Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/RHxr3gd1JLViio2SDkTLxax8WNM.roa
File:                     RHxr3gd1JLViio2SDkTLxax8WNM.roa (raw, json)
Hash identifier:          l8BrlIT5SlYgpcfFnyKGbR6J8+JYjQRXTspVDHvbzQI=
Subject key identifier:   44:7C:6B:DE:07:75:24:B5:62:8A:8D:92:0E:44:CB:C5:AC:7C:58:D3
Certificate issuer:       /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial:       0223D345
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/RHxr3gd1JLViio2SDkTLxax8WNM.roa
Signing time:             Fri 25 Mar 2022 18:32:15 +0000
ROA not before:           Fri 25 Mar 2022 18:32:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35830
IP address blocks:        109.94.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35902277 (0x223d345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
        Validity
            Not Before: Mar 25 18:32:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=447c6bde077524b5628a8d920e44cbc5ac7c58d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:60:3b:6a:81:0d:49:c3:5f:6a:0c:6c:1b:
                    dc:d4:4e:3e:5a:03:5e:39:86:56:a1:f0:c4:92:60:
                    b0:b7:b4:39:5e:62:81:85:52:68:29:88:9a:87:57:
                    9e:91:fe:6e:e5:69:89:18:71:93:2d:90:be:9c:37:
                    5e:b2:e0:36:89:69:3f:cf:69:77:79:e5:c8:5d:b4:
                    86:bc:a3:1c:9c:19:b3:e5:46:f9:f9:41:f4:56:36:
                    70:7e:3c:da:ec:0e:73:63:97:d5:04:f9:7a:3f:e3:
                    71:04:9e:31:3f:3d:2d:84:9c:d0:8a:4b:0c:90:c5:
                    05:1c:50:9f:56:a8:88:1b:3e:34:15:03:a2:73:6a:
                    82:ed:9e:43:b0:a0:ef:1a:d5:e3:0c:7c:b5:46:62:
                    4c:32:1d:bf:1c:8b:ed:9c:42:8e:33:7d:4e:12:48:
                    ce:93:be:26:df:5b:16:e2:7f:40:be:50:e7:72:6f:
                    4c:92:18:5d:d4:d5:21:ee:2e:a0:3e:cb:3f:07:86:
                    44:30:d1:0d:c0:93:fb:f1:af:03:fc:1e:d5:e8:b8:
                    80:ba:96:21:ff:91:5a:4b:23:c3:13:9c:f7:b4:96:
                    7f:8e:b5:15:c3:a8:97:23:a2:9b:cd:8f:5c:83:2b:
                    41:0b:eb:e7:af:03:22:51:96:72:17:87:b6:7c:93:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:6B:DE:07:75:24:B5:62:8A:8D:92:0E:44:CB:C5:AC:7C:58:D3
            X509v3 Authority Key Identifier:
                keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/RHxr3gd1JLViio2SDkTLxax8WNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.94.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:e5:c6:a0:00:f6:34:bb:67:b3:dd:37:92:15:18:18:4f:c0:
         59:2a:60:68:97:a5:81:3b:23:e5:30:49:33:88:aa:6f:bb:13:
         35:d4:de:a3:f5:1f:3f:e2:d1:d8:73:b3:b6:33:a6:04:b0:7a:
         ee:ed:42:91:de:70:1f:de:27:a7:cf:2a:d1:08:4c:6b:01:ea:
         37:e2:97:fa:e3:ff:45:f6:89:9b:79:c1:fa:7f:a4:d2:5a:f9:
         4a:4d:9c:61:bc:51:77:a1:be:73:fa:65:39:0b:c8:e5:b9:7c:
         a4:56:23:b2:3a:6a:54:54:79:3b:92:bf:2d:31:28:0e:ec:18:
         39:9a:10:2c:f6:be:7d:66:f9:e8:71:b0:1e:0d:e5:70:52:05:
         f4:b7:7e:20:92:35:4b:52:38:c2:91:31:1d:7b:01:d0:e9:39:
         24:23:da:64:f6:a4:4b:98:f0:14:5f:0d:69:43:46:d6:3d:8f:
         0a:b5:7b:72:cd:d4:51:67:4e:25:79:0a:66:cd:8f:cd:48:78:
         16:25:c1:3b:36:1d:a0:4f:61:12:9d:2e:7f:11:fa:57:a5:27:
         7d:24:f2:7d:a4:05:3c:f2:8b:a2:53:a3:bf:95:9a:f4:1d:f0:
         4c:60:27:61:cf:9e:2c:bd:2a:d1:5e:a2:55:02:77:e2:c2:34:
         c8:c3:fa:d6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiPTRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzMxYTM2MWJkYzUxZDdhYWNhZGNlMzAyZjEyNTdkNWMzZjM1YWUxMB4XDTIyMDMy
NTE4MzIxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDQ3YzZiZGUwNzc1
MjRiNTYyOGE4ZDkyMGU0NGNiYzVhYzdjNThkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ/DYDtqgQ1Jw19qDGwb3NROPloDXjmGVqHwxJJgsLe0OV5i
gYVSaCmImodXnpH+buVpiRhxky2Qvpw3XrLgNolpP89pd3nlyF20hryjHJwZs+VG
+flB9FY2cH482uwOc2OX1QT5ej/jcQSeMT89LYSc0IpLDJDFBRxQn1aoiBs+NBUD
onNqgu2eQ7Cg7xrV4wx8tUZiTDIdvxyL7ZxCjjN9ThJIzpO+Jt9bFuJ/QL5Q53Jv
TJIYXdTVIe4uoD7LPweGRDDRDcCT+/GvA/we1ei4gLqWIf+RWksjwxOc97SWf461
FcOolyOim82PXIMrQQvr568DIlGWcheHtnyTQocCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBREfGveB3UktWKKjZIORMvFrHxY0zAfBgNVHSMEGDAWgBSDMaNhvcUdeqyt
zjAvElfVw/Na4TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6R2pZYjNGSFhxc3JjNHdMeEpYMWNQeld1RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDgvZDBiNzUxLThlMjYtNDA2Ni04ZGZlLTI0NWNjODE2MzE3NC8x
L1JIeHIzZ2QxSkxWaWlvMlNEa1RMeGF4OFdOTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgv
ZDBiNzUxLThlMjYtNDA2Ni04ZGZlLTI0NWNjODE2MzE3NC8xL2d6R2pZYjNGSFhx
c3JjNHdMeEpYMWNQeld1RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG1erzANBgkqhkiG9w0BAQsFAAOC
AQEAkuXGoAD2NLtns903khUYGE/AWSpgaJelgTsj5TBJM4iqb7sTNdTeo/UfP+LR
2HOztjOmBLB67u1Ckd5wH94np88q0QhMawHqN+KX+uP/RfaJm3nB+n+k0lr5Sk2c
YbxRd6G+c/plOQvI5bl8pFYjsjpqVFR5O5K/LTEoDuwYOZoQLPa+fWb56HGwHg3l
cFIF9Ld+IJI1S1I4wpExHXsB0Ok5JCPaZPakS5jwFF8NaUNG1j2PCrV7cs3UUWdO
JXkKZs2PzUh4FiXBOzYdoE9hEp0ufxH6V6UnfSTyfaQFPPKLolOjv5Wa9B3wTGAn
Yc+eLL0q0V6iVQJ34sI0yMP61g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:40 2024 by rpki-client on console-ams.rpki-client.org