Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/FroGoRlvGvpkGg3zGEurbwWZLpU.roa
File:                     FroGoRlvGvpkGg3zGEurbwWZLpU.roa (raw, json)
Hash identifier:          QcS9PpAIefpqtRg6mEo1jYlP5h2HPYBR6zlJiyiBWWc=
Subject key identifier:   16:BA:06:A1:19:6F:1A:FA:64:1A:0D:F3:18:4B:AB:6F:05:99:2E:95
Certificate issuer:       /CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
Certificate serial:       0181F4557DA4D2FC7B98B3D57D48B137E456
Authority key identifier: A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/FroGoRlvGvpkGg3zGEurbwWZLpU.roa
Signing time:             Tue 12 Jul 2022 21:34:12 +0000
ROA not before:           Tue 12 Jul 2022 21:34:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        212.18.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f4:55:7d:a4:d2:fc:7b:98:b3:d5:7d:48:b1:37:e4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec62f54e5a3b2f4f887baaf252a5f571b85891
        Validity
            Not Before: Jul 12 21:34:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16ba06a1196f1afa641a0df3184bab6f05992e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:26:65:d1:cf:b1:0c:c3:40:47:99:5f:53:
                    71:f7:ff:14:c3:1b:b3:2e:8e:49:6c:45:5a:bc:24:
                    59:fb:54:43:85:93:99:48:29:db:fb:9f:93:c8:24:
                    71:b6:fa:3a:4f:b5:76:74:e8:d3:74:38:57:91:34:
                    a6:ec:16:c6:e5:4a:e8:6f:56:dc:51:1e:81:81:c3:
                    26:32:88:d0:19:96:e7:ef:1b:73:91:d9:b1:e9:d5:
                    d8:6b:1e:94:ce:8c:90:19:89:a3:f6:43:c5:34:95:
                    4e:57:64:a0:3f:c7:09:01:8e:4b:88:b1:22:28:66:
                    fa:c0:bf:d4:82:48:2d:75:67:23:db:46:31:30:63:
                    42:7c:6d:16:e8:85:f9:3d:8f:47:37:5f:3c:e0:2d:
                    13:db:66:58:74:6c:30:91:eb:2d:ca:ed:4e:b3:f7:
                    4b:9a:33:50:86:d3:ea:ba:83:c2:b7:59:17:a9:b5:
                    49:ef:f6:17:d1:09:b9:0e:35:63:09:6d:14:86:7c:
                    40:f8:4f:82:8d:53:8d:bb:d3:dd:ce:99:89:a3:40:
                    83:5c:09:f8:dc:5e:c6:d1:dd:ed:fd:cd:64:86:ff:
                    ff:89:3b:b9:bf:43:ec:45:cd:03:f0:91:b8:e4:79:
                    a0:36:90:fa:cb:13:85:fa:a3:7d:dd:fe:c0:9d:9c:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BA:06:A1:19:6F:1A:FA:64:1A:0D:F3:18:4B:AB:6F:05:99:2E:95
            X509v3 Authority Key Identifier:
                keyid:A5:EC:62:F5:4E:5A:3B:2F:4F:88:7B:AA:F2:52:A5:F5:71:B8:58:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pexi9U5aOy9PiHuq8lKl9XG4WJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/FroGoRlvGvpkGg3zGEurbwWZLpU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a67c97-2428-4583-8086-cd048aa6c179/1/pexi9U5aOy9PiHuq8lKl9XG4WJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:11:a8:1a:f1:d9:99:61:13:0d:3a:c3:bc:0b:2b:04:46:76:
         41:b0:51:26:56:e6:56:bd:86:e1:80:f3:27:b2:fd:c5:67:51:
         97:d5:d4:f3:8d:3c:2f:55:3e:e1:8e:a0:75:9e:68:cc:72:42:
         da:11:d6:5f:0a:d0:73:39:f7:d4:a9:3c:30:1f:66:b9:ec:66:
         f2:30:fa:62:c2:71:3d:bb:4e:07:df:12:9c:c2:87:a7:cb:f5:
         e2:79:ec:fa:e4:c0:66:17:9c:fd:68:84:e4:d3:25:b4:07:da:
         6a:25:f3:d8:cc:a8:19:a8:2e:13:7c:1c:d9:2b:c9:f4:7f:50:
         87:52:54:76:f3:9e:2b:2c:7d:e8:c8:dc:d7:39:19:03:b9:48:
         6f:9c:18:5d:d0:4a:97:60:61:ff:9a:36:ff:71:65:13:45:6d:
         65:46:8c:cc:92:51:2f:54:fc:89:7c:a3:ef:82:3e:3d:7a:3f:
         e0:9f:59:32:af:7f:87:2f:d9:cb:3b:ed:4d:fc:36:c0:cc:64:
         ee:cb:c8:ac:71:00:c4:9b:d7:b4:b9:43:48:a8:e0:20:44:9f:
         b9:12:69:dc:31:4b:3e:cf:23:bf:39:8b:68:44:b5:79:9c:6e:
         17:6d:3b:e7:1e:7b:30:df:36:17:94:06:45:63:93:ef:85:8b:
         5a:89:3d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net