Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tp7j0gVxkqHgB-PhnMaHnq2fSeY.roa
File:                     tp7j0gVxkqHgB-PhnMaHnq2fSeY.roa (raw, json)
Hash identifier:          CaWxRcEVUh53anBjjiIowm4xPyhlesaCGTl2wp0Xj0o=
Subject key identifier:   B6:9E:E3:D2:05:71:92:A1:E0:07:E3:E1:9C:C6:87:9E:AD:9F:49:E6
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018934DF3600D0F5F33DDAA19454F46980B3
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tp7j0gVxkqHgB-PhnMaHnq2fSeY.roa
Signing time:             Sat 08 Jul 2023 09:39:50 +0000
ROA not before:           Sat 08 Jul 2023 09:39:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        37.1.227.0/24 maxlen: 24
                          37.1.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:34:df:36:00:d0:f5:f3:3d:da:a1:94:54:f4:69:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Jul  8 09:39:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b69ee3d2057192a1e007e3e19cc6879ead9f49e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:e7:05:b1:da:74:6e:77:a7:5c:40:1d:9c:
                    f0:ba:4d:c7:fc:d6:e2:5d:d2:4b:e1:40:88:f9:ec:
                    d9:5e:0e:b1:56:f2:da:03:97:60:ee:03:2c:32:78:
                    f2:83:20:1c:9b:18:13:7a:2d:17:ad:48:7b:8a:56:
                    ab:a3:e9:ef:3a:b7:15:89:5c:b3:60:ac:52:0b:72:
                    4c:cf:00:e3:ed:69:5c:f4:c8:34:95:f1:7c:95:30:
                    c1:5b:27:68:0e:eb:30:fa:2b:fb:6d:e3:a1:cd:ac:
                    01:13:ad:11:30:26:03:77:7b:65:31:89:a8:bb:6e:
                    1d:ef:34:95:c6:30:47:3e:d8:50:5c:98:70:ac:1b:
                    2b:b7:ab:d0:2b:7e:5d:45:63:9d:9c:25:7e:c1:ed:
                    30:5e:f1:52:b0:6a:90:ab:1e:66:9a:b5:ed:0c:3a:
                    46:fc:f9:c1:1b:c2:6f:f3:cc:cd:fb:73:d1:6c:8a:
                    74:d2:78:fc:cd:6e:b9:10:4d:eb:0d:88:df:e2:9e:
                    a1:f8:3a:22:f9:08:e6:7f:a2:9d:09:21:53:e2:8b:
                    aa:42:fd:17:00:71:f7:42:4f:c4:4d:32:d6:00:37:
                    cb:25:56:4a:99:4b:9c:62:86:32:cc:db:a1:18:1e:
                    ab:4b:a7:34:7f:2e:1b:76:ec:e2:b1:40:96:66:49:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:E3:D2:05:71:92:A1:E0:07:E3:E1:9C:C6:87:9E:AD:9F:49:E6
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/tp7j0gVxkqHgB-PhnMaHnq2fSeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.1.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:74:b3:b5:19:d1:af:7d:3d:83:e0:8a:96:6d:96:a5:d8:fa:
         df:37:13:3b:b7:38:ff:d9:a9:0d:b1:ad:b6:d5:9f:bf:14:6b:
         54:ad:5f:e1:98:4c:66:cb:f0:63:5f:2e:43:20:76:f2:b4:56:
         db:22:a1:7c:a5:69:42:55:c6:2c:71:16:ce:e7:c5:74:6d:3b:
         25:4b:08:9c:2f:eb:9a:eb:0a:33:fa:2c:3a:7e:0a:40:35:63:
         18:df:6a:cd:de:cd:fb:49:97:a3:36:16:a7:e4:8a:f2:25:44:
         e5:05:94:ed:51:39:a6:6d:82:99:ba:85:5d:30:26:fc:13:30:
         7b:c5:44:27:b9:44:15:f3:fc:d9:36:d1:48:9f:19:e2:16:ea:
         62:1f:5e:d2:59:f3:07:0e:b1:a4:d2:22:cc:be:f2:93:ef:2b:
         1a:6b:2e:d4:69:e1:b0:b6:01:6a:46:42:90:07:9d:70:3c:de:
         2b:37:b0:55:11:02:c9:e0:82:ef:ef:13:7d:df:c5:c4:46:7a:
         58:12:45:7f:17:5e:a0:b5:bd:2b:41:f0:b7:c7:9e:3b:d1:63:
         f7:16:9d:df:ae:c7:9f:7e:ff:d9:e7:66:08:3d:38:ca:aa:88:
         4e:80:5f:c8:df:ff:23:7c:22:2f:38:4b:1a:6e:a1:82:f2:16:
         a5:cf:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org