Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/W4phjf_dIIe-jNTFp_zKOHvWkok.roa
File:                     W4phjf_dIIe-jNTFp_zKOHvWkok.roa (raw, json)
Hash identifier:          Yly+0quB1M83yFn0usrfcG5BYhAuOyYIreOVI88wrQs=
Subject key identifier:   5B:8A:61:8D:FF:DD:20:87:BE:8C:D4:C5:A7:FC:CA:38:7B:D6:92:89
Certificate issuer:       /CN=fc89c5b490a629d06313470180a67f645188b6b5
Certificate serial:       018CC3B687A02B8629875765ECE140AC6158
Authority key identifier: FC:89:C5:B4:90:A6:29:D0:63:13:47:01:80:A6:7F:64:51:88:B6:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_InFtJCmKdBjE0cBgKZ_ZFGItrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/W4phjf_dIIe-jNTFp_zKOHvWkok.roa
Signing time:             Mon 01 Jan 2024 06:29:28 +0000
ROA not before:           Mon 01 Jan 2024 06:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206471
IP address blocks:        194.26.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b6:87:a0:2b:86:29:87:57:65:ec:e1:40:ac:61:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc89c5b490a629d06313470180a67f645188b6b5
        Validity
            Not Before: Jan  1 06:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5b8a618dffdd2087be8cd4c5a7fcca387bd69289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:c0:cd:d7:38:84:ae:e7:92:ad:dc:b8:97:
                    fa:74:fa:40:39:6d:5c:83:af:cc:6e:a5:b7:0b:3c:
                    7b:28:c8:d3:f6:2d:2d:3f:7f:e6:31:5c:a2:a3:56:
                    12:24:1f:01:50:35:bd:60:fc:c1:00:ca:52:e6:01:
                    fc:72:96:69:9e:f9:3a:a3:e2:fb:b8:06:fd:9c:bd:
                    49:ca:90:d2:2f:65:8e:58:40:df:c0:bb:a0:45:bd:
                    3a:19:9b:69:b7:a0:d0:56:b2:10:bc:47:7b:4c:a3:
                    fd:86:38:79:3e:34:d1:51:5f:30:f0:87:ea:9f:3e:
                    96:2c:eb:d6:40:94:fe:81:07:ff:f7:ef:ea:4d:4d:
                    b2:cf:4a:6e:3e:c1:3b:32:87:cd:14:2c:72:33:7e:
                    68:7c:5c:b0:29:5d:ef:1b:13:6e:61:25:71:d5:2d:
                    4a:1f:a5:21:06:30:35:d0:f3:03:86:11:2e:26:00:
                    b3:87:7a:f7:45:f9:e3:1f:f3:e2:1d:1c:b2:a1:64:
                    fb:98:16:f0:ea:c9:18:e0:b6:7d:28:d9:e9:7b:10:
                    6b:15:9a:85:ce:cd:a9:8e:7c:bc:54:d6:e7:98:35:
                    dd:0c:ee:76:14:f1:41:39:84:4c:3f:d8:78:0f:69:
                    fa:53:8b:b6:1d:ca:17:88:fa:54:a1:bf:c8:4a:9a:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:61:8D:FF:DD:20:87:BE:8C:D4:C5:A7:FC:CA:38:7B:D6:92:89
            X509v3 Authority Key Identifier:
                keyid:FC:89:C5:B4:90:A6:29:D0:63:13:47:01:80:A6:7F:64:51:88:B6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_InFtJCmKdBjE0cBgKZ_ZFGItrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/W4phjf_dIIe-jNTFp_zKOHvWkok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bc58bd-0e78-4bf1-8666-ed84c078c841/1/_InFtJCmKdBjE0cBgKZ_ZFGItrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:d5:55:a0:c0:9b:9d:11:01:34:32:91:cb:cb:9a:c7:b5:
