Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/6Jk0vSd3BywIQPeJHBLgQ1mbnPw.roa
File:                     6Jk0vSd3BywIQPeJHBLgQ1mbnPw.roa (raw, json)
Hash identifier:          AGp4qbq6pO01CE9g02xOlwc6FsgSm8YRyPo5/SFeW6s=
Subject key identifier:   E8:99:34:BD:27:77:07:2C:08:40:F7:89:1C:12:E0:43:59:9B:9C:FC
Certificate issuer:       /CN=fb837f52514215405c5810ed2c636a917223c54a
Certificate serial:       04644933
Authority key identifier: FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/6Jk0vSd3BywIQPeJHBLgQ1mbnPw.roa
Signing time:             Wed 02 Feb 2022 09:49:36 +0000
ROA not before:           Wed 02 Feb 2022 09:49:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204300
IP address blocks:        88.135.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73681203 (0x4644933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb837f52514215405c5810ed2c636a917223c54a
        Validity
            Not Before: Feb  2 09:49:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e89934bd2777072c0840f7891c12e043599b9cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:dc:e5:7d:1e:6a:06:1f:27:1f:f1:90:4c:
                    29:a1:47:64:83:38:4e:be:25:e9:70:5b:5b:d7:f9:
                    68:6f:37:16:71:cc:e5:e4:52:c3:2c:53:09:2c:38:
                    2d:79:f5:fa:29:fe:f0:6e:b1:92:87:6b:56:c0:88:
                    9a:c9:00:59:07:b5:bb:60:87:ad:79:1d:38:70:dc:
                    3f:3b:9c:57:a3:74:3e:44:fb:d2:6b:6b:6b:4a:06:
                    38:02:d8:42:c4:44:87:e9:30:27:12:2c:45:34:a6:
                    c3:41:36:e4:7a:3a:9b:93:7b:c0:dd:fa:3d:2a:4f:
                    90:61:91:a5:5b:4b:62:94:e9:de:9e:0c:0e:59:b6:
                    7b:4d:e4:6d:b2:04:f4:c7:9d:8d:6f:ea:5a:88:bc:
                    b6:a0:01:9b:a2:da:41:fb:ca:5c:a8:dc:b1:b7:41:
                    65:9e:51:35:e5:2b:e8:fe:2a:21:2b:35:e3:7c:cc:
                    15:00:9c:bb:fd:c8:43:d4:92:c1:21:bb:25:98:6a:
                    be:2d:7c:94:b8:98:37:ad:f4:13:4a:27:85:48:c2:
                    00:be:e4:97:13:57:ee:cb:89:47:4d:fb:f0:1e:c7:
                    b0:9c:17:0f:12:10:43:66:36:c6:54:bf:80:9b:d9:
                    bd:e2:1e:2c:3f:07:96:2b:95:a6:79:c9:1d:c8:81:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:99:34:BD:27:77:07:2C:08:40:F7:89:1C:12:E0:43:59:9B:9C:FC
            X509v3 Authority Key Identifier:
                keyid:FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/6Jk0vSd3BywIQPeJHBLgQ1mbnPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.135.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:63:c9:8d:e1:5c:c3:4d:4c:97:67:f1:50:3a:56:a8:ae:34:
         67:58:1a:1c:b8:31:9f:7d:62:bd:2c:43:b0:5e:78:45:d1:48:
         53:39:84:54:e4:ce:78:8a:b0:41:83:fc:9a:4d:04:45:3d:76:
         8b:3e:5a:bd:c7:72:5f:17:ca:8a:05:92:f6:61:33:5d:0e:67:
         7e:d1:96:05:01:94:b8:9e:70:b3:eb:8b:32:ef:2b:ae:8b:4b:
         4a:80:ae:99:9a:d6:43:7d:ba:9b:ad:50:de:62:68:31:97:af:
         a9:70:b9:ec:1d:01:5b:80:64:eb:c5:8f:9a:4a:62:5f:cb:0a:
         22:4b:de:d6:f3:7d:db:4d:82:03:c5:35:04:9a:d6:00:c1:02:
         b4:1f:77:cc:d0:76:d0:1e:2f:7e:f5:3d:62:80:e2:aa:c1:20:
         04:ae:2a:8d:88:c3:56:e3:ba:fb:99:a7:28:0c:7f:94:c3:5e:
         3d:4b:6b:91:2e:34:1e:67:83:4e:84:30:2e:61:be:ff:63:20:
         16:d0:06:61:b6:32:b9:32:db:7c:9d:5b:00:62:29:20:d7:00:
         07:2f:cd:5e:ad:3a:19:2c:df:58:28:6b:5b:46:64:00:ab:76:
         ce:8a:b8:8e:87:59:7a:5f:1e:9b:2e:4d:56:a6:5f:04:c1:3c:
         9b:72:b4:fa
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBGRJMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YjgzN2Y1MjUxNDIxNTQwNWM1ODEwZWQyYzYzNmE5MTcyMjNjNTRhMB4XDTIyMDIw
MjA5NDkzNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTg5OTM0YmQyNzc3
MDcyYzA4NDBmNzg5MWMxMmUwNDM1OTliOWNmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI6l3OV9HmoGHycf8ZBMKaFHZIM4Tr4l6XBbW9f5aG83FnHM
5eRSwyxTCSw4LXn1+in+8G6xkodrVsCImskAWQe1u2CHrXkdOHDcPzucV6N0PkT7
0mtra0oGOALYQsREh+kwJxIsRTSmw0E25Ho6m5N7wN36PSpPkGGRpVtLYpTp3p4M
Dlm2e03kbbIE9MedjW/qWoi8tqABm6LaQfvKXKjcsbdBZZ5RNeUr6P4qISs143zM
FQCcu/3IQ9SSwSG7JZhqvi18lLiYN630E0onhUjCAL7klxNX7suJR0378B7HsJwX
DxIQQ2Y2xlS/gJvZveIeLD8HliuVpnnJHciBwsECAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBTomTS9J3cHLAhA94kcEuBDWZuc/DAfBgNVHSMEGDAWgBT7g39SUUIVQFxY
EO0sY2qRciPFSjAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNE5fVWxGQ0ZVQmNXQkR0TEdOcWtYSWp4VW8uY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzAwLzJiOTZhMS0zOTczLTRjYjQtYjAxZC0yNGE1NGZiZTFjNmYv
MS82SmswdlNkM0J5d0lRUGVKSEJMZ1ExbWJuUHcucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAw
LzJiOTZhMS0zOTczLTRjYjQtYjAxZC0yNGE1NGZiZTFjNmYvMS8xLTROX1VsRkNG
VUJjV0JEdExHTnFrWElqeFVvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWIdFMA0GCSqGSIb3DQEBCwUA
A4IBAQCEY8mN4VzDTUyXZ/FQOlaorjRnWBocuDGffWK9LEOwXnhF0UhTOYRU5M54
irBBg/yaTQRFPXaLPlq9x3JfF8qKBZL2YTNdDmd+0ZYFAZS4nnCz64sy7yuui0tK
gK6ZmtZDfbqbrVDeYmgxl6+pcLnsHQFbgGTrxY+aSmJfywoiS97W833bTYIDxTUE
mtYAwQK0H3fM0HbQHi9+9T1igOKqwSAEriqNiMNW47r7macoDH+Uw149S2uRLjQe
Z4NOhDAuYb7/YyAW0AZhtjK5Mtt8nVsAYikg1wAHL81erToZLN9YKGtbRmQAq3bO
iriOh1l6Xx6bLk1Wpl8EwTybcrT6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:45 2023 by rpki-client on console-ams.rpki-client.org