Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/LoCD3iBQE-Z-j54CEgtcvU2Jfes.roa
File:                     LoCD3iBQE-Z-j54CEgtcvU2Jfes.roa (raw, json)
Hash identifier:          fNrvrwVj9JRinyztlG0FWJoZLemcAQd1SPO/9im8r0Y=
Subject key identifier:   2E:80:83:DE:20:50:13:E6:7E:8F:9E:02:12:0B:5C:BD:4D:89:7D:EB
Certificate issuer:       /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial:       018570397A3B8CA70066B94C6D30C9D9DA9D
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/LoCD3iBQE-Z-j54CEgtcvU2Jfes.roa
Signing time:             Mon 02 Jan 2023 02:04:53 +0000
ROA not before:           Mon 02 Jan 2023 02:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        94.103.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:7a:3b:8c:a7:00:66:b9:4c:6d:30:c9:d9:da:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
        Validity
            Not Before: Jan  2 02:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e8083de205013e67e8f9e02120b5cbd4d897deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a7:e2:93:25:bb:8f:24:81:24:47:c0:78:e0:
                    f0:c8:a9:6d:6f:0b:10:70:10:ea:89:10:87:a1:55:
                    fc:38:38:e9:b0:6d:a9:43:73:28:00:fe:40:c2:8d:
                    87:2f:2c:77:45:1f:2e:f1:59:fb:82:80:88:21:c5:
                    0b:34:dc:bc:8d:ee:bf:48:eb:b3:00:80:bb:4b:bf:
                    15:06:16:0e:02:20:43:7b:58:db:37:83:e2:2b:0f:
                    2d:59:6c:88:93:35:7f:33:1d:1c:0b:35:24:39:b9:
                    ff:a9:1e:6f:46:9a:28:5c:b9:d9:bb:1d:77:0a:0b:
                    30:30:0e:d2:b0:e2:06:e8:26:c8:9c:3d:ae:d7:fa:
                    94:ad:2f:23:76:dc:50:2e:0b:6c:33:77:77:c6:2f:
                    9f:5a:37:f0:a2:3b:3f:9d:92:56:e0:33:8a:60:cf:
                    d7:55:e1:27:62:68:08:1f:b4:e5:6b:7b:ef:b0:e5:
                    34:ad:90:c4:25:f5:8c:d7:33:26:e0:b6:4a:9e:1f:
                    af:88:11:33:91:17:72:ee:79:5c:48:ca:58:e3:05:
                    8f:4e:94:f2:91:fe:13:d7:cb:47:a6:d0:77:1d:6c:
                    ba:39:78:96:49:36:57:70:c9:d4:d9:cc:49:0a:46:
                    b6:9a:09:d2:ef:5a:8b:e1:74:d6:cc:c1:eb:06:ea:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:80:83:DE:20:50:13:E6:7E:8F:9E:02:12:0B:5C:BD:4D:89:7D:EB
            X509v3 Authority Key Identifier:
                keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/LoCD3iBQE-Z-j54CEgtcvU2Jfes.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:77:41:24:a1:2f:55:8c:02:57:4c:93:da:96:f3:b0:8e:16:
         35:de:99:94:55:62:8c:51:04:6c:a5:67:33:b7:22:32:0d:d4:
         cb:9e:e3:58:62:b9:dd:a9:91:5d:fa:cf:1a:0a:11:49:46:8b:
         33:d3:1c:db:c7:48:5e:f3:ee:65:c9:f3:af:28:ff:c3:ab:30:
         02:74:ed:84:b6:23:ef:4d:8a:96:5f:bb:bc:04:41:8d:5c:aa:
         da:fa:3c:75:8a:90:fc:2c:59:9e:b8:82:d8:cc:01:78:8e:a6:
         09:9e:20:16:c6:d9:63:77:2b:06:12:ad:18:82:20:68:ea:38:
         58:c5:9a:e4:b7:3d:84:f3:7d:c5:76:7f:85:d6:ec:40:96:63:
         a4:c3:75:d2:c4:4e:6c:01:a5:55:54:2b:4f:0c:a8:df:25:dd:
         fc:62:a3:e0:cd:82:9f:71:89:07:19:aa:ea:e7:73:62:90:42:
         17:c4:d1:18:3f:57:af:8c:70:48:1d:c2:c3:14:c4:12:00:77:
         f8:2b:3e:35:ac:5b:bf:b8:97:e1:d9:c8:75:d4:2a:d0:0e:24:
         e4:a3:1d:96:83:69:50:6b:19:b6:e7:d2:03:69:31:07:13:c3:
         a5:97:f1:5f:ca:8c:53:36:9f:c6:ed:f0:42:ad:94:ca:06:cc:
         5e:bb:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:09 2024 by rpki-client on console-ams.rpki-client.org