Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/s4BGmk7tt9eHvAvihiVJ2zxhoaQ.roa
File:                     s4BGmk7tt9eHvAvihiVJ2zxhoaQ.roa (raw, json)
Hash identifier:          dWh2kFkHbLoIMoWkzF582b9s2v6ZhD1rp/3mPNXy3uM=
Subject key identifier:   B3:80:46:9A:4E:ED:B7:D7:87:BC:0B:E2:86:25:49:DB:3C:61:A1:A4
Certificate issuer:       /CN=fb08bfb7f36f091de2744a72461e4d801ee7edb4
Certificate serial:       0538AD73
Authority key identifier: FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/s4BGmk7tt9eHvAvihiVJ2zxhoaQ.roa
Signing time:             Sat 01 Jan 2022 06:58:53 +0000
ROA not before:           Sat 01 Jan 2022 06:58:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134823
IP address blocks:        193.239.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87600499 (0x538ad73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb08bfb7f36f091de2744a72461e4d801ee7edb4
        Validity
            Not Before: Jan  1 06:58:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b380469a4eedb7d787bc0be2862549db3c61a1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:c8:57:b0:ee:bc:6f:4d:f9:83:36:a5:16:
                    1e:62:1c:aa:bb:70:39:c4:bb:41:72:99:0c:f7:5e:
                    9e:02:86:31:ba:00:c2:c6:80:22:24:49:4a:58:e9:
                    6c:80:ce:07:96:6a:e7:06:64:69:37:fe:65:41:ca:
                    e3:bf:8d:b3:1a:31:5f:3a:bc:4e:eb:6a:e8:ff:1a:
                    91:d7:47:49:ac:e4:a9:2a:cd:05:3a:56:67:80:df:
                    1e:3d:cc:9f:23:ec:9c:bf:a6:73:8a:59:d0:f0:f5:
                    3f:8d:0b:41:c3:4b:53:aa:28:45:3e:51:8a:23:bf:
                    bd:4c:c7:fb:81:83:a1:1f:7b:d3:77:e0:d4:da:36:
                    19:ff:e1:b9:5e:88:93:75:79:51:ec:61:a0:91:b3:
                    8f:73:ee:0b:c5:c6:b8:9a:64:f6:02:c4:35:0a:23:
                    3c:99:b7:49:d6:95:b1:6d:ee:cb:4c:ed:fb:d8:e9:
                    e6:38:1e:f5:e5:4f:5a:75:9a:f9:79:da:ce:3c:7d:
                    8f:13:77:e2:71:ae:dc:d5:f6:e6:da:70:58:f5:1b:
                    3e:06:59:27:34:6d:e7:08:56:43:0c:5f:7f:b9:9b:
                    cc:9b:46:99:d3:2b:2a:18:ef:94:26:9d:6b:3f:59:
                    bf:6c:43:e0:9e:f9:6f:d4:2f:27:bb:aa:7d:fd:51:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:80:46:9A:4E:ED:B7:D7:87:BC:0B:E2:86:25:49:DB:3C:61:A1:A4
            X509v3 Authority Key Identifier:
                keyid:FB:08:BF:B7:F3:6F:09:1D:E2:74:4A:72:46:1E:4D:80:1E:E7:ED:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/s4BGmk7tt9eHvAvihiVJ2zxhoaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9baf4f-a79c-4a92-b7c7-06a4795f52e5/1/1-wi_t_NvCR3idEpyRh5NgB7n7bQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:75:38:48:e8:c1:aa:91:94:79:33:d2:90:43:1f:90:5c:46:
         bc:04:37:d5:9d:27:9a:09:51:e8:f8:f3:1f:0c:be:17:0f:b7:
         9d:fd:f1:46:a8:24:9e:ea:73:82:0d:4d:0e:42:0f:61:6d:fd:
         94:42:5a:c8:10:97:b9:ce:15:e9:64:20:4b:98:26:f8:92:17:
         a9:c8:83:22:d8:ce:52:1d:d8:ef:02:a1:44:53:80:33:7b:78:
         10:d5:07:d1:ec:db:9c:db:b9:90:e7:45:9e:0d:4d:1c:17:a9:
         4c:59:c1:95:db:c1:73:68:78:81:03:e9:8b:c8:31:b2:c2:bc:
         f4:93:6f:ea:9f:6b:83:6e:29:5c:74:cb:95:33:35:ff:a6:cb:
         8c:ed:d4:51:66:b2:ec:08:87:fa:15:30:22:7b:b0:b5:fd:e3:
         6a:e9:37:3d:46:df:3c:dd:11:26:1e:8c:d7:06:ac:6a:8f:61:
         6e:ae:0c:d4:ab:27:11:68:c1:aa:8f:98:a0:73:67:f1:e1:d2:
         8c:47:77:23:8b:6c:83:9a:cb:03:86:fd:7a:e0:55:f5:ab:89:
         4f:2f:d1:58:ed:70:c4:9e:19:97:8a:61:76:57:e7:9d:cf:d2:
         05:c2:34:d2:95:98:e1:67:22:08:08:ef:41:30:69:18:90:01:
         91:e9:98:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-ams.rpki-client.org