Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/GoG6dh32rvbhZr5FhbRZqsV3Ijw.roa
File:                     GoG6dh32rvbhZr5FhbRZqsV3Ijw.roa (raw, json)
Hash identifier:          OL4GGmIQQrdYNgQHK3auG+Y7befAeRLqQSSuCvdosGc=
Subject key identifier:   1A:81:BA:76:1D:F6:AE:F6:E1:66:BE:45:85:B4:59:AA:C5:77:22:3C
Certificate issuer:       /CN=337288fcd0020a29c5b3be199d55f0a280c36d09
Certificate serial:       04A2764B
Authority key identifier: 33:72:88:FC:D0:02:0A:29:C5:B3:BE:19:9D:55:F0:A2:80:C3:6D:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M3KI_NACCinFs74ZnVXwooDDbQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/GoG6dh32rvbhZr5FhbRZqsV3Ijw.roa
Signing time:             Sat 01 Jan 2022 10:57:56 +0000
ROA not before:           Sat 01 Jan 2022 10:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31400
IP address blocks:        45.91.101.0/24 maxlen: 24
                          45.91.100.0/24 maxlen: 24
                          45.91.100.0/22 maxlen: 22
                          45.91.103.0/24 maxlen: 24
                          45.91.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77755979 (0x4a2764b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337288fcd0020a29c5b3be199d55f0a280c36d09
        Validity
            Not Before: Jan  1 10:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a81ba761df6aef6e166be4585b459aac577223c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:ca:71:8e:4d:b5:5c:d3:cb:35:70:a2:97:
                    c9:d2:33:e2:4f:37:4a:49:28:19:58:2b:09:8f:7a:
                    0c:35:36:1d:cc:62:ca:66:40:3a:a5:1d:58:05:78:
                    79:28:fa:12:86:94:86:b2:58:a7:b6:b5:c5:38:44:
                    9a:5f:0f:5e:56:07:9d:c2:e8:40:33:ec:3a:4d:d6:
                    cf:0e:3b:aa:e3:3f:8c:57:41:b1:94:08:ed:a1:92:
                    07:eb:f0:76:cf:f7:ef:50:6c:13:cf:a3:3d:cf:a3:
                    c9:f8:c4:d1:8b:c4:e1:1e:d9:e3:b6:fa:51:71:45:
                    e9:a8:91:fd:54:d5:67:bc:1e:52:a1:b0:9b:39:dd:
                    5c:50:15:b9:e2:f2:c8:f1:d5:d0:e4:f1:aa:48:6c:
                    fa:09:59:c0:28:16:5a:7d:4e:21:5d:0c:53:99:19:
                    1d:0d:2f:68:08:60:82:ab:cc:a0:a4:d1:9c:50:26:
                    aa:d7:ea:3c:1e:17:cd:b1:0c:78:39:e6:a8:8d:64:
                    30:67:5f:f7:5e:7f:be:2a:0a:87:6c:b1:7a:dd:05:
                    65:83:90:0b:7a:35:17:ee:33:da:b7:4c:cb:b0:8e:
                    34:d2:84:8b:10:e3:e1:0a:29:95:9c:b0:a2:70:60:
                    49:97:4b:53:53:ad:f1:a3:07:b0:0e:b2:a2:31:99:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:BA:76:1D:F6:AE:F6:E1:66:BE:45:85:B4:59:AA:C5:77:22:3C
            X509v3 Authority Key Identifier:
                keyid:33:72:88:FC:D0:02:0A:29:C5:B3:BE:19:9D:55:F0:A2:80:C3:6D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3KI_NACCinFs74ZnVXwooDDbQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/GoG6dh32rvbhZr5FhbRZqsV3Ijw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bb0a7d-827b-441d-9563-15c2bdc2465f/1/M3KI_NACCinFs74ZnVXwooDDbQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:92:7a:54:7d:ce:30:c4:28:31:64:82:a8:ad:39:31:a2:
         10:ad:ca:0a:ca:27:43:79:8f:f8:1d:0d:0b:a7:0e:76:fa:f4:
         eb:5e:7d:d4:be:34:b3:33:af:e1:92:8d:82:68:7f:35:7d:a0:
         e9:18:cf:15:d1:e5:8a:b0:a0:cb:89:36:77:84:5c:44:23:29:
         f2:6f:52:0d:a5:69:69:c7:95:3f:f1:33:6d:8a:c8:61:7e:fa:
         1a:da:80:43:b8:f0:92:c0:84:5b:3c:aa:92:fb:a6:b5:aa:76:
         e9:95:5a:f1:16:88:c5:7e:17:d4:31:62:d1:95:90:28:e0:1b:
         b7:58:30:37:05:ee:15:08:79:04:e8:24:bb:2e:8f:fe:36:a4:
         9a:96:f5:4b:d2:43:8f:dd:db:00:90:52:eb:e7:8f:2a:2a:7c:
         18:db:7d:29:ed:98:d9:21:f0:b3:db:f1:da:50:a7:1d:26:94:
         4a:74:bd:8e:71:c8:d0:2b:6a:34:b9:2c:15:a5:d5:69:1e:e6:
         4b:cd:68:ef:0a:bd:62:92:cb:cf:37:bc:a8:60:ef:0a:97:ff:
         4d:11:30:39:4b:75:f7:2d:71:c0:13:97:35:12:81:63:88:29:
         2b:73:bc:0e:dc:10:c1:48:81:e1:64:b7:e4:19:3a:76:81:7c:
         8e:d4:63:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net