Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/oAN622JEV_pnTsEH3wp8dBELono.roa
File:                     oAN622JEV_pnTsEH3wp8dBELono.roa (raw, json)
Hash identifier:          R1TjmFNM4xehFheChA99YjRM5Idr+sykfSz7fimrIvU=
Subject key identifier:   A0:03:7A:DB:62:44:57:FA:67:4E:C1:07:DF:0A:7C:74:11:0B:A2:7A
Certificate issuer:       /CN=00c35f0d842a7adbb56d05c033dc4777dd69d822
Certificate serial:       0188BADC5B5A50E1FE3CA0D9787A71F153E2
Authority key identifier: 00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AMNfDYQqetu1bQXAM9xHd91p2CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/oAN622JEV_pnTsEH3wp8dBELono.roa
Signing time:             Wed 14 Jun 2023 17:03:03 +0000
ROA not before:           Wed 14 Jun 2023 17:03:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        194.26.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ba:dc:5b:5a:50:e1:fe:3c:a0:d9:78:7a:71:f1:53:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00c35f0d842a7adbb56d05c033dc4777dd69d822
        Validity
            Not Before: Jun 14 17:03:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a0037adb624457fa674ec107df0a7c74110ba27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:92:c3:aa:83:d1:fb:6c:20:ef:a9:8b:34:27:
                    ca:2b:a0:08:42:25:58:b4:da:2c:42:bb:f1:45:0b:
                    c3:b3:be:69:28:63:46:36:cd:a2:b8:8c:3c:4f:f7:
                    65:8c:d4:c3:56:ea:4f:1d:0e:2a:44:b7:44:e4:0a:
                    02:43:57:07:25:f2:8c:4b:ef:5d:9f:b4:28:c9:11:
                    00:2f:9d:00:37:3d:10:e7:63:af:b6:0e:76:d6:56:
                    e1:53:98:58:59:bb:39:b6:57:02:6c:4d:f8:f4:de:
                    e0:38:9d:0b:f3:d6:a1:48:5f:88:69:5e:67:a0:65:
                    51:3c:ab:5b:e0:74:46:97:cf:d6:ec:c6:c0:71:26:
                    fc:78:ae:7c:ff:01:4e:1e:ef:83:45:a3:cb:a1:63:
                    ee:27:36:f8:cd:48:ba:dc:cb:1b:34:20:77:8f:0e:
                    53:e6:65:a1:a3:8c:04:2a:a5:0a:96:18:c4:79:98:
                    3c:b0:06:73:47:fc:f0:27:b6:bb:2a:98:f5:af:08:
                    0d:92:3f:ac:b8:c2:48:2f:1a:2d:37:ff:1c:23:e1:
                    dd:11:bb:ec:b8:bc:ba:61:2b:70:48:f3:1b:e9:03:
                    c1:fa:ed:9d:52:c3:25:88:01:6a:09:d3:95:9f:01:
                    5e:49:31:a5:12:1d:a8:6a:e8:32:7e:53:6f:06:4f:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:03:7A:DB:62:44:57:FA:67:4E:C1:07:DF:0A:7C:74:11:0B:A2:7A
            X509v3 Authority Key Identifier:
                keyid:00:C3:5F:0D:84:2A:7A:DB:B5:6D:05:C0:33:DC:47:77:DD:69:D8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMNfDYQqetu1bQXAM9xHd91p2CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/oAN622JEV_pnTsEH3wp8dBELono.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/34c277-b359-400c-b734-2fb76ff5991f/1/AMNfDYQqetu1bQXAM9xHd91p2CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.26.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:a2:b9:43:1e:dd:e2:08:15:71:ad:27:70:e5:d9:8f:78:
