Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/sSjaEzLfj18O4RFw6RI1HRhXmBU.roa
File:                     sSjaEzLfj18O4RFw6RI1HRhXmBU.roa (raw, json)
Hash identifier:          jfXjcn+u2VLNoJM7oX+E/e98r1jzNl6+uJ/ZfibByVw=
Subject key identifier:   B1:28:DA:13:32:DF:8F:5F:0E:E1:11:70:E9:12:35:1D:18:57:98:15
Certificate issuer:       /CN=4e259d806139f953e47c350904aaceec6cc39a1f
Certificate serial:       01E5FBAD
Authority key identifier: 4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/sSjaEzLfj18O4RFw6RI1HRhXmBU.roa
Signing time:             Sat 09 Apr 2022 12:22:04 +0000
ROA not before:           Sat 09 Apr 2022 12:22:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12735
IP address blocks:        178.255.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31849389 (0x1e5fbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e259d806139f953e47c350904aaceec6cc39a1f
        Validity
            Not Before: Apr  9 12:22:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b128da1332df8f5f0ee11170e912351d18579815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ac:e5:02:49:49:d4:ff:98:4c:08:70:1a:4d:
                    0a:ef:c1:8f:48:3e:fd:b8:29:af:1a:23:d1:74:f7:
                    d8:93:80:e3:0b:11:04:cc:6c:9f:6f:c8:2d:09:5c:
                    0f:16:1c:44:70:dc:23:8f:24:d8:2e:07:3c:16:e5:
                    c9:b8:67:1e:25:ae:76:9d:04:3f:3d:b8:c7:ef:43:
                    10:92:f8:99:17:1d:e2:44:d4:e7:0e:30:35:64:b6:
                    9f:35:82:ca:3a:a7:d5:04:a0:4d:79:b9:c7:21:8d:
                    74:6d:57:87:fd:21:fa:01:f9:99:b8:98:0d:7f:97:
                    41:8b:44:08:d1:3b:2a:51:32:98:9b:00:7e:41:31:
                    9e:ce:93:1e:cb:3b:ea:ae:9d:74:d2:bf:d6:1c:78:
                    bf:ea:33:1d:eb:26:56:29:26:8d:a1:41:7c:60:bf:
                    f6:6d:f2:a7:ea:ee:83:c3:78:f7:00:8e:db:17:c6:
                    ac:cc:11:3b:c6:83:0f:d3:97:36:87:3b:b9:c0:2c:
                    20:0f:1a:74:99:4e:c0:e2:59:4d:08:cd:83:e7:32:
                    5f:8b:c3:94:79:82:48:ab:e9:4d:c7:74:a5:20:5f:
                    7d:92:ca:43:9f:38:55:aa:e3:f0:cc:1d:8f:f1:53:
                    34:19:13:cf:ac:78:db:bc:7d:d5:48:f8:29:d8:95:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:DA:13:32:DF:8F:5F:0E:E1:11:70:E9:12:35:1D:18:57:98:15
            X509v3 Authority Key Identifier:
                keyid:4E:25:9D:80:61:39:F9:53:E4:7C:35:09:04:AA:CE:EC:6C:C3:9A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiWdgGE5-VPkfDUJBKrO7GzDmh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/sSjaEzLfj18O4RFw6RI1HRhXmBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/71c5fd-e36f-42f6-926b-58a2457c6fd5/1/TiWdgGE5-VPkfDUJBKrO7GzDmh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.255.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:be:19:b3:9c:e4:5a:17:a5:53:1a:d9:2b:89:32:d7:71:de:
