Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/mOOikMCFQZIxfo4DaiVnWjY6-Qw.roa
File:                     mOOikMCFQZIxfo4DaiVnWjY6-Qw.roa (raw, json)
Hash identifier:          io/Njq6Kz+EAfYN/RjrdLJHAgv+tigVQQB6PtQOflZw=
Subject key identifier:   98:E3:A2:90:C0:85:41:92:31:7E:8E:03:6A:25:67:5A:36:3A:F9:0C
Certificate issuer:       /CN=c34c13ecf26ac702f768c99110bf662e99139794
Certificate serial:       04F18BFC
Authority key identifier: C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/mOOikMCFQZIxfo4DaiVnWjY6-Qw.roa
Signing time:             Mon 03 Jan 2022 13:53:50 +0000
ROA not before:           Mon 03 Jan 2022 13:53:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210110
IP address blocks:        185.145.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82938876 (0x4f18bfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34c13ecf26ac702f768c99110bf662e99139794
        Validity
            Not Before: Jan  3 13:53:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98e3a290c0854192317e8e036a25675a363af90c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:26:4e:e1:ed:68:7a:e2:4a:d2:8f:b8:0e:
                    8e:74:5f:25:25:db:6c:4e:8a:fe:52:a1:d6:c1:be:
                    61:06:8b:6e:6f:8a:fc:df:ad:e4:85:6b:9f:ce:df:
                    51:65:1a:ac:63:89:98:5a:6f:9b:02:6e:21:8b:ff:
                    d7:40:6c:be:b1:88:3a:6b:52:20:d7:10:23:24:9d:
                    d4:1c:8c:07:3e:32:85:3d:64:c4:e0:f2:a9:a3:b6:
                    18:bc:74:d1:27:51:43:19:4f:ff:f2:04:04:ea:49:
                    3c:f2:a7:e0:e0:7b:6d:da:2e:c7:a8:b0:f0:4f:7b:
                    ef:9d:35:f4:a0:4f:6a:91:fe:ad:3e:6e:4e:96:cf:
                    32:7a:1a:d3:4c:2a:22:1d:9f:4c:31:85:77:7e:03:
                    8a:d2:da:d5:10:54:fa:0e:73:bb:f3:48:b1:63:14:
                    2f:f1:af:3b:8f:a1:ef:09:f0:35:d6:e7:dd:4e:df:
                    8c:fe:37:97:2a:29:1b:60:18:3e:5f:5a:28:20:8c:
                    8c:51:24:f7:21:fa:a0:58:03:74:18:56:17:73:e7:
                    0b:e9:3d:5d:d6:c7:04:bd:d1:c6:d3:e5:b3:95:c7:
                    29:9c:e3:17:05:29:87:23:51:db:20:84:f6:d9:84:
                    da:ca:88:d9:60:ac:d8:47:f7:56:d5:37:19:7e:11:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E3:A2:90:C0:85:41:92:31:7E:8E:03:6A:25:67:5A:36:3A:F9:0C
            X509v3 Authority Key Identifier:
                keyid:C3:4C:13:EC:F2:6A:C7:02:F7:68:C9:91:10:BF:66:2E:99:13:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0wT7PJqxwL3aMmREL9mLpkTl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/mOOikMCFQZIxfo4DaiVnWjY6-Qw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a3a4e8-1fc9-4589-97e8-1e58bd74be60/1/w0wT7PJqxwL3aMmREL9mLpkTl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:85:63:98:30:5e:a9:92:e4:b8:c7:47:c3:ec:a1:7b:03:45:
         dc:0e:d7:e7:4d:9a:cf:e1:e1:ff:27:08:5f:51:fd:1a:b1:e5:
         ed:84:ec:9b:cb:2b:bc:61:3a:98:f1:7e:f9:8d:c3:c5:b6:52:
         59:09:61:a4:d1:4f:85:d6:4e:34:29:8d:30:ad:59:10:a6:8c:
         fb:cc:cf:15:d6:71:8e:67:1c:89:aa:bf:48:b2:af:e7:a8:ae:
         35:22:07:78:5e:04:7e:f1:3f:42:da:ae:01:ea:6e:b7:b8:a1:
         57:44:07:22:13:fc:7e:03:e3:67:0e:88:ad:0b:48:35:10:6f:
         bd:4e:3c:d5:d0:49:60:93:8f:4c:56:8f:9d:97:fc:cc:ea:ce:
         5b:62:8f:46:a0:83:dd:b9:fd:5f:b0:7c:25:34:9d:30:ee:73:
         ae:ff:10:5c:2a:86:90:ba:dd:f5:b7:ef:91:22:27:f7:16:83:
         08:2b:a9:44:6f:77:fc:66:fd:11:ee:c1:9d:fd:65:5a:20:f3:
         1d:4f:ac:bb:d3:c3:01:58:f5:0b:72:ef:a3:f4:16:3b:21:3a:
         fb:ff:76:8e:02:4a:d3:26:e2:5c:99:99:a1:0c:ea:96:34:5b:
         46:cd:9e:74:f4:dd:37:8e:6e:e6:9e:f2:4e:c8:f1:48:b9:39:
         d4:21:cd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:03 2024 by rpki-client on console-ams.rpki-client.org