Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c93tP3dO3eu77AJ1Njkrb2S28NY.roa
File:                     c93tP3dO3eu77AJ1Njkrb2S28NY.roa (raw, json)
Hash identifier:          edi9rtWynDNjRpYZWNL9EpbDY733Wv7Kgjy02sgvuJk=
Subject key identifier:   73:DD:ED:3F:77:4E:DD:EB:BB:EC:02:75:36:39:2B:6F:64:B6:F0:D6
Certificate issuer:       /CN=782668f3ba477de2052acc110b19ed4b611309db
Certificate serial:       01857227F9B1F1AB256526A9BEF3629E0BB8
Authority key identifier: 78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c93tP3dO3eu77AJ1Njkrb2S28NY.roa
Signing time:             Mon 02 Jan 2023 11:05:00 +0000
ROA not before:           Mon 02 Jan 2023 11:05:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6453
IP address blocks:        193.105.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:27:f9:b1:f1:ab:25:65:26:a9:be:f3:62:9e:0b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782668f3ba477de2052acc110b19ed4b611309db
        Validity
            Not Before: Jan  2 11:05:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73dded3f774eddebbbec027536392b6f64b6f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:4b:7d:17:53:5e:fc:a9:c0:01:4b:db:0e:
                    f5:b2:73:d2:18:b4:fc:91:a6:08:82:df:2f:e2:9f:
                    5d:2f:bd:21:fc:4d:99:24:ac:a2:02:c5:c3:73:36:
                    88:12:8a:d1:49:14:11:fe:ad:d0:f5:e9:94:af:62:
                    7e:fd:9f:30:a3:22:f4:c7:00:80:e3:2a:41:6c:e4:
                    42:03:84:80:ef:62:f5:3b:69:3e:55:72:f0:da:bc:
                    9b:09:54:b0:fa:44:48:1e:59:4d:2e:72:b3:2e:d4:
                    26:d5:87:30:19:f1:9b:18:2d:0a:88:6a:bf:35:ff:
                    7f:c5:0f:78:47:6b:39:9f:74:99:7d:53:94:a6:53:
                    d9:16:c3:b5:53:c8:31:80:83:a9:66:11:03:82:33:
                    3c:b1:53:62:08:bd:a1:38:dd:66:b4:c1:dc:a3:84:
                    db:6a:ca:8e:87:6a:f5:a6:33:f3:88:98:da:f9:10:
                    59:88:84:0b:15:4a:ba:02:fa:b7:af:94:43:36:43:
                    64:2a:5e:9f:51:50:8f:56:07:be:3f:77:8e:de:1c:
                    9a:50:ae:25:d6:36:e6:d1:04:6e:be:e3:e8:65:7f:
                    1d:5b:c6:b6:1a:4a:5b:42:98:c6:9e:2c:e5:00:5d:
                    11:49:be:2f:a8:c6:1b:ef:6a:2c:bd:07:1f:bc:06:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:ED:3F:77:4E:DD:EB:BB:EC:02:75:36:39:2B:6F:64:B6:F0:D6
            X509v3 Authority Key Identifier:
                keyid:78:26:68:F3:BA:47:7D:E2:05:2A:CC:11:0B:19:ED:4B:61:13:09:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCZo87pHfeIFKswRCxntS2ETCds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/c93tP3dO3eu77AJ1Njkrb2S28NY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6b9a2b-e96a-4598-ad17-ef970c117da5/1/eCZo87pHfeIFKswRCxntS2ETCds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:ef:95:42:f0:18:50:3f:6c:36:5b:60:4e:4e:b4:49:ae:
         06:86:3d:6f:27:5d:b1:9e:43:0a:78:46:f6:8c:0a:ee:98:83:
         e6:65:c9:a0:90:e3:7c:98:70:3c:86:0b:97:31:b8:58:6a:24:
         e5:4d:a1:80:3f:de:5b:28:db:0e:06:cc:ad:05:29:25:01:b2:
         79:58:d2:c6:be:26:91:d1:7a:54:fe:64:63:8c:c9:2d:29:6c:
         1e:f7:61:ed:48:8b:ab:0f:41:bf:8f:fd:7e:fa:36:d5:6f:e0:
         43:b8:f7:05:a7:63:6c:0d:94:b9:da:37:ec:06:a6:c8:fc:e4:
         83:1f:b8:26:34:89:33:b9:ad:de:4c:c0:bb:68:2c:09:62:cf:
         bb:a2:ea:2e:c9:c4:f4:f5:7d:a2:c9:8a:9a:97:0f:40:ea:cc:
         29:3d:84:3d:c9:e1:1e:5e:99:a5:19:bc:28:2b:18:c4:f1:21:
         ca:28:fe:d5:f7:1a:43:62:47:a5:91:f5:56:d0:c0:43:f8:80:
         0e:7d:bf:53:e1:db:67:58:fc:22:3b:1a:b9:af:7b:9f:78:d5:
         32:b9:e7:d4:88:8f:2d:86:4c:75:83:9e:9c:83:08:71:ee:5f:
         f4:cd:86:9c:2e:2c:20:99:00:5b:2c:89:d8:98:10:12:d0:6c:
         9d:fb:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:35 2024 by rpki-client on console-ams.rpki-client.org