Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/PoF_AYcF9WoxUZ97LEyoGfzWgq0.roa
File:                     PoF_AYcF9WoxUZ97LEyoGfzWgq0.roa (raw, json)
Hash identifier:          k0A388pYR2JLHj04z1HqZZs8wHleyfkEudebAYBtRt8=
Subject key identifier:   3E:81:7F:01:87:05:F5:6A:31:51:9F:7B:2C:4C:A8:19:FC:D6:82:AD
Certificate issuer:       /CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
Certificate serial:       03BE75DD
Authority key identifier: 03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/PoF_AYcF9WoxUZ97LEyoGfzWgq0.roa
Signing time:             Wed 23 Mar 2022 08:00:53 +0000
ROA not before:           Wed 23 Mar 2022 08:00:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.115.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62813661 (0x3be75dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d4c874a8fbaf51c9ec43ca009b22dc1d503976
        Validity
            Not Before: Mar 23 08:00:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e817f018705f56a31519f7b2c4ca819fcd682ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:1a:96:1d:53:96:44:e3:04:04:fd:0b:5a:
                    5f:a9:00:29:4b:da:bf:0c:e1:ee:b8:86:ff:1c:db:
                    23:2f:b6:39:0f:c3:49:a2:16:ac:e9:b8:15:89:9a:
                    e9:15:22:f8:c0:72:f8:54:9a:8a:bc:d2:42:a9:49:
                    d0:cc:77:66:f9:0c:f8:b5:4e:c9:2f:0a:b2:3e:ce:
                    63:d2:20:a4:a5:db:49:58:76:63:bc:ad:67:00:bc:
                    23:33:18:fb:a5:2b:60:89:47:f3:2d:42:2a:80:62:
                    7c:ea:50:77:cb:f3:76:54:fa:33:ad:3f:e2:b4:65:
                    eb:17:89:31:7d:4c:37:6e:8c:37:96:98:b0:31:8f:
                    5a:dc:71:5e:9e:68:f7:de:12:40:f2:7b:49:7f:41:
                    98:52:8f:31:0b:6c:71:1b:56:06:7b:a0:78:7b:b5:
                    b7:2a:9a:f2:c4:aa:71:80:7f:51:53:a5:dd:e2:f6:
                    bf:e2:50:7f:e5:f0:56:fd:8c:79:41:04:3f:17:db:
                    b1:3f:c6:b3:33:52:ba:cb:4a:f6:be:0e:88:1e:5c:
                    3a:ff:98:c1:28:51:cd:60:ac:a9:98:91:3d:45:46:
                    5d:14:65:29:78:43:24:ed:09:48:ad:de:56:27:f4:
                    2a:88:07:a8:29:17:44:f5:f2:6c:70:94:7b:95:87:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:81:7F:01:87:05:F5:6A:31:51:9F:7B:2C:4C:A8:19:FC:D6:82:AD
            X509v3 Authority Key Identifier:
                keyid:03:D4:C8:74:A8:FB:AF:51:C9:EC:43:CA:00:9B:22:DC:1D:50:39:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/PoF_AYcF9WoxUZ97LEyoGfzWgq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09a6e-5081-4674-aa57-244d84094c0f/1/A9TIdKj7r1HJ7EPKAJsi3B1QOXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:df:73:e5:ed:cf:dc:09:2f:2a:ed:24:6c:c2:dc:51:0f:
