Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/w3j0tDpYWIiuog3XSbstKPfC-wY.roa
File:                     w3j0tDpYWIiuog3XSbstKPfC-wY.roa (raw, json)
Hash identifier:          gpBe00n6T3EPjQDlKDwj5XghQDTG2CZeXzWPDvg/Ado=
Subject key identifier:   C3:78:F4:B4:3A:58:58:88:AE:A2:0D:D7:49:BB:2D:28:F7:C2:FB:06
Certificate issuer:       /CN=7973123521d75d8d31c99058e869e996b917b278
Certificate serial:       018658DDBF590433F7BE88D5240A6791FC18
Authority key identifier: 79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/w3j0tDpYWIiuog3XSbstKPfC-wY.roa
Signing time:             Thu 16 Feb 2023 06:16:12 +0000
ROA not before:           Thu 16 Feb 2023 06:16:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.37.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:58:dd:bf:59:04:33:f7:be:88:d5:24:0a:67:91:fc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7973123521d75d8d31c99058e869e996b917b278
        Validity
            Not Before: Feb 16 06:16:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c378f4b43a585888aea20dd749bb2d28f7c2fb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:32:d0:a4:9d:6f:13:64:5b:7c:a1:ea:e4:
                    75:91:07:fa:b2:11:80:7b:4f:89:6b:2d:48:07:19:
                    83:eb:ef:ca:02:56:5c:e2:df:ab:01:97:d4:1d:15:
                    3e:77:97:75:c8:a4:f1:6e:fe:99:6c:d2:9e:c0:b1:
                    b6:31:94:e2:34:f4:87:d4:5f:59:b9:5f:cd:e9:9f:
                    34:a9:83:79:7e:17:40:08:73:bb:d7:e4:30:73:92:
                    85:ba:01:1a:ed:2e:31:d7:f2:c4:43:59:5e:62:1e:
                    37:3f:07:92:fb:3a:87:2d:93:d8:14:da:27:85:8c:
                    df:a6:37:d1:79:0a:d7:d4:86:e1:2f:01:2b:93:87:
                    df:f2:5c:1b:d7:39:f4:3b:e5:89:22:0e:f3:fd:64:
                    cc:c2:87:6f:69:18:fe:48:c1:ef:84:82:9c:85:1f:
                    84:fb:65:f9:dc:99:b8:3f:00:06:85:fb:30:c0:c5:
                    0f:8a:d1:b2:a2:2e:7c:5c:3e:31:1f:65:51:3a:de:
                    c7:89:66:bf:13:d8:4c:5f:d1:4a:49:31:f7:50:53:
                    aa:f3:b4:67:b7:17:fc:27:d4:db:96:61:c3:32:d8:
                    12:df:85:41:13:43:45:0c:e2:4a:72:c9:31:30:98:
                    9a:3f:eb:f3:c1:26:13:b7:6b:05:46:22:36:f9:2a:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:F4:B4:3A:58:58:88:AE:A2:0D:D7:49:BB:2D:28:F7:C2:FB:06
            X509v3 Authority Key Identifier:
                keyid:79:73:12:35:21:D7:5D:8D:31:C9:90:58:E8:69:E9:96:B9:17:B2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMSNSHXXY0xyZBY6GnplrkXsng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/w3j0tDpYWIiuog3XSbstKPfC-wY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bb99e0-c061-4243-9c44-44ede49eaa0e/1/eXMSNSHXXY0xyZBY6GnplrkXsng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:b3:e9:53:d5:dd:a5:99:f9:7d:a7:2e:01:80:f6:ba:ad:
         c7:2f:55:e7:e8:db:e5:9c:e5:7b:8e:77:54:e2:ae:2a:dd:ba:
         59:7e:44:80:52:20:22:87:4c:df:dd:75:66:1a:ae:00:00:62:
         b5:70:3e:71:7b:88:ca:0b:ba:11:f1:97:58:5d:6e:68:66:85:
         6b:88:78:2d:54:c7:29:09:4e:3f:6f:c2:f4:82:99:d4:82:78:
         29:59:a1:3c:d4:60:12:09:3d:42:33:bd:b6:d5:48:36:23:05:
         d6:b1:6d:37:8c:91:10:a8:2a:dd:8f:72:bf:e3:81:2f:76:ec:
         d2:20:62:f2:1d:8e:bb:ae:77:1e:74:d2:b0:4d:34:c0:98:1f:
         2b:ef:90:f9:59:0c:21:ac:3f:3b:e9:e6:0d:3a:66:5d:09:e0:
         ea:9d:8f:d6:82:fd:53:8e:f5:64:06:ae:15:6c:e5:e0:5b:a8:
         8c:93:0f:ad:32:4f:40:0c:5b:19:bb:49:69:31:11:93:f8:b6:
         87:de:2b:ea:fd:c7:a5:d1:e8:97:70:89:aa:54:0f:25:28:85:
         38:c9:a8:b4:ea:f4:a2:69:2d:48:51:75:ea:db:4e:9e:03:08:
         e0:e8:66:78:c3:22:a5:a7:90:40:cf:3c:48:38:5f:67:ff:bb:
         b4:fa:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org