Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/AUijMitcYwxdWOYCyBSR81ZHT-4.roa
File:                     AUijMitcYwxdWOYCyBSR81ZHT-4.roa (raw, json)
Hash identifier:          +7skARm2G0UQCu2j7hTpAcZs9R49Nd/b9WBbxz0tPjY=
Subject key identifier:   01:48:A3:32:2B:5C:63:0C:5D:58:E6:02:C8:14:91:F3:56:47:4F:EE
Certificate issuer:       /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial:       01856C01154F482836B1EFF0EC2A863D2D76
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/AUijMitcYwxdWOYCyBSR81ZHT-4.roa
Signing time:             Sun 01 Jan 2023 06:24:48 +0000
ROA not before:           Sun 01 Jan 2023 06:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        185.150.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:01:15:4f:48:28:36:b1:ef:f0:ec:2a:86:3d:2d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
        Validity
            Not Before: Jan  1 06:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0148a3322b5c630c5d58e602c81491f356474fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:f1:4b:43:81:74:25:8b:11:d6:a5:99:df:
                    23:7c:96:d2:23:f2:99:e6:9c:db:18:8b:0b:5f:e2:
                    70:70:53:1b:8d:77:7b:93:88:d7:34:1a:28:0a:2e:
                    22:34:e5:32:ab:84:ef:a2:36:b7:eb:54:63:d3:53:
                    10:7c:87:9c:77:52:d0:17:42:6d:03:db:f6:4a:54:
                    ab:65:dd:e1:30:61:25:6f:37:de:7b:e3:f4:18:8a:
                    d2:dc:6e:bb:86:fe:b1:b9:92:98:53:7f:85:d0:ae:
                    28:14:9d:af:80:45:33:8d:c4:43:c8:ee:e7:ac:b2:
                    5f:f6:db:0d:45:e0:bf:02:0a:11:ef:d2:fb:7a:60:
                    3b:0d:f7:9d:4f:41:dc:2e:82:4e:0f:4c:d5:76:d9:
                    07:43:39:1c:e4:c5:df:7b:70:7a:c2:f0:c4:2e:7b:
                    1e:8a:3b:09:53:4f:47:5e:cd:7e:d0:89:78:ad:07:
                    c8:28:04:20:c7:e0:79:a6:fd:4d:99:a5:24:60:c5:
                    84:32:7d:2e:69:e0:45:9a:36:80:90:0b:00:0f:2b:
                    71:c0:4e:70:f8:d8:a9:fc:e2:38:c5:3a:ab:51:12:
                    16:83:22:a2:c8:36:1b:7e:1d:59:95:34:f9:5f:30:
                    a4:e6:5c:05:a8:fe:81:bc:48:18:79:a2:7d:9d:05:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:A3:32:2B:5C:63:0C:5D:58:E6:02:C8:14:91:F3:56:47:4F:EE
            X509v3 Authority Key Identifier:
                keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/AUijMitcYwxdWOYCyBSR81ZHT-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:12:47:a0:4a:1f:e0:ec:fb:99:d4:8d:08:cb:da:34:55:65:
         69:ce:71:33:ce:38:6c:29:c1:23:77:a5:c5:a2:17:0b:8a:4b:
         1d:ae:ab:2c:76:07:9a:67:07:c3:1e:61:34:a3:b5:59:4c:88:
         2e:c7:04:58:63:98:24:4c:a2:ce:b6:b6:bb:e7:0b:e0:bf:af:
         4c:f2:1e:6d:d4:83:5a:3d:ff:ee:80:4c:c7:c5:03:c8:1c:4e:
         5a:2c:ac:51:ec:39:e5:ab:a2:e7:18:5b:86:db:42:b6:b7:a1:
         3b:60:6b:00:f2:32:d9:9d:fd:9a:c7:eb:b2:53:2b:1d:d2:7a:
         4e:4d:fe:f4:a2:78:86:a1:ee:04:21:55:1e:07:9a:60:04:f1:
         22:c7:3f:67:b2:18:0a:81:8b:1a:16:6e:14:86:40:0e:1e:e7:
         2b:e3:b6:72:db:41:63:90:c4:73:69:68:26:2a:22:b5:47:52:
         fc:84:c6:57:bd:73:8e:72:12:53:58:97:86:0a:f2:65:e1:12:
         26:7b:d8:e0:33:3a:c9:d1:8d:ae:09:94:af:53:2a:67:1a:16:
         64:c9:8e:15:ec:d0:12:04:50:56:6b:c4:e9:db:34:38:f2:80:
         f9:ab:ee:6e:cb:2c:6e:6d:05:9f:ef:67:f3:98:53:bf:b0:05:
         4a:51:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:45 2024 by rpki-client on console-ams.rpki-client.org