         96:ff:20:64:11:71:30:ed:28:5f:c3:4a:1a:db:d1:15:98:5e:
         58:07:e3:29:0e:76:6a:d1:1d:1e:74:dc:62:2c:5b:98:cf:af:
         b7:5b:e3:e0:cb:04:59:1d:f6:96:5e:40:36:96:2e:d6:13:8f:
         a3:55:cb:4e:d6:c4:43:12:58:ab:4f:76:71:5f:3f:0e:93:e1:
         cb:29:31:42:90:fd:52:e4:07:43:df:6b:79:8d:61:04:ee:4a:
         ee:b2:be:f4:fb:12:8c:77:41:ed:a6:52:0d:be:cb:45:e5:39:
         a9:25:c2:9a:07:54:57:43:37:5e:aa:b6:c7:6c:f2:12:e6:8c:
         25:f8:09:4f:fe:da:52:11:39:51:1a:68:9e:a3:a5:32:01:60:
         8c:69:5c:93:92:a0:cb:f7:3e:be:e5:f2:9d:97:6c:6b:a1:c5:
         7d:66:fb:9b:a1:63:44:d4:6c:0e:31:24:a4:2c:41:1a:9f:a5:
         3f:eb:32:50:c9:1a:2e:af:9a:82:4f:ac:2c:fd:9b:ce:0e:13:
         23:3c:22:37:ae:4d:1f:e3:be:4e:6f:e6:f7:a7:a4:5f:bf:f5:
         3b:dc:a3:89:aa:d8:6a:5c:d8:96:d9:f5:03:bc:a1:5c:dc:a9:
         7d:15:7d:da
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA7513TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
M2Q0Yzg3NGE4ZmJhZjUxYzllYzQzY2EwMDliMjJkYzFkNTAzOTc2MB4XDTIyMDMy
MzA4MDA1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2U4MTdmMDE4NzA1
ZjU2YTMxNTE5ZjdiMmM0Y2E4MTlmY2Q2ODJhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDyGpYdU5ZE4wQE/QtaX6kAKUvavwzh7riG/xzbIy+2OQ/D
SaIWrOm4FYma6RUi+MBy+FSairzSQqlJ0Mx3ZvkM+LVOyS8Ksj7OY9IgpKXbSVh2
Y7ytZwC8IzMY+6UrYIlH8y1CKoBifOpQd8vzdlT6M60/4rRl6xeJMX1MN26MN5aY
sDGPWtxxXp5o994SQPJ7SX9BmFKPMQtscRtWBnugeHu1tyqa8sSqcYB/UVOl3eL2
v+JQf+XwVv2MeUEEPxfbsT/GszNSustK9r4OiB5cOv+YwShRzWCsqZiRPUVGXRRl
KXhDJO0JSK3eVif0KogHqCkXRPXybHCUe5WHGfcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ+gX8BhwX1ajFRn3ssTKgZ/NaCrTAfBgNVHSMEGDAWgBQD1Mh0qPuvUcns
Q8oAmyLcHVA5djAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0E5VElkS2o3cjFISjdFUEtBSnNpM0IxUU9YWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2IvZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8x
L1BvRl9BWWNGOVdveFVaOTdMRXlvR2Z6V2dxMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Iv
ZDA5YTZlLTUwODEtNDY3NC1hYTU3LTI0NGQ4NDA5NGMwZi8xL0E5VElkS2o3cjFI
SjdFUEtBSnNpM0IxUU9YWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArlzbDANBgkqhkiG9w0BAQsFAAOC
AQEAfU3fc+Xtz9wJLyrtJGzC3FEPlv8gZBFxMO0oX8NKGtvRFZheWAfjKQ52atEd
HnTcYixbmM+vt1vj4MsEWR32ll5ANpYu1hOPo1XLTtbEQxJYq092cV8/DpPhyykx
QpD9UuQHQ99reY1hBO5K7rK+9PsSjHdB7aZSDb7LReU5qSXCmgdUV0M3Xqq2x2zy
EuaMJfgJT/7aUhE5URponqOlMgFgjGlck5Kgy/c+vuXynZdsa6HFfWb7m6FjRNRs
DjEkpCxBGp+lP+syUMkaLq+agk+sLP2bzg4TIzwiN65NH+O+Tm/m96ekX7/1O9yj
iarYalzYltn1A7yhXNypfRV92g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:32 2024 by rpki-client on console-ams.rpki-client.org