Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/84kRVEdiTmIzkX_UdDBUSnWVPZc.roa
File:                     84kRVEdiTmIzkX_UdDBUSnWVPZc.roa (raw, json)
Hash identifier:          6mo8Y43KxA2q68wPU2luyRL3umwUncIIG+IoCZyVpio=
Subject key identifier:   F3:89:11:54:47:62:4E:62:33:91:7F:D4:74:30:54:4A:75:95:3D:97
Certificate issuer:       /CN=eb81f2566177790fad880d610e37cdd209847207
Certificate serial:       0186B60364E7F463C7BD2C7B2852F2A9A3C7
Authority key identifier: EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/84kRVEdiTmIzkX_UdDBUSnWVPZc.roa
Signing time:             Mon 06 Mar 2023 08:22:01 +0000
ROA not before:           Mon 06 Mar 2023 08:22:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62257
IP address blocks:        185.217.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b6:03:64:e7:f4:63:c7:bd:2c:7b:28:52:f2:a9:a3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb81f2566177790fad880d610e37cdd209847207
        Validity
            Not Before: Mar  6 08:22:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f389115447624e6233917fd47430544a75953d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:54:23:28:22:de:94:ab:5f:89:1e:2e:49:
                    35:ec:13:8a:88:bf:87:88:9e:e4:95:74:20:24:4b:
                    15:f1:cd:86:1a:57:ca:e8:ba:f1:ce:4b:21:90:e1:
                    b8:18:b8:a8:d1:ec:c5:70:c5:45:bc:2d:01:ef:30:
                    98:c4:1f:2b:2c:c2:17:8c:96:7a:ca:65:2f:37:20:
                    37:15:37:55:da:13:4d:da:f6:ec:43:b9:52:32:c9:
                    e3:44:dc:18:4f:a8:41:7d:96:8f:43:bd:59:fc:68:
                    42:ad:8f:a4:23:32:45:25:15:78:e9:ba:a1:11:15:
                    09:d8:64:84:8f:f5:8c:88:7c:97:e3:d4:40:09:37:
                    0b:58:e8:fe:4b:8a:d4:25:f1:e7:d1:e9:bd:36:fc:
                    c2:7d:23:ca:74:1e:98:54:a7:01:52:f3:f2:09:25:
                    b5:1c:86:bd:f4:2c:73:74:a7:e8:6c:1e:a4:f3:04:
                    5b:d4:1f:a4:4f:b4:72:d0:96:f7:a1:64:c5:a0:ec:
                    6e:d8:e7:0a:25:78:0d:d7:68:2a:57:8f:0f:e8:39:
                    52:c9:4e:48:44:ad:97:0c:eb:6a:64:2d:0b:e9:4a:
                    c3:de:89:45:78:a2:53:77:90:c5:28:1d:c3:ff:04:
                    cc:3d:25:46:4f:2f:e0:8e:6a:db:1c:46:56:c0:a2:
                    95:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:11:54:47:62:4E:62:33:91:7F:D4:74:30:54:4A:75:95:3D:97
            X509v3 Authority Key Identifier:
                keyid:EB:81:F2:56:61:77:79:0F:AD:88:0D:61:0E:37:CD:D2:09:84:72:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64HyVmF3eQ-tiA1hDjfN0gmEcgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/84kRVEdiTmIzkX_UdDBUSnWVPZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/29ca77-876a-4beb-8cfd-35f6faa1500e/1/64HyVmF3eQ-tiA1hDjfN0gmEcgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:50:6f:e8:ff:de:09:77:b6:39:9a:0d:1f:73:a1:4c:8a:3e:
