Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZUT4oMsCBjEhHSuW8OS0KSQZKKM.roa
File:                     ZUT4oMsCBjEhHSuW8OS0KSQZKKM.roa (raw, json)
Hash identifier:          NI3PApbrmHq+E7ox1QGvdb+Nj16EaF8CNKj5Lig06Lk=
Subject key identifier:   65:44:F8:A0:CB:02:06:31:21:1D:2B:96:F0:E4:B4:29:24:19:28:A3
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       01856D9D1261D00EF9C9981D68278349872D
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZUT4oMsCBjEhHSuW8OS0KSQZKKM.roa
Signing time:             Sun 01 Jan 2023 13:54:48 +0000
ROA not before:           Sun 01 Jan 2023 13:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        92.114.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:9d:12:61:d0:0e:f9:c9:98:1d:68:27:83:49:87:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jan  1 13:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6544f8a0cb020631211d2b96f0e4b429241928a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:aa:cc:83:87:65:2e:ce:95:f8:4c:7d:08:
                    cc:af:58:0b:d6:66:75:73:48:ae:b4:b3:1d:0f:7d:
                    45:d5:c5:b6:c1:95:ff:3e:6e:58:06:27:f9:7d:2b:
                    d1:9a:9d:04:7e:3f:4c:f1:4e:fe:e4:be:48:98:dd:
                    64:68:31:bc:ed:cc:22:78:64:f5:d6:c2:ab:ef:73:
                    31:2c:47:9f:d5:53:a8:17:a6:b0:0a:b8:66:34:ca:
                    86:56:b8:a6:a5:8d:c9:80:49:40:11:26:a5:ca:53:
                    47:b6:6b:1a:96:c9:dd:8e:0b:79:5f:2c:da:72:d1:
                    70:ad:0c:a6:f0:6c:7e:fa:9e:38:3e:96:91:85:db:
                    9b:1c:6f:67:6f:06:47:67:50:55:bb:35:c1:37:63:
                    a3:96:9d:9b:6c:02:a0:29:cf:ab:97:09:13:b7:6a:
                    b2:dd:ef:b2:74:24:a6:58:de:47:11:c2:1f:80:25:
                    a6:bb:2a:18:01:dd:70:56:6b:26:a1:93:44:fd:ff:
                    cc:be:75:bd:75:90:25:0e:ed:fb:4d:48:6b:ab:d9:
                    54:99:0a:32:0c:59:83:60:f4:67:fb:24:9e:4e:af:
                    5e:f6:73:87:33:17:c9:ae:b0:aa:6c:86:bf:56:d3:
                    48:80:2a:51:4c:50:f6:5e:75:42:16:ef:84:d9:1c:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:44:F8:A0:CB:02:06:31:21:1D:2B:96:F0:E4:B4:29:24:19:28:A3
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ZUT4oMsCBjEhHSuW8OS0KSQZKKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f0:80:09:d0:a1:1d:85:85:00:98:27:c3:e3:ab:8c:e8:4f:
         a8:29:6b:75:5f:e3:9c:90:c7:93:54:f1:64:95:93:33:c7:10:
         77:be:1d:b3:e6:cd:8f:0f:14:c0:53:77:a8:c6:5c:48:f4:1f:
         a9:01:17:84:50:6b:fc:dc:cf:1e:d9:09:ab:af:54:84:e2:7e:
         f2:1d:91:90:b9:db:e4:57:24:3b:7a:67:9a:e2:29:14:f9:3b:
         c8:c9:16:62:14:93:73:39:48:6d:57:29:97:99:21:6a:2c:80:
         42:b5:bd:26:a8:72:e6:e2:cb:ab:26:65:71:dc:3c:d4:99:2d:
         95:5c:20:17:ff:3f:8d:55:39:af:57:91:de:a9:15:53:40:2a:
         1c:96:ef:df:7a:00:be:1a:d0:dc:77:22:69:dd:ed:19:db:d0:
         06:9a:41:50:64:2e:b4:97:ba:f0:2d:ae:5e:ad:5a:41:25:14:
         79:99:79:15:c5:5c:4e:aa:77:77:07:39:f2:31:c0:d6:8d:db:
         76:d8:f4:b5:73:a9:ac:ab:a9:f7:9b:1d:31:c1:2f:7a:37:79:
         f3:b3:7e:01:10:4a:dc:f8:d1:50:a0:52:c8:1f:c9:af:53:42:
         b2:32:e5:91:66:37:2a:8b:37:a2:92:4b:68:1d:db:89:a2:3c:
         0f:e5:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org