Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/IwVMe5_w9zjGTfvUuC6aqrgXbZs.roa
File:                     IwVMe5_w9zjGTfvUuC6aqrgXbZs.roa (raw, json)
Hash identifier:          BOe11LVKfnP+z7Mzvi3P06G+9ohoBLK5n/An45+PoUA=
Subject key identifier:   23:05:4C:7B:9F:F0:F7:38:C6:4D:FB:D4:B8:2E:9A:AA:B8:17:6D:9B
Certificate issuer:       /CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
Certificate serial:       018970002BC770E2ADECB1484EDE1CC24D0C
Authority key identifier: 25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/IwVMe5_w9zjGTfvUuC6aqrgXbZs.roa
Signing time:             Wed 19 Jul 2023 21:13:26 +0000
ROA not before:           Wed 19 Jul 2023 21:13:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        212.52.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:70:00:2b:c7:70:e2:ad:ec:b1:48:4e:de:1c:c2:4d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25383d35b9e6abb305ff578f0b8828e8a500eacc
        Validity
            Not Before: Jul 19 21:13:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=23054c7b9ff0f738c64dfbd4b82e9aaab8176d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4a:b7:c5:5a:3a:66:5a:f1:e8:7b:55:fc:ac:
                    3a:71:d8:d5:e9:78:d3:6f:82:e1:0a:c6:21:4e:ff:
                    9f:8b:99:47:b6:82:28:ee:2d:13:61:1a:8d:da:33:
                    aa:ff:e2:00:7d:af:41:9a:b5:78:18:b8:f1:3b:47:
                    7a:a3:58:71:12:58:7b:c9:7e:c5:e0:5b:4e:89:2f:
                    f3:f1:79:00:d0:08:3c:b8:53:3a:0c:a9:b7:d3:59:
                    39:45:a2:f9:53:e2:79:4d:56:a8:0e:45:b8:77:2f:
                    ca:35:dd:6d:d2:fc:c2:3a:be:0b:42:49:83:8d:6b:
                    de:03:93:0a:d3:c2:63:a0:ff:59:39:4f:47:55:28:
                    45:79:10:cc:40:ea:97:c8:e2:5a:91:51:5a:55:89:
                    5c:92:3a:03:68:2d:61:5b:3d:12:55:0e:56:d4:c7:
                    07:4c:cf:7b:8e:9d:e1:0e:af:82:04:22:df:04:74:
                    8c:d3:d1:41:09:fc:05:4d:52:d3:a4:39:3c:50:ec:
                    54:1c:e0:e2:67:93:1a:49:32:4b:82:d9:8e:af:13:
                    12:6d:ff:c8:a0:bd:e0:7c:8a:7a:c6:d9:02:da:92:
                    5a:bd:54:2a:ec:c2:16:33:87:d1:cd:15:8c:dc:d0:
                    91:b0:02:c7:ad:4b:c7:87:d5:14:19:e9:a6:57:7a:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:05:4C:7B:9F:F0:F7:38:C6:4D:FB:D4:B8:2E:9A:AA:B8:17:6D:9B
            X509v3 Authority Key Identifier:
                keyid:25:38:3D:35:B9:E6:AB:B3:05:FF:57:8F:0B:88:28:E8:A5:00:EA:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTg9Nbnmq7MF_1ePC4go6KUA6sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/IwVMe5_w9zjGTfvUuC6aqrgXbZs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/91c1da-3201-4a0e-bcaf-3e2ff5a48062/1/JTg9Nbnmq7MF_1ePC4go6KUA6sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:cf:fa:55:00:d1:44:bb:e1:c0:e0:8b:84:f9:96:d9:08:
         b7:0f:df:9b:bc:0f:d7:65:dc:22:b8:3d:19:3a:0d:8f:5f:b9:
         f4:84:0a:61:d2:6d:be:08:7f:47:7e:99:23:49:f3:70:06:58:
         81:78:67:00:88:06:07:5b:94:c3:60:ef:d2:a4:6f:62:27:07:
         83:2c:ac:dc:18:bb:ca:8b:4e:17:10:6c:ab:a5:8a:ca:a1:f1:
         2e:c8:75:4d:1a:b0:17:95:41:96:0a:c8:17:e4:42:77:d6:ce:
         0d:2b:df:35:62:41:68:d2:a1:8b:09:0e:45:8e:3b:f3:50:1d:
         1b:a7:ed:49:27:42:6f:58:33:e9:af:9c:fd:b3:1b:1f:38:5f:
         a9:97:93:5a:54:26:4e:a5:87:15:da:12:53:54:43:84:42:42:
         1b:00:0d:a0:99:e0:37:91:56:0e:01:76:d3:d8:33:9e:14:58:
         2a:e1:78:71:62:95:0c:95:cb:b3:af:2a:ca:65:41:11:7d:60:
         72:64:c9:a2:a2:36:fe:42:78:91:14:8b:5e:e5:47:60:bd:79:
         04:b0:99:2d:5e:f0:bd:e2:97:67:ef:dc:41:5a:03:cd:62:e1:
         33:42:33:8e:de:93:7c:c2:6f:6b:b6:b5:7a:2a:ae:f8:6f:2e:
         05:96:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net