Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gKROy9RHcxkcK3xrBV_vTAMF45E.roa
File:                     gKROy9RHcxkcK3xrBV_vTAMF45E.roa (raw, json)
Hash identifier:          70qHaI//OP27ZY5/83PQBNdf+vVCsk1LCXjjJnBuVCw=
Subject key identifier:   80:A4:4E:CB:D4:47:73:19:1C:2B:7C:6B:05:5F:EF:4C:03:05:E3:91
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019428282FD989BBFD41E86D7022D4412BE6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gKROy9RHcxkcK3xrBV_vTAMF45E.roa
Signing time:             Thu 02 Jan 2025 17:55:09 +0000
ROA not before:           Thu 02 Jan 2025 17:55:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210024
IP address blocks:        92.247.78.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:28:2f:d9:89:bb:fd:41:e8:6d:70:22:d4:41:2b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 17:55:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=80a44ecbd44773191c2b7c6b055fef4c0305e391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:40:aa:ae:5e:9b:64:a4:de:97:9e:87:74:
                    d3:08:cb:15:bf:a2:e6:53:87:47:18:62:ee:ff:9e:
                    2f:ad:de:50:b1:94:76:7d:5b:ca:73:e8:a6:27:36:
                    e4:c1:af:62:f6:86:c4:b7:ea:42:f3:87:c1:49:0a:
                    80:7b:98:19:55:b8:47:f1:b4:6f:68:72:18:7a:39:
                    5b:7c:62:d9:a0:1b:f1:3b:fc:9c:dd:65:2c:c6:15:
                    53:e1:c0:94:af:05:5f:99:6e:27:4b:ec:2a:d7:ca:
                    5b:a4:3b:c7:e6:4a:d3:bd:8e:a4:a9:e9:a9:ae:96:
                    be:97:61:93:66:7a:35:58:15:dc:c8:fa:02:2e:e0:
                    42:b5:b9:89:16:e2:b0:74:1d:c2:e5:3d:e3:6b:ed:
                    1a:29:a3:e9:8d:52:4c:cc:3e:eb:b4:00:23:22:3b:
                    1a:87:f1:67:c7:d0:f5:9c:b6:c6:20:74:7d:2c:37:
                    79:cf:f0:64:ac:3b:69:d3:b0:be:4e:38:24:64:1f:
                    a6:14:f9:d1:db:8f:87:dd:c9:4a:ff:93:7e:e7:10:
                    34:53:c8:81:42:32:ce:50:c9:75:90:b3:9f:5b:81:
                    35:eb:8d:da:f1:d5:be:3f:a1:5e:57:c8:5f:e5:2b:
                    59:b1:94:41:1f:15:b0:4a:4e:dd:78:5f:1b:10:a5:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A4:4E:CB:D4:47:73:19:1C:2B:7C:6B:05:5F:EF:4C:03:05:E3:91
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/gKROy9RHcxkcK3xrBV_vTAMF45E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:6c:35:24:c3:76:9a:bd:64:f3:a3:b6:b2:32:07:c1:44:a5:
         6d:6b:b6:6e:3b:a9:bc:68:aa:4e:50:4f:85:2a:8b:a0:1f:70:
         3b:6f:26:86:ff:00:96:19:d8:7e:3b:36:04:7e:cb:1d:ce:61:
         26:58:9d:ce:c4:e3:10:50:96:b8:bf:ae:1e:85:73:d1:58:1f:
         b0:2d:06:31:84:b6:6d:49:52:5c:16:f1:90:14:a5:9a:04:0c:
         9d:50:00:81:14:d5:9d:f1:70:b2:bf:88:c5:93:6a:d7:04:ea:
         c6:2c:9e:02:65:99:91:07:1e:8a:01:b3:2a:72:67:f6:3d:70:
         65:a9:a5:0e:b6:62:3b:00:ef:8d:06:6f:1b:a4:e3:71:a2:57:
         dc:f2:3c:f6:a5:6f:e0:1b:f6:52:3e:a0:22:aa:8c:ab:ee:28:
         f0:a4:fd:ce:f1:7f:f8:d3:7c:98:be:22:a1:58:30:66:e3:76:
         d1:ec:ef:19:96:de:b5:18:7d:3f:9f:9c:f7:87:40:5f:dc:73:
         cb:b5:52:23:74:63:04:da:cb:cb:53:d1:9a:d4:6a:4e:61:79:
         da:19:dc:88:18:37:25:50:20:fb:34:2d:7b:2d:b5:5e:4a:89:
         5a:9e:60:2e:bc:ce:b8:a2:14:9a:dc:95:16:34:e4:9a:ee:9f:
         f1:b1:de:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoKC/Zibv9QehtcCLUQSvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjUwMTAyMTc1NTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGE0NGVjYmQ0NDc3MzE5MWMyYjdjNmIwNTVmZWY0YzAzMDVlMzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwBAqq5em2Sk3peeh3TTCMsVv6Lm
U4dHGGLu/54vrd5QsZR2fVvKc+imJzbkwa9i9obEt+pC84fBSQqAe5gZVbhH8bRv
aHIYejlbfGLZoBvxO/yc3WUsxhVT4cCUrwVfmW4nS+wq18pbpDvH5krTvY6kqemp
rpa+l2GTZno1WBXcyPoCLuBCtbmJFuKwdB3C5T3ja+0aKaPpjVJMzD7rtAAjIjsa
h/Fnx9D1nLbGIHR9LDd5z/BkrDtp07C+TjgkZB+mFPnR24+H3clK/5N+5xA0U8iB
QjLOUMl1kLOfW4E1643a8dW+P6FeV8hf5StZsZRBHxWwSk7deF8bEKVo8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICkTsvUR3MZHCt8awVf70wDBeORMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvZ0tST3k5UkhjeGtjSzN4ckJWX3ZUQU1GNDVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXPdOMA0G
CSqGSIb3DQEBCwUAA4IBAQCIbDUkw3aavWTzo7ayMgfBRKVta7ZuO6m8aKpOUE+F
KougH3A7byaG/wCWGdh+OzYEfssdzmEmWJ3OxOMQUJa4v64ehXPRWB+wLQYxhLZt
SVJcFvGQFKWaBAydUACBFNWd8XCyv4jFk2rXBOrGLJ4CZZmRBx6KAbMqcmf2PXBl
qaUOtmI7AO+NBm8bpONxolfc8jz2pW/gG/ZSPqAiqoyr7ijwpP3O8X/403yYviKh
WDBm43bR7O8Zlt61GH0/n5z3h0Bf3HPLtVIjdGME2svLU9Ga1GpOYXnaGdyIGDcl
UCD7NC17LbVeSolanmAuvM64ohSa3JUWNOSa7p/xsd6v
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:26 2025 by rpki-client