Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/ScZArVwVMI-RvzBKWL4mWHi6XmA.roa
File:                     ScZArVwVMI-RvzBKWL4mWHi6XmA.roa (raw, json)
Hash identifier:          JSd3R62maz5GX8AWHByoVcdC6hng/bktV2zb6B/C/aI=
Subject key identifier:   49:C6:40:AD:5C:15:30:8F:91:BF:30:4A:58:BE:26:58:78:BA:5E:60
Certificate issuer:       /CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
Certificate serial:       018480FB9C580EB2F5200144A429EAE10DE7
Authority key identifier: 01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/ScZArVwVMI-RvzBKWL4mWHi6XmA.roa
Signing time:             Wed 16 Nov 2022 15:08:03 +0000
ROA not before:           Wed 16 Nov 2022 15:08:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        194.49.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:80:fb:9c:58:0e:b2:f5:20:01:44:a4:29:ea:e1:0d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0141c53a7e41acca08f2ceb069a3cfff68f485eb
        Validity
            Not Before: Nov 16 15:08:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49c640ad5c15308f91bf304a58be265878ba5e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8f:10:9b:a1:8d:8e:4b:df:19:31:7f:fd:eb:
                    5c:8a:09:24:f7:0a:fb:d7:6f:ad:e8:93:1e:51:0e:
                    56:23:67:78:5f:59:54:ba:18:9b:d1:6a:35:5d:09:
                    59:df:a9:22:44:4d:66:f3:0b:36:a0:90:d7:6f:e3:
                    6d:0e:9c:ca:8a:fc:37:51:a3:fb:ab:b0:06:cb:3b:
                    fd:21:f0:31:38:33:17:c0:14:b9:10:82:d2:8c:fb:
                    82:0d:26:fa:6e:97:a2:11:af:64:85:9d:f6:a9:c4:
                    cc:3a:81:a8:4c:c1:18:cc:b3:89:f2:b3:84:db:82:
                    68:c8:86:8d:54:05:f7:26:38:73:7c:4d:ec:88:3f:
                    c7:72:60:99:88:75:fb:cf:94:3a:21:13:9a:fa:c7:
                    1b:45:74:2d:c3:6c:5d:6b:19:5a:34:67:cf:aa:94:
                    c5:9c:cb:69:32:47:3f:79:97:8f:81:d3:34:1c:ce:
                    58:f5:0c:7d:76:ab:a1:37:78:5c:b0:fa:52:2d:82:
                    26:8c:29:a5:70:1f:51:e4:3b:63:1e:c9:47:4a:66:
                    dd:8a:e0:53:b3:20:0c:68:11:78:9b:e8:bf:da:93:
                    79:73:80:6c:4e:fe:ff:ab:f0:60:87:53:4d:d4:47:
                    cb:1f:5b:0b:d6:36:01:e9:46:51:f8:da:e0:2a:9a:
                    38:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C6:40:AD:5C:15:30:8F:91:BF:30:4A:58:BE:26:58:78:BA:5E:60
            X509v3 Authority Key Identifier:
                keyid:01:41:C5:3A:7E:41:AC:CA:08:F2:CE:B0:69:A3:CF:FF:68:F4:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUHFOn5BrMoI8s6waaPP_2j0hes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/ScZArVwVMI-RvzBKWL4mWHi6XmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8f17fa-f428-4dd1-b28b-44362038d5d1/1/AUHFOn5BrMoI8s6waaPP_2j0hes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.49.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ff:dd:4e:48:b8:52:a3:58:6c:e1:0d:8e:2b:a7:44:14:96:
         67:2a:78:59:15:6c:f2:8c:50:5a:c8:dd:64:5f:ba:be:60:25:
         a4:ce:06:a1:93:53:be:8e:50:35:5e:9f:2a:5a:43:28:75:58:
         9e:08:59:29:af:8c:5c:b2:8f:ba:d8:9c:11:bd:73:46:88:0a:
         ed:e1:4f:8c:74:35:d3:e0:be:38:b8:1c:b6:ed:3d:88:e8:de:
         fe:c2:03:dc:ab:a9:10:04:95:62:11:8c:45:c4:cb:3d:11:87:
         ec:2d:80:1e:9f:cd:79:5b:97:38:93:82:38:a7:f8:4a:38:8c:
         43:83:9f:4c:5c:3c:a7:81:2f:8a:2d:33:6f:67:38:a2:24:1b:
         e1:1a:09:e3:ad:99:3d:51:2f:ef:f7:25:12:ab:59:a1:7c:ef:
         9e:34:95:b3:3e:95:dc:55:f0:94:ba:ed:cb:4e:18:58:40:2d:
         2d:80:1c:63:90:cc:10:e2:92:c4:37:dd:c8:e6:dd:f3:8e:94:
         c0:ad:8e:00:39:f2:52:86:18:3c:b5:d3:35:98:a6:4a:74:d6:
         83:10:72:d5:79:6e:34:e7:b5:4a:0f:09:e3:79:b8:08:39:f3:
         8f:c5:45:4a:f3:3a:6d:2c:6c:57:db:55:32:4c:39:fe:bf:44:
         0f:57:0b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:46 2024 by rpki-client on console-ams.rpki-client.org