Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/Rm2LQEi9pOA1gV8GITHrBKSlhAs.roa
File:                     Rm2LQEi9pOA1gV8GITHrBKSlhAs.roa (raw, json)
Hash identifier:          Yn9/DCXa02Dw+qy3sZr58JSv64oqNfr7hFcnN7/sEWI=
Subject key identifier:   46:6D:8B:40:48:BD:A4:E0:35:81:5F:06:21:31:EB:04:A4:A5:84:0B
Certificate issuer:       /CN=7c20132883c41244eab1d8f32180709c5640cafa
Certificate serial:       0D655B
Authority key identifier: 7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/Rm2LQEi9pOA1gV8GITHrBKSlhAs.roa
Signing time:             Tue 17 May 2022 06:36:30 +0000
ROA not before:           Tue 17 May 2022 06:36:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        79.110.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877915 (0xd655b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c20132883c41244eab1d8f32180709c5640cafa
        Validity
            Not Before: May 17 06:36:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=466d8b4048bda4e035815f062131eb04a4a5840b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0b:77:4e:00:93:f7:0a:50:55:1c:7f:85:0a:
                    ef:2e:c2:dd:e2:20:a5:fa:21:40:a4:a5:6e:19:c8:
                    74:43:38:d3:a6:5a:83:80:59:04:66:b2:45:97:94:
                    82:3c:c0:b1:d6:1f:68:23:37:41:5f:91:85:b6:bf:
                    f1:ee:c6:24:1e:8f:ae:c4:e5:c6:36:1a:d2:69:72:
                    d1:63:6a:b1:9f:1e:60:a8:1b:4f:58:c0:29:d4:8a:
                    e8:9e:b0:97:fd:2f:a2:a8:31:18:87:01:94:97:b8:
                    14:fc:39:15:0f:cb:3c:b0:35:3b:be:17:18:4b:0d:
                    18:81:fe:ee:1c:67:cf:c0:7a:71:5e:ee:38:2f:a9:
                    96:c8:db:59:2e:f8:cb:e8:89:55:06:d5:bf:36:40:
                    62:d9:de:11:7d:9f:5c:88:3d:ea:78:f1:84:25:e8:
                    5d:72:36:b6:06:64:08:d9:01:44:ad:70:5b:b2:9c:
                    b6:d6:cd:ab:36:58:4f:8e:cd:e0:98:3e:2f:b8:f6:
                    c7:b6:4b:81:ea:ec:cb:1c:b1:c0:fb:88:4f:51:2b:
                    72:ed:31:34:83:8b:1c:8e:91:80:b6:51:6b:db:d2:
                    ff:cd:46:5c:37:37:5c:43:85:a9:78:49:3f:7c:62:
                    64:cc:76:1b:88:f7:fe:3b:35:59:b7:9e:c7:04:22:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:8B:40:48:BD:A4:E0:35:81:5F:06:21:31:EB:04:A4:A5:84:0B
            X509v3 Authority Key Identifier:
                keyid:7C:20:13:28:83:C4:12:44:EA:B1:D8:F3:21:80:70:9C:56:40:CA:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCATKIPEEkTqsdjzIYBwnFZAyvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/Rm2LQEi9pOA1gV8GITHrBKSlhAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9264df-d8be-4de3-8d4c-7095b972e674/1/fCATKIPEEkTqsdjzIYBwnFZAyvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:a0:9a:88:1b:05:df:50:52:f8:05:af:a8:c1:07:91:bf:db:
         94:10:8c:bd:7e:1d:b6:f5:78:18:ec:7e:43:9b:e8:f2:33:3f:
         d8:27:be:df:7b:31:5a:8b:1d:00:1a:52:51:4e:0c:ac:0f:c4:
         cc:15:0b:4b:8e:f6:24:8a:5b:9d:0e:61:9c:ed:2a:2f:f4:f8:
         81:a2:d5:12:dd:8a:4c:95:61:62:c6:6a:fb:47:67:d1:0a:db:
         85:9c:77:f0:5f:20:0c:0e:cd:4f:5c:29:93:bb:63:4c:1a:b0:
         10:db:96:27:9a:61:10:6f:56:56:d9:51:73:ba:00:ba:51:11:
         55:f8:93:0b:e3:2e:06:8c:97:60:f5:8f:80:b6:fa:85:47:d8:
         02:e7:87:a3:0c:9a:04:e4:9c:e2:fe:db:92:db:56:0f:a3:41:
         0d:ab:99:bd:8c:9b:47:0a:b6:b9:8d:49:45:b6:47:08:3d:54:
         a5:7b:66:f2:ea:ba:4b:f0:28:40:0c:ac:a7:77:49:3b:c0:f1:
         b6:fe:6a:27:3e:48:b9:07:87:51:9b:38:a4:48:ed:34:f1:04:
         e9:00:4d:22:43:e1:70:4d:69:94:d5:85:87:cc:6b:f2:1d:07:
         01:41:cf:28:1c:0e:60:a0:69:93:c6:d8:69:81:f2:90:07:99:
         60:93:e0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org