Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/JuP7JOSzKtzgX8XX8pZfUZdAl4w.roa
File:                     JuP7JOSzKtzgX8XX8pZfUZdAl4w.roa (raw, json)
Hash identifier:          lCRQAKGH/XtSbGk2k2zL9fYCueICKPjbp2fZMW48kj4=
Subject key identifier:   26:E3:FB:24:E4:B3:2A:DC:E0:5F:C5:D7:F2:96:5F:51:97:40:97:8C
Certificate issuer:       /CN=3f501b4b8afc239ce256cd1d391d7174f93b2515
Certificate serial:       01856D4AA266CD0D0FFAF563FDE9FB658633
Authority key identifier: 3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/JuP7JOSzKtzgX8XX8pZfUZdAl4w.roa
Signing time:             Sun 01 Jan 2023 12:24:45 +0000
ROA not before:           Sun 01 Jan 2023 12:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212147
IP address blocks:        194.26.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:a2:66:cd:0d:0f:fa:f5:63:fd:e9:fb:65:86:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f501b4b8afc239ce256cd1d391d7174f93b2515
        Validity
            Not Before: Jan  1 12:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26e3fb24e4b32adce05fc5d7f2965f519740978c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:d5:50:8c:3b:7c:c7:c7:cb:a8:d8:ef:eb:
                    71:95:6e:4a:5a:5d:2c:c8:a7:b4:b0:3c:b2:5f:5f:
                    f6:ce:c8:6c:b2:79:15:9a:cd:58:25:d7:d0:c6:05:
                    94:fd:1d:36:bf:6b:ac:60:41:14:e8:f4:08:55:78:
                    cb:df:9c:45:73:06:bc:1e:ae:98:57:91:29:97:ed:
                    7c:54:70:3e:46:c6:69:f9:b0:22:de:71:5b:91:d7:
                    34:20:f6:25:ad:63:a3:f7:0b:18:d7:57:f7:41:92:
                    d4:b1:a1:5d:fb:74:43:b8:cb:dc:18:ed:59:af:42:
                    d4:78:44:76:40:a8:c6:a7:da:19:58:97:7d:a6:b6:
                    34:39:cc:aa:05:ec:7d:6b:fd:00:fd:86:b6:52:00:
                    79:b3:8f:7c:27:45:b2:f6:9c:2e:2a:06:de:de:25:
                    c1:c3:ac:55:07:ff:cf:fd:65:a6:05:9c:72:94:18:
                    2d:e1:e1:4a:e2:01:dd:b5:aa:a4:be:86:74:63:ab:
                    5d:fd:b5:e8:f1:e6:0d:da:76:cd:50:2e:02:66:21:
                    50:c5:51:1b:06:b2:32:e3:b3:76:2b:66:c7:b9:80:
                    26:9e:87:7d:64:95:3c:f3:d9:49:78:04:7e:71:2b:
                    1c:74:8b:20:2d:98:65:6a:9d:23:b6:c6:9c:86:fc:
                    0a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E3:FB:24:E4:B3:2A:DC:E0:5F:C5:D7:F2:96:5F:51:97:40:97:8C
            X509v3 Authority Key Identifier:
                keyid:3F:50:1B:4B:8A:FC:23:9C:E2:56:CD:1D:39:1D:71:74:F9:3B:25:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1AbS4r8I5ziVs0dOR1xdPk7JRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/JuP7JOSzKtzgX8XX8pZfUZdAl4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/99488d-3bd6-462a-9cc8-9bc3816a0e15/1/P1AbS4r8I5ziVs0dOR1xdPk7JRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:45:ab:82:c2:60:a3:be:4d:99:fb:64:d4:c6:de:fc:c4:a6:
         f7:e0:1f:36:fe:1c:fa:ef:44:f8:65:65:f1:28:e7:e6:80:b4:
         39:f4:54:12:27:26:5b:c3:78:33:67:c2:ca:ac:5f:9a:b4:d7:
         40:cf:29:20:29:00:1a:65:4c:8b:c8:4b:2f:07:8b:9f:40:e8:
         7c:bc:2b:55:ba:ee:c5:f5:e4:0c:6d:86:4a:3d:b0:df:6a:14:
         fe:a7:26:b0:4c:d0:f1:bc:59:41:15:b5:c4:c6:34:c1:7d:33:
         d1:e4:f5:a0:a0:08:53:1d:21:96:d8:8d:98:f6:db:e2:4a:3d:
         ab:a0:2b:1e:bc:5f:f5:b4:b4:b3:b8:2d:47:c8:45:f6:a3:91:
         1e:31:ce:ed:70:09:b4:a7:58:ed:ac:f1:5f:77:56:04:e8:17:
         bc:61:8d:32:65:cf:5e:83:e5:e5:51:4a:0b:23:cd:82:90:46:
         aa:6c:70:c3:ae:ca:04:28:71:30:e9:90:a4:f2:be:f4:8c:67:
         bd:7b:48:cc:89:52:98:b5:83:75:79:b2:ec:19:b1:e5:96:2a:
         4f:e7:ac:4a:85:81:17:bd:aa:8f:ab:8d:ba:cb:b0:4b:04:27:
         dd:12:9b:85:d6:6f:6f:1e:24:25:75:f8:58:ba:5e:dc:09:1f:
         d0:e1:a6:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtSqJmzQ0P+vVj/en7ZYYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNTAxYjRiOGFmYzIzOWNlMjU2Y2QxZDM5MWQ3MTc0Zjkz
YjI1MTUwHhcNMjMwMTAxMTIyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmUzZmIyNGU0YjMyYWRjZTA1ZmM1ZDdmMjk2NWY1MTk3NDA5NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiPVUIw7fMfHy6jY7+txlW5KWl0s
yKe0sDyyX1/2zshssnkVms1YJdfQxgWU/R02v2usYEEU6PQIVXjL35xFcwa8Hq6Y
V5Epl+18VHA+RsZp+bAi3nFbkdc0IPYlrWOj9wsY11f3QZLUsaFd+3RDuMvcGO1Z
r0LUeER2QKjGp9oZWJd9prY0OcyqBex9a/0A/Ya2UgB5s498J0Wy9pwuKgbe3iXB
w6xVB//P/WWmBZxylBgt4eFK4gHdtaqkvoZ0Y6td/bXo8eYN2nbNUC4CZiFQxVEb
BrIy47N2K2bHuYAmnod9ZJU889lJeAR+cSscdIsgLZhlap0jtsachvwKDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCbj+yTksyrc4F/F1/KWX1GXQJeMMB8GA1UdIwQY
MBaAFD9QG0uK/COc4lbNHTkdcXT5OyUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFBYlM0cjhJNXppVnMwZE9SMXhkUGs3SlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85OTQ4OGQtM2JkNi00NjJhLTljYzgt
OWJjMzgxNmEwZTE1LzEvSnVQN0pPU3pLdHpnWDhYWDhwWmZVWmRBbDR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85OTQ4OGQtM2JkNi00NjJhLTljYzgtOWJjMzgxNmEwZTE1
LzEvUDFBYlM0cjhJNXppVnMwZE9SMXhkUGs3SlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhqJMA0G
CSqGSIb3DQEBCwUAA4IBAQAkRauCwmCjvk2Z+2TUxt78xKb34B82/hz670T4ZWXx
KOfmgLQ59FQSJyZbw3gzZ8LKrF+atNdAzykgKQAaZUyLyEsvB4ufQOh8vCtVuu7F
9eQMbYZKPbDfahT+pyawTNDxvFlBFbXExjTBfTPR5PWgoAhTHSGW2I2Y9tviSj2r
oCsevF/1tLSzuC1HyEX2o5EeMc7tcAm0p1jtrPFfd1YE6Be8YY0yZc9eg+XlUUoL
I82CkEaqbHDDrsoEKHEw6ZCk8r70jGe9e0jMiVKYtYN1ebLsGbHllipP56xKhYEX
vaqPq426y7BLBCfdEpuF1m9vHiQldfhYul7cCR/Q4aZe
-----END CERTIFICATE-----
Generated at Mon Oct 16 12:55:19 2023 by rpki-client on console-fra.rpki-client.org