Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa
File:                     HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa (raw, json)
Hash identifier:          RicpQBtJkI9PHaIHcV49nTjSHfOb+vUT60hFn7+oNUs=
Subject key identifier:   1C:08:DA:57:DE:1F:DF:23:E5:A5:59:1B:E8:CE:8B:F6:26:72:17:D4
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       018225F92CFC6BFAC01C0A045BCC3138E2C8
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa
Signing time:             Fri 22 Jul 2022 12:54:23 +0000
ROA not before:           Fri 22 Jul 2022 12:54:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197890
IP address blocks:        213.139.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:25:f9:2c:fc:6b:fa:c0:1c:0a:04:5b:cc:31:38:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Jul 22 12:54:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c08da57de1fdf23e5a5591be8ce8bf6267217d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:e0:ce:f6:95:e7:39:83:5b:aa:c7:a8:39:
                    a7:ca:ab:68:27:72:3d:cb:2f:95:d2:f9:0e:88:0e:
                    2a:37:22:81:fe:30:ce:88:0f:f3:a2:ed:f8:eb:20:
                    3c:db:1a:dd:bc:43:db:4c:10:28:3c:e5:dc:d1:d4:
                    c8:39:7c:cb:42:b5:3d:63:cf:5e:52:fa:a0:96:14:
                    80:b4:01:69:ed:f4:7a:95:ef:3f:68:23:c4:42:56:
                    57:a3:05:53:90:c9:42:9d:8c:08:16:88:0a:84:f7:
                    3f:42:b5:4d:9f:9a:ca:27:ef:93:17:f2:92:cf:2b:
                    aa:a8:9c:d0:c4:8d:b2:a8:66:7b:b5:76:61:12:b9:
                    b2:f7:18:f2:8e:fe:54:a6:5a:02:68:76:b2:ad:ff:
                    e1:07:c9:da:12:c9:f2:76:f1:f9:6d:72:85:95:64:
                    62:56:84:34:db:63:0e:ba:a2:6d:59:c0:42:7f:fc:
                    88:eb:bf:44:db:8c:93:d7:e8:6d:a3:9c:2b:c4:76:
                    02:0f:af:07:91:3e:78:01:16:32:77:21:e0:99:3f:
                    7a:7d:8d:71:6a:82:64:83:ec:03:19:a2:b7:c1:05:
                    60:2b:61:4c:75:2f:c3:6a:de:99:db:07:3a:cb:af:
                    8c:0c:75:47:59:ae:2a:43:fd:77:e8:53:4a:a8:29:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:08:DA:57:DE:1F:DF:23:E5:A5:59:1B:E8:CE:8B:F6:26:72:17:D4
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/HAjaV94f3yPlpVkb6M6L9iZyF9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:25:e2:b0:27:04:c6:f4:e1:3f:0b:6b:88:17:f5:45:65:c3:
         60:ea:75:88:cf:12:c9:a1:a5:af:cf:ff:44:ad:57:9c:2e:71:
         c0:0d:f1:89:e0:f9:f5:5a:8b:af:82:1d:9c:8a:89:ec:11:b1:
         ca:b8:cd:df:5f:b5:c8:26:ac:24:55:d7:9c:5a:71:57:0a:0b:
         a7:22:7d:a8:b3:c0:a2:95:0b:e2:42:71:c0:c8:b8:c5:e6:80:
         84:bc:63:00:1b:66:3e:b8:d7:47:54:e4:3b:ca:4c:fa:e1:23:
         fc:f0:da:6f:94:22:e2:95:25:d8:4c:ef:67:4c:49:33:1b:f3:
         f7:8f:4e:1c:7a:69:75:47:63:8d:8f:0e:9a:f4:1d:15:94:09:
         b9:11:33:eb:77:ba:74:5b:83:2e:fa:c5:aa:15:ba:46:e9:ca:
         61:6c:11:e4:d8:68:1d:df:3a:b7:91:29:e2:53:00:01:37:a8:
         00:ac:0e:6b:88:78:71:15:03:d5:19:da:79:43:c9:90:9b:dd:
         66:ea:e2:52:3d:b8:ce:2d:e9:f2:92:f3:10:91:f4:20:de:4b:
         b9:5b:70:3a:b4:58:12:c4:ae:96:8e:72:10:94:f6:ee:83:1e:
         d1:5a:bd:92:04:60:38:67:fe:c7:b6:a2:0b:0d:e4:bf:0a:aa:
         18:c7:d3:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIl+Sz8a/rAHAoEW8wxOOLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFl
NzEyZWUwHhcNMjIwNzIyMTI1NDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzA4ZGE1N2RlMWZkZjIzZTVhNTU5MWJlOGNlOGJmNjI2NzIxN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQrgzvaV5zmDW6rHqDmnyqtoJ3I9
yy+V0vkOiA4qNyKB/jDOiA/zou346yA82xrdvEPbTBAoPOXc0dTIOXzLQrU9Y89e
UvqglhSAtAFp7fR6le8/aCPEQlZXowVTkMlCnYwIFogKhPc/QrVNn5rKJ++TF/KS
zyuqqJzQxI2yqGZ7tXZhErmy9xjyjv5UploCaHayrf/hB8naEsnydvH5bXKFlWRi
VoQ022MOuqJtWcBCf/yI679E24yT1+hto5wrxHYCD68HkT54ARYydyHgmT96fY1x
aoJkg+wDGaK3wQVgK2FMdS/Dat6Z2wc6y6+MDHVHWa4qQ/136FNKqClUlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwI2lfeH98j5aVZG+jOi/YmchfUMB8GA1UdIwQY
MBaAFAlIdfQGeV20KgF53x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUt
ODY0NTgwZDAyZjgxLzEvSEFqYVY5NGYzeVBscFZrYjZNNkw5aVp5RjlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgx
LzEvQ1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YtAMA0G
CSqGSIb3DQEBCwUAA4IBAQBZJeKwJwTG9OE/C2uIF/VFZcNg6nWIzxLJoaWvz/9E
rVecLnHADfGJ4Pn1Wouvgh2cionsEbHKuM3fX7XIJqwkVdecWnFXCgunIn2os8Ci
lQviQnHAyLjF5oCEvGMAG2Y+uNdHVOQ7ykz64SP88NpvlCLilSXYTO9nTEkzG/P3
j04ceml1R2ONjw6a9B0VlAm5ETPrd7p0W4Mu+sWqFbpG6cphbBHk2Ggd3zq3kSni
UwABN6gArA5riHhxFQPVGdp5Q8mQm91m6uJSPbjOLenykvMQkfQg3ku5W3A6tFgS
xK6WjnIQlPbugx7RWr2SBGA4Z/7HtqILDeS/CqoYx9OW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org