         49:91:25:69:5a:f4:10:2a:2f:6a:dd:e7:8d:ad:ac:6f:4a:e0:
         b8:e5:26:ec:db:c5:51:9d:91:a2:25:47:20:a7:dd:dd:2b:42:
         e2:88:11:17:94:0a:db:72:0c:55:99:dd:4e:cf:d0:d4:36:13:
         88:48:cc:b4:4a:64:d2:5c:d7:f0:9e:0e:a6:c1:d0:97:b1:2e:
         fe:b3:f8:cb:ad:5f:b4:d7:86:86:c7:4d:cf:87:4b:91:1f:8c:
         2a:4b:03:61:55:90:ce:7f:ef:7c:58:62:5a:f4:c7:f1:a6:43:
         40:bb:37:ce:51:35:db:48:a4:32:82:ed:82:8b:cf:22:ca:a7:
         a9:42:af:8b:0b:de:75:39:0e:fd:72:fd:e9:4f:8a:4a:5b:d9:
         19:10:7e:74:b6:97:f0:a7:21:29:6f:c0:c6:95:05:05:7a:fb:
         0f:0c:0c:7f:e7:08:61:19:bf:05:09:3b:e7:6d:e0:07:2c:2b:
         2b:63:dd:da:a8:f4:5f:7d:d2:0f:da:46:97:41:36:3b:a6:c3:
         20:70:10:f7:6c:cb:74:69:05:02:c7:ac:90:12:ba:06:a8:56:
         62:5b:6b:93:68:da:42:0b:6c:50:2e:3b:01:0a:d5:0f:79:54:
         4d:82:fd:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtoegK4Yph1dl7OFArGFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjODljNWI0OTBhNjI5ZDA2MzEzNDcwMTgwYTY3ZjY0NTE4
OGI2YjUwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjhhNjE4ZGZmZGQyMDg3YmU4Y2Q0YzVhN2ZjY2EzODdiZDY5Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXAzdc4hK7nkq3cuJf6dPpAOW1c
g6/MbqW3Czx7KMjT9i0tP3/mMVyio1YSJB8BUDW9YPzBAMpS5gH8cpZpnvk6o+L7
uAb9nL1JypDSL2WOWEDfwLugRb06GZtpt6DQVrIQvEd7TKP9hjh5PjTRUV8w8Ifq
nz6WLOvWQJT+gQf/9+/qTU2yz0puPsE7MofNFCxyM35ofFywKV3vGxNuYSVx1S1K
H6UhBjA10PMDhhEuJgCzh3r3RfnjH/PiHRyyoWT7mBbw6skY4LZ9KNnpexBrFZqF
zs2pjny8VNbnmDXdDO52FPFBOYRMP9h4D2n6U4u2HcoXiPpUob/ISprrzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuKYY3/3SCHvozUxaf8yjh71pKJMB8GA1UdIwQY
MBaAFPyJxbSQpinQYxNHAYCmf2RRiLa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0luRnRKQ21LZEJqRTBjQmdLWl9aRkdJdHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iYzU4YmQtMGU3OC00YmYxLTg2NjYt
ZWQ4NGMwNzhjODQxLzEvVzRwaGpmX2RJSWUtak5URnBfektPSHZXa29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iYzU4YmQtMGU3OC00YmYxLTg2NjYtZWQ4NGMwNzhjODQx
LzEvX0luRnRKQ21LZEJqRTBjQmdLWl9aRkdJdHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrGMA0G
CSqGSIb3DQEBCwUAA4IBAQBFf9VVoMCbnREBNDKRy8uax7VJkSVpWvQQKi9q3eeN
raxvSuC45Sbs28VRnZGiJUcgp93dK0LiiBEXlArbcgxVmd1Oz9DUNhOISMy0SmTS
XNfwng6mwdCXsS7+s/jLrV+014aGx03Ph0uRH4wqSwNhVZDOf+98WGJa9MfxpkNA
uzfOUTXbSKQygu2Ci88iyqepQq+LC951OQ79cv3pT4pKW9kZEH50tpfwpyEpb8DG
lQUFevsPDAx/5whhGb8FCTvnbeAHLCsrY93aqPRffdIP2kaXQTY7psMgcBD3bMt0
aQUCx6yQEroGqFZiW2uTaNpCC2xQLjsBCtUPeVRNgv0c
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:18 2024 by rpki-client on console-fra.rpki-client.org