Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/9_ZfYnzYzEJ7W6kLZVcxoWESsGo.roa
File:                     9_ZfYnzYzEJ7W6kLZVcxoWESsGo.roa (raw, json)
Hash identifier:          uY5vivHXXOZ6/nQEnDcFBnApM88aPYmSqeq9d5AznGQ=
Subject key identifier:   F7:F6:5F:62:7C:D8:CC:42:7B:5B:A9:0B:65:57:31:A1:61:12:B0:6A
Certificate issuer:       /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial:       015C63
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/9_ZfYnzYzEJ7W6kLZVcxoWESsGo.roa
Signing time:             Thu 27 Jan 2022 09:36:30 +0000
ROA not before:           Thu 27 Jan 2022 09:36:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        94.143.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89187 (0x15c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
        Validity
            Not Before: Jan 27 09:36:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f7f65f627cd8cc427b5ba90b655731a16112b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:4f:dc:1c:67:87:03:b3:b2:5c:e8:a4:45:
                    e3:86:df:60:6d:57:96:2b:2d:14:77:af:38:6e:49:
                    ea:eb:3a:32:3b:de:2a:0d:f2:cb:4d:f3:d2:41:4f:
                    c4:b9:50:a6:34:3b:fe:cb:4a:3c:ff:f4:9f:7d:5c:
                    d4:35:5d:99:74:b7:36:ef:d4:cd:37:a6:80:2d:18:
                    8a:4a:dd:4c:ba:9e:97:87:2f:98:78:f5:66:80:af:
                    56:3c:a2:c8:e3:ae:6c:81:55:9d:81:26:c8:67:bc:
                    33:c6:cf:da:08:ce:9e:e2:aa:7c:c4:f7:68:50:83:
                    b5:59:47:8a:b1:b6:37:9b:74:41:dd:e0:ed:82:00:
                    8d:f1:36:d6:c4:bf:d3:d9:78:98:f6:64:f5:9b:e0:
                    b3:65:83:92:09:d4:72:35:6c:a5:66:3d:e9:3f:48:
                    ec:ba:ff:a1:f6:2a:d2:5b:ae:2b:e1:f6:8a:e6:b9:
                    86:7b:f5:46:f2:39:d0:02:1d:f0:48:c8:a0:6b:3f:
                    0f:85:93:d2:e9:08:f5:94:20:59:d1:84:2f:81:c6:
                    5d:50:38:6e:8d:f3:e3:2b:3d:f3:6a:2e:79:ee:17:
                    a3:9b:02:0a:55:8c:16:df:ad:59:af:7e:88:c4:59:
                    ac:11:ae:59:33:98:0e:8f:4a:bb:62:8d:a2:45:f5:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F6:5F:62:7C:D8:CC:42:7B:5B:A9:0B:65:57:31:A1:61:12:B0:6A
            X509v3 Authority Key Identifier:
                keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/9_ZfYnzYzEJ7W6kLZVcxoWESsGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.143.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:46:d7:75:65:3e:82:ef:9f:97:01:ad:1f:65:67:41:9f:
         52:92:27:85:94:9a:01:e7:e4:a3:9f:b9:5a:2b:14:b7:42:55:
         ee:11:52:c6:16:aa:3d:b1:00:b6:dc:be:96:11:de:1d:3f:8e:
         09:f1:76:a0:2a:09:e6:32:a8:cf:90:68:24:87:2b:7c:98:c0:
         cb:cd:3a:21:fc:14:0e:b4:6e:5e:3b:e6:72:cf:0e:05:2c:ff:
         21:43:b7:41:51:5d:db:a9:c3:2f:28:49:8b:18:ad:71:b6:a8:
         d4:98:09:65:c2:d3:4a:fc:5b:e4:44:86:cf:dd:b0:a5:4f:42:
         96:6d:43:b0:65:1b:f3:56:44:0f:c8:30:9c:40:1c:45:43:c1:
         3c:b5:f7:e0:10:d2:b2:23:b4:de:e8:cc:eb:17:c2:d9:a1:9d:
         f2:bf:24:b1:2d:84:1e:dd:ac:77:84:22:89:92:96:80:93:45:
         0b:72:1a:bd:97:7b:48:bd:4f:84:37:c0:34:fd:db:67:fc:f8:
         a6:21:6c:55:5a:35:d8:d3:83:47:54:6b:2a:e5:62:0f:65:43:
         e2:fc:4b:34:66:75:4f:99:dc:24:b6:a0:9d:3b:9b:8b:fd:e7:
         ea:5e:69:ea:13:d4:c5:06:8a:de:1d:a3:77:10:41:7e:e1:e3:
         7d:94:3f:92
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAVxjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM0
ZDRkZWJmODdmNjdjYmI0NDIzNzM4MTdlN2Q2MmY3NThhNTlhY2QwHhcNMjIwMTI3
MDkzNjMwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmN2Y2NWY2MjdjZDhj
YzQyN2I1YmE5MGI2NTU3MzFhMTYxMTJiMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAybBP3BxnhwOzslzopEXjht9gbVeWKy0Ud684bknq6zoyO94q
DfLLTfPSQU/EuVCmNDv+y0o8//SffVzUNV2ZdLc279TNN6aALRiKSt1Mup6Xhy+Y
ePVmgK9WPKLI465sgVWdgSbIZ7wzxs/aCM6e4qp8xPdoUIO1WUeKsbY3m3RB3eDt
ggCN8TbWxL/T2XiY9mT1m+CzZYOSCdRyNWylZj3pP0jsuv+h9irSW64r4faK5rmG
e/VG8jnQAh3wSMigaz8PhZPS6Qj1lCBZ0YQvgcZdUDhujfPjKz3zai557hejmwIK
VYwW361Zr36IxFmsEa5ZM5gOj0q7Yo2iRfU8SwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPf2X2J82MxCe1upC2VXMaFhErBqMB8GA1UdIwQYMBaAFDTU3r+H9ny7RCNz
gX59YvdYpZrNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Tk5UZXY0ZjJmTHRFSTNPQmZuMWk5MWlsbXMwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iYS9hNzhhNjktYzhiOC00YzYyLTg5ODktYmJhMzFmMzk1MTFhLzEv
OV9aZlluell6RUo3VzZrTFpWY3hvV0VTc0dvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9h
NzhhNjktYzhiOC00YzYyLTg5ODktYmJhMzFmMzk1MTFhLzEvTk5UZXY0ZjJmTHRF
STNPQmZuMWk5MWlsbXMwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo/gMA0GCSqGSIb3DQEBCwUAA4IB
AQAPVEbXdWU+gu+flwGtH2VnQZ9SkieFlJoB5+Sjn7laKxS3QlXuEVLGFqo9sQC2
3L6WEd4dP44J8XagKgnmMqjPkGgkhyt8mMDLzToh/BQOtG5eO+Zyzw4FLP8hQ7dB
UV3bqcMvKEmLGK1xtqjUmAllwtNK/FvkRIbP3bClT0KWbUOwZRvzVkQPyDCcQBxF
Q8E8tffgENKyI7Te6MzrF8LZoZ3yvySxLYQe3ax3hCKJkpaAk0ULchq9l3tIvU+E
N8A0/dtn/PimIWxVWjXY04NHVGsq5WIPZUPi/Es0ZnVPmdwktqCdO5uL/efqXmnq
E9TFBoreHaN3EEF+4eN9lD+S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:49 2024 by rpki-client on console-ams.rpki-client.org