         71:ac:31:61:28:c0:b2:38:b3:df:d6:dc:37:32:e5:d4:fb:ef:
         e7:ca:f6:47:06:d9:31:c9:2e:f1:0e:18:8c:62:a2:36:ca:0c:
         b9:fe:74:04:35:ac:52:f8:ef:5d:b0:19:d2:f0:aa:81:4d:44:
         7f:8f:b1:c3:05:1d:38:b8:eb:b2:5e:40:66:fa:a6:83:fe:5e:
         fd:af:91:43:79:74:74:e3:bb:24:e3:32:be:ce:18:0f:71:5c:
         71:e3:98:3e:d1:e6:d9:c2:78:4d:dc:dc:b5:8f:59:07:da:29:
         e4:65:0f:11:79:8b:f6:ec:54:4e:45:f4:c4:cf:5a:73:cc:01:
         ab:09:4a:29:46:22:1c:a9:0e:58:33:15:cb:84:2c:d7:a8:5c:
         b1:9f:8c:ac:57:44:8d:91:7d:fa:95:fa:a7:76:c1:ce:9e:e6:
         96:ba:ec:e1:00:4b:83:ee:d2:25:04:d2:7a:f1:d8:36:12:8e:
         24:ba:a1:dd:47:1f:b4:ee:9f:97:49:89:54:2b:43:c4:57:75:
         75:48:f2:57:7d:cc:51:68:3e:92:68:01:7a:f8:2b:e0:6a:b0:
         e4:dd:ef:be:7f:e5:1b:93:9a:f4:ef:ca:a0:9e:0a:f3:84:2a:
         7c:e0:a0:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi63FtaUOH+PKDZeHpx8VPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYzM1ZjBkODQyYTdhZGJiNTZkMDVjMDMzZGM0Nzc3ZGQ2
OWQ4MjIwHhcNMjMwNjE0MTcwMzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDAzN2FkYjYyNDQ1N2ZhNjc0ZWMxMDdkZjBhN2M3NDExMGJhMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZLDqoPR+2wg76mLNCfKK6AIQiVY
tNosQrvxRQvDs75pKGNGNs2iuIw8T/dljNTDVupPHQ4qRLdE5AoCQ1cHJfKMS+9d
n7QoyREAL50ANz0Q52Ovtg521lbhU5hYWbs5tlcCbE349N7gOJ0L89ahSF+IaV5n
oGVRPKtb4HRGl8/W7MbAcSb8eK58/wFOHu+DRaPLoWPuJzb4zUi63MsbNCB3jw5T
5mWho4wEKqUKlhjEeZg8sAZzR/zwJ7a7Kpj1rwgNkj+suMJILxotN/8cI+HdEbvs
uLy6YStwSPMb6QPB+u2dUsMliAFqCdOVnwFeSTGlEh2oaugyflNvBk/3TwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKADettiRFf6Z07BB98KfHQRC6J6MB8GA1UdIwQY
MBaAFADDXw2EKnrbtW0FwDPcR3fdadgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQU1OZkRZUXFldHUxYlFYQU05eEhkOTFwMkNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zNGMyNzctYjM1OS00MDBjLWI3MzQt
MmZiNzZmZjU5OTFmLzEvb0FONjIySkVWX3BuVHNFSDN3cDhkQkVMb25vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8zNGMyNzctYjM1OS00MDBjLWI3MzQtMmZiNzZmZjU5OTFm
LzEvQU1OZkRZUXFldHUxYlFYQU05eEhkOTFwMkNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhqGMA0G
CSqGSIb3DQEBCwUAA4IBAQBuDKK5Qx7d4ggVca0ncOXZj3hxrDFhKMCyOLPf1tw3
MuXU++/nyvZHBtkxyS7xDhiMYqI2ygy5/nQENaxS+O9dsBnS8KqBTUR/j7HDBR04
uOuyXkBm+qaD/l79r5FDeXR047sk4zK+zhgPcVxx45g+0ebZwnhN3Ny1j1kH2ink
ZQ8ReYv27FRORfTEz1pzzAGrCUopRiIcqQ5YMxXLhCzXqFyxn4ysV0SNkX36lfqn
dsHOnuaWuuzhAEuD7tIlBNJ68dg2Eo4kuqHdRx+07p+XSYlUK0PEV3V1SPJXfcxR
aD6SaAF6+CvgarDk3e++f+Ubk5r078qgngrzhCp84KAq
-----END CERTIFICATE-----
Generated at Mon Oct 16 07:20:05 2023 by rpki-client on console-ams.rpki-client.org