Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/TpmuTG1Y5BZ2FLMeZrclCBpYMk0.roa
File:                     TpmuTG1Y5BZ2FLMeZrclCBpYMk0.roa (raw, json)
Hash identifier:          0JpAgot9EG+UoeItWSp6rjG6xMDKY0RB9WZm7y4xZsU=
Subject key identifier:   4E:99:AE:4C:6D:58:E4:16:76:14:B3:1E:66:B7:25:08:1A:58:32:4D
Certificate issuer:       /CN=218edf6448492384ffc8dba3ce677d77ab68306c
Certificate serial:       04D77F49
Authority key identifier: 21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/TpmuTG1Y5BZ2FLMeZrclCBpYMk0.roa
Signing time:             Sat 01 Jan 2022 00:55:18 +0000
ROA not before:           Sat 01 Jan 2022 00:55:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212913
IP address blocks:        193.109.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81231689 (0x4d77f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218edf6448492384ffc8dba3ce677d77ab68306c
        Validity
            Not Before: Jan  1 00:55:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e99ae4c6d58e4167614b31e66b725081a58324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:01:1b:00:3a:cc:ce:c7:56:51:94:0d:5e:
                    c5:eb:27:66:ff:e2:e3:47:6a:76:bd:6e:75:0e:07:
                    9e:0a:67:12:14:9d:58:aa:6c:7b:62:fe:b9:9e:53:
                    a6:dc:29:d7:d3:c0:68:a7:ab:8d:92:a2:e5:ac:36:
                    e5:f3:f7:e4:c8:5d:2a:e6:fe:38:6b:0a:03:5d:4e:
                    4b:6f:cd:62:0b:0d:10:29:e1:8c:22:01:c9:1f:61:
                    49:f9:62:77:67:7d:e3:6f:ab:34:a4:35:c2:a7:da:
                    13:c4:e1:7c:35:e7:f5:6f:db:3b:20:7c:ba:d6:78:
                    41:27:96:f2:bf:a7:58:2b:1f:0b:7e:e9:22:b6:2f:
                    dc:d8:51:01:97:38:40:2a:f7:e2:a5:48:03:ce:c4:
                    d8:be:82:c6:ac:56:e3:99:cd:e1:0e:9c:e6:55:dc:
                    f3:72:68:ac:8b:ca:fc:9c:63:47:f4:d2:b6:e2:c3:
                    69:91:b7:62:64:a2:ce:60:45:9e:eb:2d:76:5e:e2:
                    6a:b2:77:ac:9e:77:f7:50:8b:ae:66:59:c2:0a:b7:
                    d0:be:3d:61:3f:1b:81:1b:d2:02:86:a7:f7:55:58:
                    8d:c3:7c:62:db:41:d5:f0:41:27:9d:8a:ea:0b:fc:
                    7e:5f:64:87:96:51:09:39:a9:71:6c:a4:b3:f9:6f:
                    17:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:99:AE:4C:6D:58:E4:16:76:14:B3:1E:66:B7:25:08:1A:58:32:4D
            X509v3 Authority Key Identifier:
                keyid:21:8E:DF:64:48:49:23:84:FF:C8:DB:A3:CE:67:7D:77:AB:68:30:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY7fZEhJI4T_yNujzmd9d6toMGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/TpmuTG1Y5BZ2FLMeZrclCBpYMk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/91fcd0-08fe-4ac2-a0bb-ddbbabd35746/1/IY7fZEhJI4T_yNujzmd9d6toMGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:63:1d:7d:1d:72:5f:93:2b:f2:81:e0:ab:85:f1:4b:36:
         cf:ef:fb:eb:0f:c9:d4:ce:b6:1c:fb:63:43:24:4b:14:da:e5:
         21:c2:77:17:ee:3d:dc:ac:b4:a5:51:8a:ee:9d:6a:3c:0e:ba:
         22:94:c2:67:4d:82:90:32:39:ac:bc:f4:51:c1:66:07:6a:60:
         81:5c:bd:91:6d:3f:a8:4c:b8:71:9b:90:55:47:47:25:3d:73:
         f3:17:2d:ed:75:49:1e:65:a8:71:55:0f:91:dd:9d:c0:7b:81:
         93:f3:7e:fd:3d:bd:49:ee:3f:8a:c7:88:84:f0:6f:91:d6:e5:
         6d:4d:c4:d0:54:b3:d5:88:b1:c4:5f:93:eb:48:7d:11:cc:60:
         ee:d5:45:83:4a:c2:7b:0a:d6:fe:a5:a2:99:24:5b:4a:90:c3:
         cb:95:76:00:75:0b:54:13:43:4c:7e:ed:3c:a5:39:2c:68:e3:
         8b:e3:1a:73:c3:ec:4f:3a:b0:be:08:48:b1:75:df:d8:75:c7:
         ed:62:ba:46:3d:a0:5a:5e:73:5b:cf:f3:a3:63:dc:b6:88:4d:
         86:05:9a:68:a7:ae:c2:69:84:08:3d:35:2a:43:08:f1:ce:0a:
         50:25:c3:a6:e1:e7:cd:a6:b5:41:3d:45:1d:d0:c6:c3:c6:e6:
         6f:96:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:27 2023 by rpki-client on console-ams.rpki-client.org