Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa
File:                     JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa (raw, json)
Hash identifier:          6ERBzyR/LP+xN6TeHFex8YjIPGVYO+nXSIcvpP7suhI=
Subject key identifier:   24:89:12:29:99:34:3A:D1:42:BC:CD:97:5D:AF:9C:45:68:E6:24:F0
Certificate issuer:       /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial:       01869D76BA84C1BBF305D2CA0DC363080066
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa
Signing time:             Wed 01 Mar 2023 13:57:29 +0000
ROA not before:           Wed 01 Mar 2023 13:57:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        194.61.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9d:76:ba:84:c1:bb:f3:05:d2:ca:0d:c3:63:08:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
        Validity
            Not Before: Mar  1 13:57:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2489122999343ad142bccd975daf9c4568e624f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c7:6d:d4:76:e0:27:ea:85:6c:67:46:2e:20:
                    5e:4d:62:d0:da:39:04:a9:93:15:bb:28:ec:52:36:
                    3e:07:a4:a4:75:05:87:5a:b5:12:b5:1a:16:57:f6:
                    e2:2b:0a:09:9c:88:18:b4:5d:87:34:e3:9e:17:bf:
                    94:b3:32:40:43:26:b3:36:f2:f1:65:e3:09:a1:74:
                    44:c3:de:20:5c:02:64:ab:a7:ae:4a:92:9e:bd:6f:
                    bd:36:40:f4:b3:77:52:bb:db:0d:fb:03:7f:80:91:
                    d3:14:e6:1b:bf:0f:6b:9c:15:5e:74:e7:cb:14:0e:
                    00:da:ad:1d:03:f5:9c:21:36:45:38:0f:b8:80:b4:
                    3f:d9:05:56:4a:bc:13:f7:3b:f2:59:5b:b1:8b:ad:
                    e8:37:b0:50:44:ad:37:fb:68:ae:8e:94:ca:ae:d7:
                    b9:01:46:2f:f9:92:0a:4d:b4:f4:c4:cb:58:ae:bf:
                    83:cf:7f:3c:e7:2d:6b:b6:a2:9c:33:ad:fb:23:dd:
                    cd:b5:1b:5d:f7:ff:ab:b8:07:43:5c:bc:93:07:db:
                    94:b7:b6:8b:5e:fe:d5:83:b8:73:c4:34:06:16:d3:
                    36:bf:85:e3:76:e1:9d:e4:76:31:03:cd:29:9a:51:
                    69:0c:c4:e6:9c:07:6d:df:a6:44:e0:e7:92:87:6e:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:89:12:29:99:34:3A:D1:42:BC:CD:97:5D:AF:9C:45:68:E6:24:F0
            X509v3 Authority Key Identifier:
                keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:e3:c3:a0:06:68:d6:80:43:fb:cb:d1:c4:63:c6:27:f1:8a:
         e5:0a:50:8f:2a:d7:a3:1c:71:96:31:ce:f4:11:fd:e9:37:a9:
         75:87:f9:bd:50:62:bb:bf:26:0d:4c:79:e6:e3:03:82:ef:6b:
         49:41:cc:e1:04:e3:0f:54:fc:af:25:6a:1e:8c:ee:6f:db:f5:
         c2:ed:1a:7a:db:fb:2b:93:f6:d8:7d:e4:38:ae:01:56:b5:33:
         d2:a4:43:9c:fd:cc:3a:df:33:0a:ce:b4:79:0b:cc:fd:d7:fd:
         49:ef:29:f6:10:39:5a:f4:1b:87:50:85:60:57:e0:b0:24:dd:
         ab:57:19:99:eb:6a:5b:d6:3f:b0:03:5f:be:3c:4b:e2:0a:fc:
         13:7f:c9:bc:48:3a:0a:62:a1:3f:2a:d4:1f:36:cf:c2:6e:4b:
         57:a7:67:24:f4:83:a5:b1:e1:a8:57:c3:48:cd:af:6b:e6:47:
         54:0d:29:d9:b0:88:19:98:c3:13:aa:40:59:44:aa:35:36:41:
         e0:ee:b3:8e:36:63:fa:dc:fe:d7:c2:02:91:ca:96:c5:11:43:
         9f:f1:cd:ae:fb:d6:8e:55:ed:e5:b9:9b:d9:af:59:c1:91:62:
         ba:d9:7f:e5:5d:48:f8:d3:e9:30:94:f5:62:9c:f1:e0:c2:af:
         4c:30:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org