Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XMoE_O78UnJB9PtY03NSHDoIHRk.roa
File:                     XMoE_O78UnJB9PtY03NSHDoIHRk.roa (raw, json)
Hash identifier:          H+XMhwdtWj+HF8s5tFerqz7+DcDLSJcwbKpcySYotgQ=
Subject key identifier:   5C:CA:04:FC:EE:FC:52:72:41:F4:FB:58:D3:73:52:1C:3A:08:1D:19
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03BC4537
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XMoE_O78UnJB9PtY03NSHDoIHRk.roa
Signing time:             Tue 01 Mar 2022 20:36:32 +0000
ROA not before:           Tue 01 Mar 2022 20:36:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        194.113.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62670135 (0x3bc4537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Mar  1 20:36:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5cca04fceefc527241f4fb58d373521c3a081d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:de:57:bf:70:19:5f:66:3a:0d:84:d6:bf:
                    f7:7d:90:5c:80:2b:b1:fc:f6:93:1f:51:b2:06:f1:
                    83:77:e1:42:54:8c:64:ee:ec:3d:9c:0c:a7:90:ab:
                    ec:89:1e:f9:bc:46:00:29:f5:56:a1:b5:f4:91:cb:
                    37:e5:c8:af:96:56:ea:dd:b6:da:d9:69:fc:a9:d1:
                    3c:9a:9f:64:6e:11:52:a2:cc:53:4e:58:fa:ee:f3:
                    0d:87:88:8b:23:b0:92:87:a1:51:64:4a:9e:9f:ca:
                    87:e7:98:4b:3f:d1:06:d3:58:bc:2b:d7:2e:b4:b0:
                    aa:5a:36:e4:3c:79:ce:a9:b2:fd:9d:2a:5b:92:7c:
                    77:d6:3c:86:57:b2:75:ab:52:42:77:30:23:14:28:
                    b3:dd:e5:56:8f:86:da:da:7b:4b:27:da:31:5b:fd:
                    0f:ee:ba:4b:a9:ca:55:48:c9:fa:de:84:23:e1:02:
                    26:c3:08:8f:0e:ce:0b:a1:4d:ef:8b:9c:ab:c9:75:
                    af:a7:12:f3:6e:49:d7:89:22:e3:b3:2f:25:8e:92:
                    13:91:8e:3d:3f:c7:a3:73:5e:a2:9b:19:9d:c9:c2:
                    c3:ef:79:ee:22:1c:07:04:e3:70:e2:47:c2:45:04:
                    41:16:a0:20:74:22:66:78:0d:64:33:bc:ed:30:ff:
                    da:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CA:04:FC:EE:FC:52:72:41:F4:FB:58:D3:73:52:1C:3A:08:1D:19
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XMoE_O78UnJB9PtY03NSHDoIHRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:12:0d:5f:fd:04:75:25:05:4e:f2:4e:15:8d:cb:3a:ff:e8:
         87:23:91:c8:ee:11:1f:89:9c:89:31:e6:61:48:f4:6b:c2:01:
         56:3b:e3:ce:a2:6f:3b:0e:9e:df:5f:c9:d4:08:41:94:bb:21:
         61:2f:a7:a5:92:7a:2a:e4:46:74:03:d9:92:64:65:25:29:36:
         d1:ee:ab:2a:57:22:44:e5:60:60:6b:96:d5:d7:06:7b:42:8a:
         99:55:ab:dd:98:86:e8:94:b1:85:5f:20:20:95:eb:e4:8f:08:
         9a:e4:42:53:bd:f6:ab:c1:cf:a7:35:2c:78:36:36:b9:42:0b:
         ea:2e:dc:ce:5e:05:7d:ef:65:f5:0d:fd:d1:39:4f:f1:94:19:
         19:31:be:2e:0a:ee:db:ca:4b:e5:12:bc:bf:6c:0f:53:b6:f2:
         60:2e:7a:8b:59:fa:86:62:12:bd:70:bf:eb:95:f3:03:d1:d9:
         02:42:f2:d7:09:99:cd:83:88:28:ec:6c:d5:ad:b7:2a:8f:ee:
         26:7b:92:55:a4:c0:c2:54:d0:92:5a:10:4e:c2:61:0b:30:d3:
         f0:e0:56:ea:cc:a9:5b:43:a1:c1:7c:2a:aa:00:d6:b1:11:62:
         52:c4:5b:ed:16:dc:07:6f:f8:43:6a:75:16:d3:49:90:90:76:
         67:58:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org