Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/pWIrl8-Q64qeV055QoFBsDAJBPM.roa
File:                     pWIrl8-Q64qeV055QoFBsDAJBPM.roa (raw, json)
Hash identifier:          k405ndTvls6HkrrEYOnGjJy/9opize+6ekuPrJ6Z45U=
Subject key identifier:   A5:62:2B:97:CF:90:EB:8A:9E:57:4E:79:42:81:41:B0:30:09:04:F3
Certificate issuer:       /CN=20f581368b64ba32f2c2de57f784f3846bd133b8
Certificate serial:       F51755
Authority key identifier: 20:F5:81:36:8B:64:BA:32:F2:C2:DE:57:F7:84:F3:84:6B:D1:33:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPWBNotkujLywt5X94TzhGvRM7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/pWIrl8-Q64qeV055QoFBsDAJBPM.roa
Signing time:             Sat 01 Jan 2022 06:58:48 +0000
ROA not before:           Sat 01 Jan 2022 06:58:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50340
IP address blocks:        193.163.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16062293 (0xf51755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f581368b64ba32f2c2de57f784f3846bd133b8
        Validity
            Not Before: Jan  1 06:58:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5622b97cf90eb8a9e574e79428141b0300904f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:bb:65:38:bc:d7:50:d4:c3:02:be:c3:78:
                    89:29:8a:48:f4:f8:8a:40:e5:be:42:62:12:44:3d:
                    a8:9f:fc:ab:c1:c8:44:8a:b8:55:5b:a2:2f:48:0f:
                    12:2d:99:7b:1c:46:e7:15:46:26:0a:53:bd:df:6a:
                    57:1f:76:02:f6:2d:c3:a1:c8:12:37:ba:39:ad:fe:
                    b5:c2:37:db:26:ea:9b:d5:13:73:c2:78:d5:68:9c:
                    52:1d:47:77:c9:97:0b:5f:e8:ec:92:1f:3c:1d:25:
                    f3:8c:69:43:99:ae:32:51:78:3a:ca:bc:97:ef:b2:
                    0d:7c:66:f9:91:25:15:84:52:41:f1:e1:7b:2f:5d:
                    91:62:0f:69:b1:7f:a5:3f:ff:5e:98:fa:05:4b:0b:
                    24:33:77:fc:c6:d1:b3:d8:72:db:24:1f:2d:f3:9d:
                    c0:6c:71:c5:2b:e0:26:60:17:d4:1a:b4:39:96:ef:
                    24:f4:3c:3d:2d:23:94:71:af:1b:ee:3c:a8:a1:57:
                    e7:63:c1:02:af:b1:c5:78:88:ab:a0:95:32:91:1f:
                    85:43:eb:12:b3:5c:7b:b9:13:e4:d0:d3:e7:7c:86:
                    c1:25:57:00:b0:eb:4a:8e:68:d9:f0:56:9e:e3:f0:
                    02:14:4f:6c:4d:05:2f:db:ce:91:46:ab:d3:47:ae:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:62:2B:97:CF:90:EB:8A:9E:57:4E:79:42:81:41:B0:30:09:04:F3
            X509v3 Authority Key Identifier:
                keyid:20:F5:81:36:8B:64:BA:32:F2:C2:DE:57:F7:84:F3:84:6B:D1:33:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPWBNotkujLywt5X94TzhGvRM7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/pWIrl8-Q64qeV055QoFBsDAJBPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/25356b-74a8-4484-b4e4-ffaf249c4d2f/1/IPWBNotkujLywt5X94TzhGvRM7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:6c:b6:58:2e:56:1c:96:42:b1:73:0a:07:3e:3f:62:70:30:
