e5:85:85:72:48:54:c2:1d:23:
                    1c:c8:37:f3:29:4e:e7:64:bf:f2:4e:5b:c2:6f:3f:
                    4c:b1:2f:11:43:77:87:a6:92:ae:56:3c:7c:6f:a3:
                    50:a2:22:a4:56:de:99:3a:84:b2:d6:12:cf:c9:08:
                    a9:c0:6d:dd:30:8b:ce:49:40:5b:ba:56:9b:14:ed:
                    6b:94:00:5a:28:5d:c1:26:c5:fa:b3:1e:ed:a4:ab:
                    e6:13:b2:4b:0b:aa:ba:b1:b2:cc:b5:23:fa:26:dc:
                    19:41:d1:f2:76:13:23:2a:e5:b6:6e:89:e3:d3:6c:
                    be:e4:73:61:f9:e2:3c:cd:10:30:53:4e:4f:a1:65:
                    99:cc:ed:9b:7c:f4:36:3f:bd:7b:c9:39:db:51:32:
                    37:8c:81:59:83:63:90:69:3d:0f:85:d5:17:f2:4d:
                    2f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:46:BE:DB:5A:50:2B:F6:1E:6F:E6:C0:24:9C:50:52:57:66:59:57
            X509v3 Authority Key Identifier:
                keyid:0F:13:7A:E7:36:76:A5:D6:D5:49:6B:62:18:B3:3E:B3:2C:FF:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxN65zZ2pdbVSWtiGLM-syz_ZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/775315-8f7c-4959-bb62-11e4ce931529/1/pUa-21pQK_Yeb-bAJJxQUldmWVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/775315-8f7c-4959-bb62-11e4ce931529/1/DxN65zZ2pdbVSWtiGLM-syz_ZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c0:e1:3c:f7:93:09:70:46:1f:38:50:e7:8e:41:c3:13:78:
         df:e9:1f:1b:8b:e3:44:16:7c:3d:83:6c:47:a3:f7:d7:4e:0a:
         91:c0:4e:7c:1d:45:8a:10:54:99:bd:d5:fd:48:96:86:67:8d:
         b1:50:d1:7e:72:7a:21:a7:58:3e:11:7d:47:12:23:38:1c:87:
         61:05:cb:a6:a1:e8:71:42:01:4b:ca:cc:f9:71:8a:26:92:49:
         72:b5:da:e5:88:c1:40:54:86:69:09:a6:67:f6:ef:dd:e4:ad:
         65:c2:12:77:9c:82:a6:2e:4c:b3:19:e4:4e:a7:08:a4:38:88:
         43:f3:b3:ef:af:f9:74:19:bf:95:49:87:95:68:44:ab:c5:3b:
         71:97:65:f9:08:c4:a2:51:a5:f7:69:15:8c:1d:80:25:be:df:
         71:08:0d:20:e2:e4:66:c0:fd:a0:e7:31:69:d9:56:f8:73:6c:
         93:03:85:e7:2f:ca:49:3c:a4:d7:94:95:1e:43:74:d8:f5:74:
         1e:ff:af:3c:31:00:ff:f5:d8:60:77:b4:1e:50:5d:5d:a9:3e:
         ab:b5:cf:6d:93:f6:3f:8c:d1:32:7d:81:91:fd:fe:d1:c0:07:
         18:3b:4e:f2:bb:4d:9f:b2:2c:e9:21:a7:e7:2d:d4:47:7b:e7:
         a8:86:92:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:53 2023 by rpki-client on console-ams.rpki-client.org