Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uwc0nj_Rkf8d9n05IIYWRmWgIvw.roa
File:                     uwc0nj_Rkf8d9n05IIYWRmWgIvw.roa (raw, json)
Hash identifier:          6gOpqzUXBBSDh8khvYgiHMaI20GfvW6xwGJv9N9NcLU=
Subject key identifier:   BB:07:34:9E:3F:D1:91:FF:1D:F6:7D:39:20:86:16:46:65:A0:22:FC
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0187E89FAFF5246BCC37D53164AD483CBFA6
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uwc0nj_Rkf8d9n05IIYWRmWgIvw.roa
Signing time:             Thu 04 May 2023 21:16:32 +0000
ROA not before:           Thu 04 May 2023 21:16:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e8:9f:af:f5:24:6b:cc:37:d5:31:64:ad:48:3c:bf:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: May  4 21:16:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb07349e3fd191ff1df67d392086164665a022fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:63:00:cb:ea:63:7e:b1:2a:af:bc:76:1f:
                    34:08:94:f8:ef:94:89:be:59:a1:85:7e:34:74:e4:
                    88:b1:38:05:7c:58:b9:25:3c:4a:91:6e:f3:c5:7b:
                    c9:e1:4d:68:c6:48:3c:72:9b:ab:ab:06:77:3c:d1:
                    30:70:7c:1c:4a:4c:7a:00:e7:06:36:40:56:52:a8:
                    1e:9d:9c:9d:8d:02:f0:37:41:47:6b:9f:d4:b7:9d:
                    ca:b0:df:4a:69:92:4f:23:9a:2c:68:a3:05:82:39:
                    f0:13:0a:4b:dd:30:d0:68:5b:db:73:3e:41:7f:e2:
                    85:71:43:da:89:ad:33:81:95:93:6b:0f:bc:c7:00:
                    b7:ca:61:e4:c4:8d:5f:bd:75:d3:bd:90:2e:f2:65:
                    3c:f7:4c:d1:8a:ab:6a:33:c9:f8:e4:3d:00:1b:c8:
                    31:eb:db:4a:05:34:9b:5f:bc:d3:48:82:52:19:e0:
                    1c:46:77:59:a1:de:94:df:9d:73:bf:eb:d7:c7:16:
                    08:3c:32:c1:e8:e9:f6:f9:fd:12:26:b1:0c:c8:2f:
                    ae:92:24:b5:5f:4a:35:d5:a8:67:95:b2:d2:69:2e:
                    1f:ac:ac:ba:7c:fa:40:d0:15:92:a8:52:17:ba:8a:
                    de:3c:ed:4f:99:7b:18:c2:21:a8:00:8b:8a:3b:d0:
                    34:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:07:34:9E:3F:D1:91:FF:1D:F6:7D:39:20:86:16:46:65:A0:22:FC
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/uwc0nj_Rkf8d9n05IIYWRmWgIvw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:4b:44:71:1f:18:63:05:9a:83:c6:6f:52:86:a3:35:a3:
         5f:26:95:5d:2b:a1:e4:7e:16:63:de:61:3b:d6:21:0f:3f:b8:
         2c:8d:1b:67:e3:cb:8f:a3:32:63:b5:dc:79:dc:76:fa:55:72:
         4f:97:ca:67:d3:ae:10:53:02:9d:1d:ea:ce:58:1f:c3:00:c3:
         67:a1:f1:81:f3:5f:ee:10:7f:61:42:5a:18:74:b1:e8:c6:18:
         04:af:92:f4:7d:c1:65:cc:e5:84:69:d5:e9:05:b9:82:95:54:
         b5:4f:e8:95:26:9f:4f:15:45:34:4c:a9:2b:85:f9:a9:80:cf:
         92:ea:c1:f4:0b:e7:d7:be:e7:2f:c1:3c:b2:43:c9:3e:8e:74:
         5f:c1:55:22:27:83:3c:6b:91:4b:e0:a0:8c:cd:c7:26:40:6c:
         4e:64:72:f6:ba:5a:7e:9a:c3:4e:82:75:04:3f:b9:d0:2b:cd:
         5b:40:56:8b:55:9c:0e:91:00:18:c2:6c:51:48:0d:09:6e:2a:
         71:15:d2:21:0e:5d:9a:e8:12:a3:b2:d8:7b:20:95:29:ad:c5:
         88:66:c6:14:97:b1:d3:03:dc:a3:99:43:01:57:f9:d6:e0:9b:
         fa:55:03:84:9c:09:38:f7:23:b2:47:2e:c1:c8:d1:88:e5:8f:
         bb:19:71:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfon6/1JGvMN9UxZK1IPL+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwNTA0MjExNjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjA3MzQ5ZTNmZDE5MWZmMWRmNjdkMzkyMDg2MTY0NjY1YTAyMmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprtjAMvqY36xKq+8dh80CJT475SJ
vlmhhX40dOSIsTgFfFi5JTxKkW7zxXvJ4U1oxkg8cpurqwZ3PNEwcHwcSkx6AOcG
NkBWUqgenZydjQLwN0FHa5/Ut53KsN9KaZJPI5osaKMFgjnwEwpL3TDQaFvbcz5B
f+KFcUPaia0zgZWTaw+8xwC3ymHkxI1fvXXTvZAu8mU890zRiqtqM8n45D0AG8gx
69tKBTSbX7zTSIJSGeAcRndZod6U351zv+vXxxYIPDLB6On2+f0SJrEMyC+ukiS1
X0o11ahnlbLSaS4frKy6fPpA0BWSqFIXuorePO1PmXsYwiGoAIuKO9A0PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLsHNJ4/0ZH/HfZ9OSCGFkZloCL8MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvdXdjMG5qX1JrZjhkOW4wNUlJWVdSbVdnSXZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY2MA0G
CSqGSIb3DQEBCwUAA4IBAQCEPEtEcR8YYwWag8ZvUoajNaNfJpVdK6HkfhZj3mE7
1iEPP7gsjRtn48uPozJjtdx53Hb6VXJPl8pn064QUwKdHerOWB/DAMNnofGB81/u
EH9hQloYdLHoxhgEr5L0fcFlzOWEadXpBbmClVS1T+iVJp9PFUU0TKkrhfmpgM+S
6sH0C+fXvucvwTyyQ8k+jnRfwVUiJ4M8a5FL4KCMzccmQGxOZHL2ulp+msNOgnUE
P7nQK81bQFaLVZwOkQAYwmxRSA0JbipxFdIhDl2a6BKjsth7IJUprcWIZsYUl7HT
A9yjmUMBV/nW4Jv6VQOEnAk49yOyRy7ByNGI5Y+7GXGu
-----END CERTIFICATE-----
Generated at Wed May 7 02:11:23 2025 by rpki-client