Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/4s1E4RaaMtjpS0WxRK5Zo94iZiU.roa
File:                     4s1E4RaaMtjpS0WxRK5Zo94iZiU.roa (raw, json)
Hash identifier:          JBvRpC/hOFPS8lD0IB3RQaN2TU+2z/uHTn78sbB4sP4=
Subject key identifier:   E2:CD:44:E1:16:9A:32:D8:E9:4B:45:B1:44:AE:59:A3:DE:22:66:25
Certificate issuer:       /CN=6c00666b0da157c9334f4103659d2dbbf5335783
Certificate serial:       092FDEBA
Authority key identifier: 6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/4s1E4RaaMtjpS0WxRK5Zo94iZiU.roa
Signing time:             Sat 01 Jan 2022 01:01:51 +0000
ROA not before:           Sat 01 Jan 2022 01:01:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34643
IP address blocks:        5.253.183.0/24 maxlen: 24
                          5.253.180.0/22 maxlen: 24
                          5.253.181.0/24 maxlen: 24
                          5.253.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154132154 (0x92fdeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c00666b0da157c9334f4103659d2dbbf5335783
        Validity
            Not Before: Jan  1 01:01:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2cd44e1169a32d8e94b45b144ae59a3de226625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:a2:35:ba:f0:a2:a4:0b:73:0d:97:7f:00:
                    22:92:89:2c:84:5c:ff:0f:83:e6:5d:67:42:31:7a:
                    17:18:87:a5:4e:dd:c0:bf:3d:1e:fe:be:96:c4:1b:
                    b9:fe:26:fa:1f:5d:76:06:ed:50:46:b9:74:e3:85:
                    e0:1c:85:60:f2:7d:ee:3a:2e:32:0e:0e:21:7d:b8:
                    41:7d:27:a5:14:99:fa:77:a5:2f:c8:6e:72:26:83:
                    e8:0a:05:94:04:53:c6:65:d0:9d:4a:ae:60:1d:33:
                    6d:bc:31:c3:9f:02:75:6c:2d:f3:80:93:94:a8:72:
                    4b:1c:db:75:6d:0c:33:f0:84:7c:53:75:ea:14:3a:
                    1f:d0:b4:86:d0:f2:31:9e:26:e9:f3:e3:73:8c:8b:
                    b1:b5:d4:52:8a:29:31:7a:53:63:6f:f5:0a:3a:e1:
                    6f:6a:eb:c3:aa:16:54:1d:95:7a:9c:b9:87:13:6e:
                    45:62:c9:74:78:45:1d:cd:aa:8b:8e:68:a9:52:2f:
                    ec:c0:87:30:cb:96:ff:4a:47:fa:b3:43:67:93:d8:
                    b5:bd:c1:b8:21:2a:5e:15:ff:31:92:07:29:cc:ce:
                    c7:d4:ba:c1:59:30:ec:7f:fa:58:88:f3:eb:cc:46:
                    17:ac:7c:a0:ea:71:27:cb:0d:df:68:1d:77:e4:5c:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:44:E1:16:9A:32:D8:E9:4B:45:B1:44:AE:59:A3:DE:22:66:25
            X509v3 Authority Key Identifier:
                keyid:6C:00:66:6B:0D:A1:57:C9:33:4F:41:03:65:9D:2D:BB:F5:33:57:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bABmaw2hV8kzT0EDZZ0tu_UzV4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/4s1E4RaaMtjpS0WxRK5Zo94iZiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6f2026-1c6e-4e78-9fbe-b09cd784b7f8/1/bABmaw2hV8kzT0EDZZ0tu_UzV4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:fb:df:ce:5f:eb:50:9a:18:fc:ba:0e:c2:64:11:ce:4d:49:
         c8:98:a6:f5:30:48:3a:dd:8d:ce:b0:be:e1:01:f9:02:b8:b7:
         f9:80:31:ab:e6:ba:03:02:c5:51:26:b6:e8:69:32:c2:ab:6d:
         5a:3f:39:97:98:ce:5f:47:44:5e:fd:78:c7:8f:fa:a2:1f:cf:
         70:10:41:02:bb:01:3e:49:c1:ad:92:f8:84:7f:d3:7b:47:b3:
         cd:27:86:9d:4c:d4:7b:e1:d3:9f:39:1e:40:35:48:37:ad:96:
         b6:c8:d4:f9:45:da:70:70:3f:f3:45:de:e6:82:61:a3:ce:5a:
         86:38:eb:af:9e:8e:f9:42:c7:a5:3f:e3:b7:37:9a:f6:9c:26:
         b6:6f:9a:61:d0:08:8e:b3:7b:7a:50:b5:eb:ef:d0:0b:84:74:
         9d:b5:7f:55:cb:5d:54:d7:12:49:17:f7:97:58:05:52:fd:1a:
         77:92:37:e7:7b:18:cb:1a:f7:20:33:1f:c4:e4:d4:e1:37:3a:
         5f:42:59:0f:c2:0d:c8:d4:b7:da:01:2a:c6:bd:99:89:a4:23:
         5e:49:37:e8:58:90:b9:18:e0:32:6a:61:cb:67:d0:de:0c:b0:
         69:53:01:9d:42:86:a2:ac:cf:5a:47:e2:b9:df:47:eb:6e:92:
         c9:c2:01:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:11 2023 by rpki-client on console.sobornost.net