Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/ga-ABDZjJjBbsm8Ghcm2Ky6yy9U.roa
File:                     ga-ABDZjJjBbsm8Ghcm2Ky6yy9U.roa (raw, json)
Hash identifier:          qTVfiruSSs5eD8m/aB957h20tTpYO0EpivXXHrZiAaQ=
Subject key identifier:   81:AF:80:04:36:63:26:30:5B:B2:6F:06:85:C9:B6:2B:2E:B2:CB:D5
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018C1E0D5E8E34CC9242B7163054A541CDCB
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/ga-ABDZjJjBbsm8Ghcm2Ky6yy9U.roa
Signing time:             Thu 30 Nov 2023 02:27:21 +0000
ROA not before:           Thu 30 Nov 2023 02:27:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136526
IP address blocks:        185.202.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1e:0d:5e:8e:34:cc:92:42:b7:16:30:54:a5:41:cd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Nov 30 02:27:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81af8004366326305bb26f0685c9b62b2eb2cbd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:42:01:91:6b:6d:51:06:68:5a:7d:71:18:
                    5f:a4:2e:f3:ac:54:08:b2:05:c9:99:c9:a5:95:b7:
                    8e:7e:8b:86:27:d2:74:8a:53:08:f7:52:36:9b:cd:
                    99:c8:05:f0:a7:f8:35:0b:bc:a4:0a:12:7b:d1:e4:
                    d9:59:73:4e:d9:c9:64:73:46:80:3b:d2:fc:c8:a9:
                    89:44:89:b0:b8:3b:91:1c:94:94:0c:2b:3a:43:04:
                    d5:ec:d9:e7:65:c8:12:48:db:ba:db:69:a1:de:11:
                    e2:04:69:64:04:ca:5e:77:92:b5:20:83:28:cc:83:
                    e7:d7:f5:3b:8e:ba:93:dc:3e:1f:c4:c5:dd:e9:c6:
                    d9:21:8b:81:33:16:86:58:14:31:db:a4:94:39:98:
                    f0:b0:50:3e:15:e1:89:92:c9:11:1a:68:19:cc:52:
                    d6:8c:d6:ab:c9:79:f6:70:d0:d7:f0:ee:0b:aa:02:
                    a9:4a:82:3c:57:8b:07:f6:dc:55:73:be:dc:83:a2:
                    b9:4c:4d:8c:80:07:50:b4:4a:68:17:ae:91:49:40:
                    3a:79:f6:c4:d1:4d:92:09:eb:d8:db:cb:c3:17:ee:
                    52:0b:0e:8b:2b:9d:70:d0:c6:c2:7f:eb:1d:a5:b0:
                    e4:f5:6d:ba:5d:ad:7b:72:2e:97:a8:4e:08:3d:dc:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:80:04:36:63:26:30:5B:B2:6F:06:85:C9:B6:2B:2E:B2:CB:D5
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/ga-ABDZjJjBbsm8Ghcm2Ky6yy9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:51:6e:0f:86:8f:9d:8c:32:0c:7b:f2:ac:39:b5:02:80:1a:
         dd:59:8d:dd:ee:58:36:73:65:7c:42:d7:63:a6:04:c7:a4:94:
         c0:a8:f5:70:1b:fa:50:fd:0b:6a:0e:13:d7:ea:b3:8d:61:db:
         85:fd:65:8a:19:ac:1d:5a:14:28:f8:45:c6:61:43:99:2d:73:
         53:1e:4e:9e:bf:b6:12:60:78:1e:53:61:af:74:87:96:0a:2a:
         bc:67:25:bc:e0:a3:09:b4:42:b5:44:89:56:e6:8c:d9:73:3f:
         bf:5d:5d:d1:fc:ae:31:4f:94:67:62:4f:09:c2:37:fd:e5:95:
         b2:70:8f:a2:a3:7f:29:6b:fb:f6:36:2c:06:79:d2:33:f7:32:
         c2:b1:3e:ce:21:02:73:16:14:82:16:74:ef:bb:a8:5f:0b:3f:
         89:33:a0:dc:95:e3:1f:15:d1:7b:01:1a:58:e3:cf:e9:8a:9a:
         26:ea:39:4b:3f:e3:98:b3:16:b5:02:01:f4:fd:7c:88:25:59:
         98:ff:21:b0:04:83:0e:7b:e0:b9:47:23:d0:3e:1c:20:82:05:
         d0:61:28:1f:36:76:2c:6a:94:52:e3:79:c5:c6:9e:58:ed:1e:
         06:a5:74:a4:87:21:fb:45:94:dc:1b:9a:cf:23:34:f4:34:6e:
         01:f4:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:28 2024 by rpki-client on console-fra.rpki-client.org