Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FfE2_GrWKc10uay1Er2jgepAuo.roa
File:                     1-FfE2_GrWKc10uay1Er2jgepAuo.roa (raw, json)
Hash identifier:          jAcSUM+J9ryUvzgwKoh0nJn0GKnXYVLrl2gLNOo+45g=
Subject key identifier:   F8:57:C4:DB:F1:AB:58:A7:35:D2:E6:B2:D4:4A:F6:8E:07:A9:02:EA
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0336EDCC
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FfE2_GrWKc10uay1Er2jgepAuo.roa
Signing time:             Wed 23 Feb 2022 14:51:59 +0000
ROA not before:           Wed 23 Feb 2022 14:51:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209768
IP address blocks:        141.11.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53931468 (0x336edcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Feb 23 14:51:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f857c4dbf1ab58a735d2e6b2d44af68e07a902ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:20:fc:5d:a4:d7:7e:e4:44:0b:e9:c8:c3:
                    8c:56:9f:75:a1:f3:38:ca:87:74:33:76:55:bd:97:
                    62:4b:f1:76:24:3b:8e:a1:7e:34:85:33:f6:ff:64:
                    c9:11:52:6f:9c:d5:40:3f:87:b8:90:90:4e:a7:3d:
                    e5:78:90:7e:8c:0d:a8:ff:66:30:70:4f:02:12:96:
                    db:3f:9a:82:3b:a5:8d:a1:6f:a3:f1:a7:59:29:08:
                    f7:5f:de:d0:f8:fe:cb:0f:60:98:02:e6:78:40:20:
                    05:04:ae:c4:90:50:85:a9:91:12:df:18:36:7e:57:
                    ab:b6:b3:62:83:8e:91:3a:7a:29:55:fd:b0:b7:16:
                    76:ea:77:d6:88:6c:82:37:22:38:c2:0a:08:50:c8:
                    19:07:97:8f:80:b2:14:fe:27:72:97:bf:c9:9b:c9:
                    48:b0:16:af:30:58:e4:53:0e:03:db:98:1b:18:6f:
                    4a:d2:59:75:d2:73:96:df:d5:a0:0f:8d:22:c3:94:
                    20:42:33:5f:90:be:71:37:f3:b9:96:61:91:c1:d2:
                    b2:8f:b5:34:d6:6f:bd:c8:16:8b:f4:06:4d:30:5c:
                    54:a0:bf:74:c2:ae:41:c6:c6:ea:04:10:e0:f9:32:
                    21:d6:b2:32:af:64:3c:72:8e:ee:9b:31:ff:19:7b:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:57:C4:DB:F1:AB:58:A7:35:D2:E6:B2:D4:4A:F6:8E:07:A9:02:EA
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/1-FfE2_GrWKc10uay1Er2jgepAuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:29:80:ff:98:a8:9e:ff:99:59:a0:ee:c9:b5:5a:32:d9:d4:
         59:a1:3e:86:1f:1a:05:6a:79:f9:64:2d:fc:5e:2a:b2:6c:07:
         6a:0e:9e:4f:06:ee:51:00:e8:23:cf:6b:36:63:23:a9:a2:ff:
         da:4a:9a:0f:35:00:2c:06:a3:64:f1:3b:c0:b5:b3:15:0b:fb:
         b8:60:0a:50:2f:97:96:84:93:cf:26:61:6f:f2:61:c3:e3:f9:
         5c:41:de:97:37:e3:5a:9c:70:2e:9d:7e:70:20:8d:cf:4c:f3:
         a3:11:a8:64:3b:61:b2:a1:a3:37:30:81:2a:0b:b6:85:2b:d5:
         0b:e3:e7:f3:9e:08:df:bb:00:cf:fc:7c:cf:a6:3e:cd:b5:69:
         a4:e2:7d:ca:bd:a3:5d:a3:d4:d2:56:dc:0b:51:13:60:36:d6:
         f0:77:2c:b4:ab:c5:65:7d:27:d0:2d:c9:2e:02:15:7f:c2:39:
         c0:2b:5d:cd:82:a8:54:21:2f:4e:1b:ee:30:a8:7c:8d:d7:9d:
         02:03:d2:f2:a2:45:46:74:b4:b9:01:89:b1:67:5a:1b:f7:63:
         be:84:56:c9:42:ad:c5:36:8a:79:3c:99:13:fa:d9:9e:9b:69:
         05:71:ad:2b:d0:fa:68:01:97:df:e3:e6:d2:79:fa:3a:cf:90:
         9f:7f:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org