         dd:e4:c1:58:2a:5b:8a:dc:4c:15:74:59:f4:f3:2d:c4:c5:df:
         2f:8c:33:21:aa:7a:dd:07:0e:fd:c4:d2:2b:e2:4d:ee:f9:48:
         8c:6d:c6:ee:08:9f:26:d1:13:d8:a4:93:6b:68:54:c3:61:bf:
         fb:93:8a:9c:90:53:37:bd:81:d0:5a:57:09:da:0f:18:4f:4c:
         cc:66:65:2d:54:04:8e:01:14:3f:f6:5f:ac:c8:d2:ed:85:54:
         a0:85:13:53:c5:dc:c1:9f:d3:99:a7:c1:1a:62:d4:d9:3e:3f:
         b7:4f:8d:12:19:34:cd:8b:24:17:e2:3e:d5:71:b3:84:5e:6e:
         e7:52:16:31:f0:51:6d:5d:9a:2f:5b:fa:95:dd:47:6d:c3:e2:
         5f:94:2b:95:95:a1:e2:4f:7d:73:82:42:c6:a7:c8:ae:b9:aa:
         8b:0b:b0:80:a1:eb:4e:1d:01:27:50:5c:8a:2f:59:b8:c8:d0:
         1c:45:64:2d:82:1a:de:02:1d:5b:47:35:a3:05:ff:ac:83:c3:
         61:d8:5b:04:53:22:b5:4b:63:7e:de:51:26:b7:04:b5:0d:53:
         cc:b5:17:7f:01:b9:03:9a:c5:05:30:c4:10:3c:25:35:85:ba:
         1a:23:b4:02
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAPUXVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MGY1ODEzNjhiNjRiYTMyZjJjMmRlNTdmNzg0ZjM4NDZiZDEzM2I4MB4XDTIyMDEw
MTA2NTg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTU2MjJiOTdjZjkw
ZWI4YTllNTc0ZTc5NDI4MTQxYjAzMDA5MDRmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9Nu2U4vNdQ1MMCvsN4iSmKSPT4ikDlvkJiEkQ9qJ/8q8HI
RIq4VVuiL0gPEi2ZexxG5xVGJgpTvd9qVx92AvYtw6HIEje6Oa3+tcI32ybqm9UT
c8J41WicUh1Hd8mXC1/o7JIfPB0l84xpQ5muMlF4Osq8l++yDXxm+ZElFYRSQfHh
ey9dkWIPabF/pT//Xpj6BUsLJDN3/MbRs9hy2yQfLfOdwGxxxSvgJmAX1Bq0OZbv
JPQ8PS0jlHGvG+48qKFX52PBAq+xxXiIq6CVMpEfhUPrErNce7kT5NDT53yGwSVX
ALDrSo5o2fBWnuPwAhRPbE0FL9vOkUar00euIp0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSlYiuXz5Drip5XTnlCgUGwMAkE8zAfBgNVHSMEGDAWgBQg9YE2i2S6MvLC
3lf3hPOEa9EzuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lQV0JOb3RrdWpMeXd0NVg5NFR6aEd2Uk03Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2EvMjUzNTZiLTc0YTgtNDQ4NC1iNGU0LWZmYWYyNDljNGQyZi8x
L3BXSXJsOC1RNjRxZVYwNTVRb0ZCc0RBSkJQTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Ev
MjUzNTZiLTc0YTgtNDQ4NC1iNGU0LWZmYWYyNDljNGQyZi8xL0lQV0JOb3RrdWpM
eXd0NVg5NFR6aEd2Uk03Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGjXjANBgkqhkiG9w0BAQsFAAOC
AQEAF2y2WC5WHJZCsXMKBz4/YnAw3eTBWCpbitxMFXRZ9PMtxMXfL4wzIap63QcO
/cTSK+JN7vlIjG3G7gifJtET2KSTa2hUw2G/+5OKnJBTN72B0FpXCdoPGE9MzGZl
LVQEjgEUP/ZfrMjS7YVUoIUTU8XcwZ/TmafBGmLU2T4/t0+NEhk0zYskF+I+1XGz
hF5u51IWMfBRbV2aL1v6ld1HbcPiX5QrlZWh4k99c4JCxqfIrrmqiwuwgKHrTh0B
J1Bcii9ZuMjQHEVkLYIa3gIdW0c1owX/rIPDYdhbBFMitUtjft5RJrcEtQ1TzLUX
fwG5A5rFBTDEEDwlNYW6GiO0Ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org