         79:4e:bd:46:b0:d4:77:ec:c8:66:34:c8:1c:0c:55:5f:53:0d:
         6e:00:96:e9:48:16:9f:6e:03:d5:28:ff:c6:90:49:87:9d:5c:
         e4:90:a9:cf:f4:69:d1:39:f8:d5:3c:16:42:8e:56:8c:3d:29:
         9c:7a:aa:52:f3:db:53:b3:3c:21:6d:2e:6b:f1:02:6a:c7:35:
         08:28:90:6d:6f:59:68:97:7c:c3:10:32:6b:68:f7:e0:25:6f:
         0e:9b:93:8c:76:ca:08:2a:c6:17:14:62:b5:bc:fe:3c:fe:d6:
         25:a8:6f:52:78:9f:53:a5:2b:50:ba:13:73:25:64:ac:10:f4:
         1e:b8:cf:43:05:64:58:bc:4a:30:64:8b:ce:83:c6:0a:61:13:
         3e:32:cf:2e:4f:ed:fa:1d:87:ad:6d:54:1e:f2:0f:b0:25:ce:
         8b:36:99:64:b8:4d:3b:c5:0d:37:9f:03:6f:b9:fc:b9:19:79:
         e5:7b:57:ee:88:a3:f0:a5:a4:9f:a2:dd:40:c4:eb:e0:e8:e0:
         fa:ae:5e:e8:b1:e4:71:1f:4b:60:12:a1:a0:ae:ee:6c:8a:55:
         ab:02:28:da:2e:9c:62:4c:77:56:a3:bc:10:aa:29:48:3d:91:
         9f:a5:ec:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa2A2Tn9GPHvSx7KFLyqaPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViODFmMjU2NjE3Nzc5MGZhZDg4MGQ2MTBlMzdjZGQyMDk4
NDcyMDcwHhcNMjMwMzA2MDgyMjAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzg5MTE1NDQ3NjI0ZTYyMzM5MTdmZDQ3NDMwNTQ0YTc1OTUzZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1UIygi3pSrX4keLkk17BOKiL+H
iJ7klXQgJEsV8c2GGlfK6LrxzkshkOG4GLio0ezFcMVFvC0B7zCYxB8rLMIXjJZ6
ymUvNyA3FTdV2hNN2vbsQ7lSMsnjRNwYT6hBfZaPQ71Z/GhCrY+kIzJFJRV46bqh
ERUJ2GSEj/WMiHyX49RACTcLWOj+S4rUJfHn0em9NvzCfSPKdB6YVKcBUvPyCSW1
HIa99CxzdKfobB6k8wRb1B+kT7Ry0Jb3oWTFoOxu2OcKJXgN12gqV48P6DlSyU5I
RK2XDOtqZC0L6UrD3olFeKJTd5DFKB3D/wTMPSVGTy/gjmrbHEZWwKKVTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPOJEVRHYk5iM5F/1HQwVEp1lT2XMB8GA1UdIwQY
MBaAFOuB8lZhd3kPrYgNYQ43zdIJhHIHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjRIeVZtRjNlUS10aUExaERqZk4wZ21FY2djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yOWNhNzctODc2YS00YmViLThjZmQt
MzVmNmZhYTE1MDBlLzEvODRrUlZFZGlUbUl6a1hfVWREQlVTbldWUFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yOWNhNzctODc2YS00YmViLThjZmQtMzVmNmZhYTE1MDBl
LzEvNjRIeVZtRjNlUS10aUExaERqZk4wZ21FY2djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudknMA0G
CSqGSIb3DQEBCwUAA4IBAQArUG/o/94Jd7Y5mg0fc6FMij55Tr1GsNR37MhmNMgc
DFVfUw1uAJbpSBafbgPVKP/GkEmHnVzkkKnP9GnROfjVPBZCjlaMPSmceqpS89tT
szwhbS5r8QJqxzUIKJBtb1lol3zDEDJraPfgJW8Om5OMdsoIKsYXFGK1vP48/tYl
qG9SeJ9TpStQuhNzJWSsEPQeuM9DBWRYvEowZIvOg8YKYRM+Ms8uT+36HYetbVQe
8g+wJc6LNplkuE07xQ03nwNvufy5GXnle1fuiKPwpaSfot1AxOvg6OD6rl7oseRx
H0tgEqGgru5silWrAijaLpxiTHdWo7wQqilIPZGfpezB
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:11 2024 by rpki-client on console-ams.rpki-client.org