         d2:90:83:40:61:15:e1:6e:39:b3:a9:20:20:58:7c:5c:9b:c1:
         37:dc:5c:26:15:72:1f:9d:c3:08:1f:3b:18:66:ab:a1:2e:29:
         a3:0c:47:74:ba:e4:93:1f:54:a5:2d:ba:80:2d:a9:54:5d:29:
         d0:6c:d7:00:07:26:44:1d:96:ea:95:70:c2:30:e5:0a:0b:e4:
         82:b0:6a:9e:ec:68:20:23:72:b2:d7:c0:c4:bc:d2:ab:ae:f5:
         27:70:23:c4:1d:62:bb:8e:ff:83:ce:f6:e2:4b:a9:a7:d1:d3:
         97:f1:78:6e:14:d5:2f:d1:f8:c9:3b:8e:f9:8e:ac:c9:bf:ed:
         76:18:31:80:49:fb:90:4e:27:77:d2:3e:78:e9:a2:80:1b:d6:
         d3:10:a8:31:35:64:9d:d3:8f:62:f6:dd:8f:28:7a:df:95:e7:
         dd:f6:56:39:db:a8:1d:44:68:a8:ab:0c:06:0c:b2:d1:af:2b:
         28:26:69:20:28:49:c2:b5:95:e7:fb:40:f6:98:f0:a1:d3:31:
         ae:c8:0c:d9:b5:5d:0b:59:01:df:d8:a9:d7:83:de:16:9f:58:
         fb:b1:af:3c:7b:23:33:5e:49:c1:af:9a:1b:28:be:ea:52:f2:
         48:55:9a:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAeX7rTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTI1OWQ4MDYxMzlmOTUzZTQ3YzM1MDkwNGFhY2VlYzZjYzM5YTFmMB4XDTIyMDQw
OTEyMjIwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjEyOGRhMTMzMmRm
OGY1ZjBlZTExMTcwZTkxMjM1MWQxODU3OTgxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWs5QJJSdT/mEwIcBpNCu/Bj0g+/bgprxoj0XT32JOA4wsR
BMxsn2/ILQlcDxYcRHDcI48k2C4HPBblybhnHiWudp0EPz24x+9DEJL4mRcd4kTU
5w4wNWS2nzWCyjqn1QSgTXm5xyGNdG1Xh/0h+gH5mbiYDX+XQYtECNE7KlEymJsA
fkExns6THss76q6ddNK/1hx4v+ozHesmVikmjaFBfGC/9m3yp+rug8N49wCO2xfG
rMwRO8aDD9OXNoc7ucAsIA8adJlOwOJZTQjNg+cyX4vDlHmCSKvpTcd0pSBffZLK
Q584Varj8Mwdj/FTNBkTz6x427x91Uj4KdiVmj8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSxKNoTMt+PXw7hEXDpEjUdGFeYFTAfBgNVHSMEGDAWgBROJZ2AYTn5U+R8
NQkEqs7sbMOaHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RpV2RnR0U1LVZQa2ZEVUpCS3JPN0d6RG1oOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDcvNzFjNWZkLWUzNmYtNDJmNi05MjZiLTU4YTI0NTdjNmZkNS8x
L3NTamFFekxmajE4TzRSRnc2UkkxSFJoWG1CVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcv
NzFjNWZkLWUzNmYtNDJmNi05MjZiLTU4YTI0NTdjNmZkNS8xL1RpV2RnR0U1LVZQ
a2ZEVUpCS3JPN0d6RG1oOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALL/3TANBgkqhkiG9w0BAQsFAAOC
AQEAVr4Zs5zkWhelUxrZK4ky13He0pCDQGEV4W45s6kgIFh8XJvBN9xcJhVyH53D
CB87GGaroS4powxHdLrkkx9UpS26gC2pVF0p0GzXAAcmRB2W6pVwwjDlCgvkgrBq
nuxoICNystfAxLzSq671J3AjxB1iu47/g8724kupp9HTl/F4bhTVL9H4yTuO+Y6s
yb/tdhgxgEn7kE4nd9I+eOmigBvW0xCoMTVkndOPYvbdjyh635Xn3fZWOduoHURo
qKsMBgyy0a8rKCZpIChJwrWV5/tA9pjwodMxrsgM2bVdC1kB39ip14PeFp9Y+7Gv
PHsjM15Jwa+aGyi+6lLySFWaGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:29 2024 by rpki-client on console-ams.rpki-client.org