Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/ibw6XR_JIBWsexLauixh0iGbRVI.roa
File:                     ibw6XR_JIBWsexLauixh0iGbRVI.roa (raw, json)
Hash identifier:          sa3PrLqmXf5U8BH3BknX3YAZlkjCBjs17vvFHEGFUHo=
Subject key identifier:   89:BC:3A:5D:1F:C9:20:15:AC:7B:12:DA:BA:2C:61:D2:21:9B:45:52
Certificate issuer:       /CN=eecbf9db2a9a4ff7e9c8c664e0ef927863ce5493
Certificate serial:       E777FE
Authority key identifier: EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sv52yqaT_fpyMZk4O-SeGPOVJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/ibw6XR_JIBWsexLauixh0iGbRVI.roa
Signing time:             Sat 01 Jan 2022 11:56:22 +0000
ROA not before:           Sat 01 Jan 2022 11:56:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201942
IP address blocks:        193.105.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15169534 (0xe777fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecbf9db2a9a4ff7e9c8c664e0ef927863ce5493
        Validity
            Not Before: Jan  1 11:56:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89bc3a5d1fc92015ac7b12daba2c61d2219b4552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:48:d0:d3:b4:63:22:0c:2e:75:60:18:1e:
                    5c:c7:ab:77:ba:f0:20:4f:53:75:b3:7c:ac:fc:78:
                    84:84:35:3a:eb:22:7c:17:43:7e:b8:d0:f2:ae:00:
                    4d:b6:57:ce:47:f6:31:99:25:2c:90:8a:c6:f2:5d:
                    ff:85:c1:3d:42:c9:c8:3d:e2:61:99:f1:04:01:70:
                    f5:1e:00:fc:a1:5a:10:ce:19:f9:36:58:d0:72:76:
                    82:0a:ce:01:ab:62:5a:e9:60:d4:25:59:29:e8:f2:
                    0b:72:00:f4:7b:be:5d:a5:02:aa:af:72:f0:a5:02:
                    96:ea:a4:d4:c8:4a:47:ce:31:68:1d:97:98:3d:aa:
                    31:c1:b2:af:16:03:e4:10:a9:4b:fe:34:4b:12:2d:
                    07:07:6c:57:9a:22:c9:15:c5:58:00:c1:7e:36:42:
                    38:53:f8:5c:b5:5f:f7:69:e2:b6:a0:3f:8d:2d:d4:
                    b5:31:f0:e6:4b:7a:3b:3e:b7:aa:e4:3d:5b:30:f5:
                    b7:4d:99:d9:fd:0e:e7:b7:6c:a8:ca:f8:99:53:69:
                    e2:d0:24:77:26:a0:14:d9:81:b4:1c:29:44:af:53:
                    23:b3:2c:bf:f5:44:35:31:19:14:7f:60:18:3b:29:
                    13:9b:c7:cf:c8:3a:44:0a:6a:a2:0b:80:c9:38:ff:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BC:3A:5D:1F:C9:20:15:AC:7B:12:DA:BA:2C:61:D2:21:9B:45:52
            X509v3 Authority Key Identifier:
                keyid:EE:CB:F9:DB:2A:9A:4F:F7:E9:C8:C6:64:E0:EF:92:78:63:CE:54:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sv52yqaT_fpyMZk4O-SeGPOVJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/ibw6XR_JIBWsexLauixh0iGbRVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b1b71e-8f88-4b35-96d5-4532f061f9f5/1/7sv52yqaT_fpyMZk4O-SeGPOVJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:e5:65:e5:19:54:43:ad:c7:8f:34:75:18:14:a2:8d:90:
         05:c8:b9:38:22:ee:6d:50:60:b0:85:48:92:ff:4c:6c:a4:93:
         d6:d9:87:0f:4f:4a:91:ad:01:cc:27:01:fd:d0:bd:a5:98:1e:
         cf:7b:fe:a6:72:71:b3:8b:1a:58:1f:bf:ca:77:68:51:1d:f5:
         d5:d4:e5:7f:62:97:a5:8f:41:4c:93:e0:33:6a:f4:7d:69:07:
         ec:40:39:55:1e:14:dc:40:29:68:07:ac:ae:19:0a:59:0f:c2:
         1c:65:02:c5:96:de:de:cb:3f:5f:74:64:55:be:dc:39:76:7d:
         8a:0d:a9:ef:40:d8:e6:ef:cb:d2:05:37:53:eb:7c:b5:a4:d5:
         8b:29:a1:52:45:21:52:50:9a:0e:44:32:94:1e:4d:61:8e:10:
         1a:58:a3:7d:b7:80:8d:c8:03:76:cc:a5:d5:9e:d5:5f:ff:31:
         9b:c5:ca:ed:50:4c:60:d5:d8:00:d3:5d:45:f3:27:5e:72:bc:
         40:67:57:e9:1c:87:04:49:95:8e:ef:ae:78:aa:aa:08:79:62:
         db:12:e6:42:e5:20:2a:9b:9e:5b:bd:6c:f8:e7:81:f7:ce:f4:
         be:69:23:38:10:b0:0d:90:2b:0c:14:f1:f4:fd:5e:20:c1:8c:
         46:d3:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:03 2023 by rpki-client on console-ams.rpki-client.org