Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Fq62miseLMG4RcIx-r-SHpv3cQ.roa
File:                     2Fq62miseLMG4RcIx-r-SHpv3cQ.roa (raw, json)
Hash identifier:          KO8Za8ioJR0G9FC6unWLPSkCQmVn8JYwgJUIVikkxl4=
Subject key identifier:   D8:5A:BA:DA:68:AC:78:B3:06:E1:17:08:C7:EA:FE:48:7A:6F:DD:C4
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       15B70E6A
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Fq62miseLMG4RcIx-r-SHpv3cQ.roa
Signing time:             Sat 01 Jan 2022 05:59:03 +0000
ROA not before:           Sat 01 Jan 2022 05:59:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     138995
IP address blocks:        185.121.162.0/24 maxlen: 24
                          185.121.170.0/24 maxlen: 24
                          185.121.178.0/24 maxlen: 24
                          185.121.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364318314 (0x15b70e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jan  1 05:59:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d85abada68ac78b306e11708c7eafe487a6fddc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:d3:9e:71:7f:8d:79:99:79:1d:42:5d:26:
                    c8:5d:23:fc:c1:11:35:da:3e:51:a4:8f:d8:ac:98:
                    a8:92:6e:8b:3a:ca:b6:52:87:b0:4a:96:67:34:a9:
                    98:bf:8b:21:3b:8e:1d:18:d6:46:24:ce:fa:1b:36:
                    46:5f:ad:f5:9d:1e:73:84:70:71:2a:f6:9e:8c:5b:
                    bd:4b:74:57:2b:32:4c:be:b2:09:fc:dc:53:df:86:
                    74:aa:49:f0:15:01:8b:cc:b0:b8:3c:6b:2e:54:fd:
                    27:08:b6:b5:fd:d7:27:f8:ea:18:7d:be:53:5b:f5:
                    a0:65:f1:d1:81:c0:65:b4:fa:68:2a:73:0f:73:39:
                    af:e6:ae:30:25:d9:0c:70:50:3f:89:85:f5:c2:1c:
                    50:59:97:a5:a0:8a:aa:c7:76:72:0d:53:66:db:0b:
                    36:19:8d:2d:a7:75:ff:a5:db:eb:dd:91:c9:27:e8:
                    2f:eb:ca:2f:96:15:6a:ce:4f:c9:87:be:db:a4:a2:
                    32:5f:2a:52:e1:e3:30:47:99:63:ae:e5:36:31:0e:
                    10:be:e2:be:cc:61:f7:36:e3:43:e5:06:70:cd:6e:
                    85:9e:77:db:79:03:3d:8b:b4:64:12:8d:27:24:92:
                    44:a1:a1:17:a6:9e:0a:bb:a2:ec:1b:bc:c1:cd:a8:
                    d0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:BA:DA:68:AC:78:B3:06:E1:17:08:C7:EA:FE:48:7A:6F:DD:C4
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/2Fq62miseLMG4RcIx-r-SHpv3cQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.162.0/24
                  185.121.170.0/24
                  185.121.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:8f:3d:9c:ee:43:19:88:5c:bf:3d:ff:85:64:82:b4:27:
         66:d4:ee:27:7e:47:cb:cb:4b:cf:62:b5:1b:4c:cc:9a:dc:e7:
         6b:4b:85:6c:f2:ee:39:8b:d7:80:8e:9f:1f:20:a4:bf:0b:cc:
         c3:7f:9c:64:37:75:11:39:6a:36:5b:f6:d5:9c:b5:99:be:f4:
         05:0f:b3:13:33:77:06:f2:8d:c0:f4:e0:1f:f8:02:b4:e6:77:
         ab:f2:69:7b:f9:07:04:8f:65:3f:6f:8c:91:c6:cd:8b:f0:c9:
         0a:18:14:85:67:b1:d1:f3:7b:48:9c:63:fb:4f:5c:cf:7e:95:
         e5:d1:6e:e3:91:97:99:5b:b8:3d:a3:36:88:11:43:23:2c:63:
         90:0d:58:87:92:ed:b0:77:d9:a7:c7:fb:d4:62:4a:53:9e:bf:
         08:d2:c3:01:52:e7:7f:90:7d:40:94:f2:7a:09:a2:d0:39:8c:
         68:8b:01:39:f8:a2:67:c9:7b:cf:ad:94:d4:8f:b8:4b:61:51:
         14:c9:35:5a:58:2a:e7:f2:a0:ec:5d:72:c0:e2:75:0f:d9:77:
         b5:61:40:02:f2:29:08:c1:a7:8a:e1:a2:40:a9:20:58:48:2c:
         27:9f:67:ee:bd:3a:03:75:10:50:15:f6:c3:ad:34:61:67:93:
         ec:8e:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:16 2023 by rpki-client on console-ams.rpki-client.org