Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa
File:                     GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (raw, json)
Hash identifier:          CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=
Subject key identifier:   19:C5:D9:5E:EA:D3:1A:B0:27:15:72:A3:BD:41:D4:F5:70:FF:63:24
Certificate issuer:       /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial:       019427482BD05029346EADC94E04F200EC05
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa
Signing time:             Thu 02 Jan 2025 13:50:28 +0000
ROA not before:           Thu 02 Jan 2025 13:50:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203411
IP address blocks:        185.135.144.0/24 maxlen: 24
                          185.135.145.0/24 maxlen: 24
                          185.135.146.0/24 maxlen: 24
                          185.135.147.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:2b:d0:50:29:34:6e:ad:c9:4e:04:f2:00:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
        Validity
            Not Before: Jan  2 13:50:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19c5d95eead31ab0271572a3bd41d4f570ff6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:e7:65:76:df:30:48:d7:d3:89:75:f7:3f:
                    42:37:47:02:a6:b7:78:86:fe:7c:9a:cf:4a:56:04:
                    b9:31:87:be:41:74:5b:bc:4d:73:da:92:bd:64:0c:
                    ef:e3:46:80:b7:1f:59:0d:f0:b6:94:98:76:50:a2:
                    02:7e:56:ae:89:45:ec:c2:f4:b3:02:ba:f2:4e:e6:
                    3e:3e:9c:4a:bc:35:f6:73:71:7a:1e:16:e5:97:76:
                    f4:16:8a:df:80:84:45:a5:ba:6d:58:4f:2c:28:5f:
                    0f:cb:91:8b:e7:d4:5e:86:e8:7a:61:11:b7:d7:b1:
                    3d:05:47:53:ef:c7:13:76:7f:f9:b6:0d:6b:82:fa:
                    1a:16:55:1e:18:33:f3:96:eb:b3:eb:61:0e:9f:43:
                    3b:82:f7:1e:15:e1:8d:fa:f1:d7:95:52:ff:ba:1c:
                    2a:a8:48:7a:c4:44:85:cd:e5:d4:e2:be:d7:a8:fd:
                    1a:be:1d:57:d8:0b:c5:eb:35:09:19:e6:c1:df:fb:
                    2f:a9:87:0e:32:da:05:5f:04:f5:a9:52:0a:3d:d1:
                    dd:12:38:d9:38:01:c6:f5:81:66:3a:66:fa:36:c9:
                    97:54:42:0c:e4:63:a2:58:c4:20:5f:9a:e6:e2:1e:
                    be:9a:3e:a6:ca:ae:71:fc:2e:5a:89:02:ea:77:2e:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C5:D9:5E:EA:D3:1A:B0:27:15:72:A3:BD:41:D4:F5:70:FF:63:24
            X509v3 Authority Key Identifier:
                keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:70:23:5a:d9:21:24:9c:38:8f:e6:50:6a:01:e9:cd:5d:
         29:f4:25:0e:9d:d2:ad:2f:fc:3a:67:41:bb:1a:95:81:d7:96:
         c3:4c:20:91:b2:83:ec:c1:44:a2:b1:87:b2:5d:11:6e:21:6a:
         a6:fe:15:b6:65:97:28:ee:09:88:3b:c5:f6:a8:2f:ed:13:79:
         47:ab:24:9e:0d:b0:1e:08:3f:3a:05:54:e2:4e:a1:e0:e1:3c:
         c2:59:b5:6d:65:a4:53:d0:4d:0b:8e:46:68:90:0c:f7:00:29:
         fe:3c:47:2b:62:28:6a:c0:d1:cc:28:e2:6d:9b:24:7d:c1:c9:
         03:ff:cb:a6:fa:f7:23:6d:74:c4:0e:2d:d6:64:46:05:d8:cb:
         d9:2f:b6:04:49:b3:6e:74:fa:d6:33:3e:cb:66:12:04:f6:c9:
         89:db:78:9d:7c:80:7a:90:51:f7:bb:14:6f:08:f3:66:32:c1:
         c4:75:9c:f2:cc:48:67:d1:cb:f3:a0:6c:29:7d:3f:71:9c:fa:
         f7:1d:2f:52:b4:e8:af:c5:6b:53:e4:a2:8f:17:73:c2:a2:e1:
         65:8b:ef:71:b2:ed:72:93:9b:de:78:79:8f:6f:a1:08:f0:a9:
         0b:c8:f3:ff:7b:17:6a:05:75:a2:17:21:8e:5c:03:d6:45:08:
         ed:dd:83:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSCvQUCk0bq3JTgTyAOwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi
NTg5ZGYwHhcNMjUwMTAyMTM1MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWM1ZDk1ZWVhZDMxYWIwMjcxNTcyYTNiZDQxZDRmNTcwZmY2MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LXnZXbfMEjX04l19z9CN0cCprd4
hv58ms9KVgS5MYe+QXRbvE1z2pK9ZAzv40aAtx9ZDfC2lJh2UKICflauiUXswvSz
ArryTuY+PpxKvDX2c3F6Hhbll3b0ForfgIRFpbptWE8sKF8Py5GL59Rehuh6YRG3
17E9BUdT78cTdn/5tg1rgvoaFlUeGDPzluuz62EOn0M7gvceFeGN+vHXlVL/uhwq
qEh6xESFzeXU4r7XqP0avh1X2AvF6zUJGebB3/svqYcOMtoFXwT1qVIKPdHdEjjZ
OAHG9YFmOmb6NsmXVEIM5GOiWMQgX5rm4h6+mj6myq5x/C5aiQLqdy79JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBnF2V7q0xqwJxVyo71B1PVw/2MkMB8GA1UdIwQY
MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct
ZTVjYTY3YzExNTMzLzEvR2NYWlh1clRHckFuRlhLanZVSFU5WERfWXlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz
LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYeQMA0G
CSqGSIb3DQEBCwUAA4IBAQAuNnAjWtkhJJw4j+ZQagHpzV0p9CUOndKtL/w6Z0G7
GpWB15bDTCCRsoPswUSisYeyXRFuIWqm/hW2ZZco7gmIO8X2qC/tE3lHqySeDbAe
CD86BVTiTqHg4TzCWbVtZaRT0E0LjkZokAz3ACn+PEcrYihqwNHMKOJtmyR9wckD
/8um+vcjbXTEDi3WZEYF2MvZL7YESbNudPrWMz7LZhIE9smJ23idfIB6kFH3uxRv
CPNmMsHEdZzyzEhn0cvzoGwpfT9xnPr3HS9StOivxWtT5KKPF3PCouFli+9xsu1y
k5veeHmPb6EI8KkLyPP/exdqBXWiFyGOXAPWRQjt3YNA
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:19 2025 by rpki-client