Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/awv8bOkrWPo5wgoUgej0JLAwg5o.roa
File:                     awv8bOkrWPo5wgoUgej0JLAwg5o.roa (raw, json)
Hash identifier:          bZZ3KPDD8PW7/Jd/VxW1SN2+5punxfDAa7zW+K8yxoQ=
Subject key identifier:   6B:0B:FC:6C:E9:2B:58:FA:39:C2:0A:14:81:E8:F4:24:B0:30:83:9A
Certificate issuer:       /CN=8ee8be8eabf979cf917a174947d9f6b3e0cb197e
Certificate serial:       018964C050F4D57C4CE7A62932A6CD2BFD17
Authority key identifier: 8E:E8:BE:8E:AB:F9:79:CF:91:7A:17:49:47:D9:F6:B3:E0:CB:19:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jui-jqv5ec-RehdJR9n2s-DLGX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/awv8bOkrWPo5wgoUgej0JLAwg5o.roa
Signing time:             Mon 17 Jul 2023 16:47:52 +0000
ROA not before:           Mon 17 Jul 2023 16:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        109.205.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:50:f4:d5:7c:4c:e7:a6:29:32:a6:cd:2b:fd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8be8eabf979cf917a174947d9f6b3e0cb197e
        Validity
            Not Before: Jul 17 16:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b0bfc6ce92b58fa39c20a1481e8f424b030839a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:a9:8c:a2:bd:c8:61:88:27:f1:a5:7c:d1:
                    67:87:37:93:2d:70:df:83:b0:3c:3e:92:d4:85:f1:
                    ce:73:35:49:26:98:4b:cf:7f:a7:2a:20:55:8e:a6:
                    fa:5b:27:17:f3:a4:0b:58:ca:cf:41:23:a6:0b:51:
                    6b:a3:63:97:e0:25:a7:d0:2b:f8:21:7a:94:69:12:
                    bc:36:b3:a6:06:8b:e2:b1:5c:c2:ee:c7:05:aa:94:
                    7e:84:0c:4e:27:ef:5a:22:57:bc:95:1b:07:92:58:
                    ff:03:31:00:30:cf:32:0d:b3:77:69:d3:a7:21:24:
                    53:15:c9:d2:a9:bb:51:3c:e7:a6:ea:17:0d:ef:9d:
                    29:ec:3d:bc:ef:4f:ef:3f:9b:66:b8:f4:04:d1:43:
                    5f:3d:d3:04:fc:90:3d:45:e8:cd:d1:97:fa:d5:67:
                    b7:12:31:ba:05:3d:5b:47:2d:11:8f:13:19:6b:37:
                    b9:5f:c3:86:06:d8:2c:28:b7:55:23:9a:81:98:44:
                    29:14:d1:d3:bf:bd:da:24:d2:72:db:e4:d8:9d:eb:
                    a5:9a:cb:23:0c:85:bb:74:b5:97:d3:d2:e3:03:40:
                    58:d9:c1:9f:4d:8b:6a:e4:9e:9f:ac:75:0f:a6:59:
                    6f:d5:8e:c6:83:ad:0c:a3:82:aa:31:8e:93:cc:64:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0B:FC:6C:E9:2B:58:FA:39:C2:0A:14:81:E8:F4:24:B0:30:83:9A
            X509v3 Authority Key Identifier:
                keyid:8E:E8:BE:8E:AB:F9:79:CF:91:7A:17:49:47:D9:F6:B3:E0:CB:19:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jui-jqv5ec-RehdJR9n2s-DLGX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/awv8bOkrWPo5wgoUgej0JLAwg5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/301372-dde2-4ee3-aaad-ce51bbbe4317/1/jui-jqv5ec-RehdJR9n2s-DLGX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:a5:e2:61:d7:d3:2d:77:dd:fc:e4:d3:67:50:12:9c:5d:
         76:68:cd:9d:84:62:1b:ba:61:15:d4:6f:85:e3:c9:a3:e6:ee:
         7d:f6:94:d8:c9:8f:62:5c:e5:49:c4:69:09:37:86:c8:83:fe:
         91:c7:67:39:24:23:88:83:b8:59:49:9a:79:cc:e3:67:2d:cd:
         9d:9a:a4:90:8b:99:5d:fa:63:d6:f5:51:bf:04:a8:97:09:1d:
         28:0f:bd:21:d9:f8:ce:af:2c:bf:7a:42:33:50:b4:80:13:2f:
         8e:6b:a8:58:61:2e:99:d8:dc:11:6e:07:86:14:30:63:92:2a:
         75:b9:fe:a3:da:ab:f2:0f:09:92:ee:9b:e8:68:91:2f:03:ed:
         1f:0c:de:46:1e:d8:07:92:d1:d0:23:45:9a:ee:9d:71:95:35:
         93:e8:83:25:63:94:13:bb:60:a6:27:6a:3f:eb:ad:56:56:05:
         a7:1c:0a:33:01:b1:bb:00:14:d1:35:0d:c7:40:9e:3e:40:18:
         da:03:a8:99:26:ff:7d:31:54:8d:b0:65:06:6e:bf:38:b2:fa:
         30:65:85:5a:c9:62:35:b8:38:a8:47:99:e2:fe:e5:a4:59:38:
         4f:b3:be:02:4b:0f:37:97:13:4f:3a:02:c6:7d:65:fa:af:05:
         67:a1:b3:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFD01XxM56YpMqbNK/0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZThiZThlYWJmOTc5Y2Y5MTdhMTc0OTQ3ZDlmNmIzZTBj
YjE5N2UwHhcNMjMwNzE3MTY0NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjBiZmM2Y2U5MmI1OGZhMzljMjBhMTQ4MWU4ZjQyNGIwMzA4MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb6pjKK9yGGIJ/GlfNFnhzeTLXDf
g7A8PpLUhfHOczVJJphLz3+nKiBVjqb6WycX86QLWMrPQSOmC1Fro2OX4CWn0Cv4
IXqUaRK8NrOmBovisVzC7scFqpR+hAxOJ+9aIle8lRsHklj/AzEAMM8yDbN3adOn
ISRTFcnSqbtRPOem6hcN750p7D2870/vP5tmuPQE0UNfPdME/JA9RejN0Zf61We3
EjG6BT1bRy0RjxMZaze5X8OGBtgsKLdVI5qBmEQpFNHTv73aJNJy2+TYneulmssj
DIW7dLWX09LjA0BY2cGfTYtq5J6frHUPpllv1Y7Gg60Mo4KqMY6TzGREgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGsL/GzpK1j6OcIKFIHo9CSwMIOaMB8GA1UdIwQY
MBaAFI7ovo6r+XnPkXoXSUfZ9rPgyxl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanVpLWpxdjVlYy1SZWhkSlI5bjJzLURMR1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zMDEzNzItZGRlMi00ZWUzLWFhYWQt
Y2U1MWJiYmU0MzE3LzEvYXd2OGJPa3JXUG81d2dvVWdlajBKTEF3ZzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zMDEzNzItZGRlMi00ZWUzLWFhYWQtY2U1MWJiYmU0MzE3
LzEvanVpLWpxdjVlYy1SZWhkSlI5bjJzLURMR1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbc0+MA0G
CSqGSIb3DQEBCwUAA4IBAQBah6XiYdfTLXfd/OTTZ1ASnF12aM2dhGIbumEV1G+F
48mj5u599pTYyY9iXOVJxGkJN4bIg/6Rx2c5JCOIg7hZSZp5zONnLc2dmqSQi5ld
+mPW9VG/BKiXCR0oD70h2fjOryy/ekIzULSAEy+Oa6hYYS6Z2NwRbgeGFDBjkip1
uf6j2qvyDwmS7pvoaJEvA+0fDN5GHtgHktHQI0Wa7p1xlTWT6IMlY5QTu2CmJ2o/
661WVgWnHAozAbG7ABTRNQ3HQJ4+QBjaA6iZJv99MVSNsGUGbr84svowZYVayWI1
uDioR5ni/uWkWThPs74CSw83lxNPOgLGfWX6rwVnobNo
-----END CERTIFICATE-----
Generated at Fri Sep 1 07:25:31 2023 by rpki-client on console-ams.rpki-client.org