Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa
File:                     PIOFmOx4Bj1QJj8vkVutocRd9R8.roa (raw, json)
Hash identifier:          Xf1KQHe07bqb954eXJxw1g5L4JoxbeUnTXok5URagbs=
Subject key identifier:   3C:83:85:98:EC:78:06:3D:50:26:3F:2F:91:5B:AD:A1:C4:5D:F5:1F
Certificate issuer:       /CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Certificate serial:       013036BD
Authority key identifier: 23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa
Signing time:             Sat 01 Jan 2022 11:04:39 +0000
ROA not before:           Sat 01 Jan 2022 11:04:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.25.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19936957 (0x13036bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233db899154a9825d1b31dd05a5838d270aaf4f4
        Validity
            Not Before: Jan  1 11:04:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3c838598ec78063d50263f2f915bada1c45df51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:b4:e0:51:6f:67:1c:b2:ba:8f:9c:83:9e:
                    f0:70:71:15:86:d7:c1:89:f2:3f:a9:1d:da:fc:24:
                    6b:37:dc:d6:f9:0a:04:63:8c:bf:7c:45:c1:a2:95:
                    03:56:c5:46:4f:da:95:d7:06:de:9d:ec:33:6c:f9:
                    19:96:c6:2a:cc:6f:32:58:90:2f:cc:36:ee:24:d1:
                    6c:29:da:69:ee:20:1b:dd:23:4d:3a:89:9f:03:60:
                    66:f8:e0:db:bc:81:4f:d4:7b:66:41:05:9b:38:6d:
                    c6:50:58:8a:f6:1a:f1:2d:2d:0e:44:19:70:51:05:
                    43:86:61:bb:53:a5:10:c7:30:a0:86:ae:dc:65:1a:
                    e3:b9:7c:df:57:87:59:3f:79:cb:85:ee:35:9d:e9:
                    ed:3c:5a:10:8b:32:7f:fe:2a:c9:79:d8:6e:0f:55:
                    53:6d:cb:0d:1d:bc:b1:75:1d:d6:9c:9e:75:c9:69:
                    03:21:f7:9a:28:1f:65:c6:ac:52:9d:ae:a4:f7:66:
                    3a:41:b5:40:c8:74:07:65:64:df:eb:9c:44:62:5f:
                    be:26:1a:33:77:90:92:6a:7a:11:c6:fe:7e:c1:ff:
                    69:aa:30:06:3f:ba:53:73:b8:85:4d:4f:e0:25:7d:
                    be:23:9e:db:c3:f9:2c:57:f4:11:6c:1e:57:a8:a6:
                    e3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:85:98:EC:78:06:3D:50:26:3F:2F:91:5B:AD:A1:C4:5D:F5:1F
            X509v3 Authority Key Identifier:
                keyid:23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/PIOFmOx4Bj1QJj8vkVutocRd9R8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.25.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:1b:44:e7:0b:8b:40:c7:6c:0a:fe:6b:c6:56:42:d5:b6:
         6d:50:c3:b4:4c:c5:94:59:1e:e8:d5:ff:2d:1a:a6:b9:6d:a8:
         5a:6f:a8:75:3d:9c:0f:9e:1a:fb:3a:dc:b2:86:53:ca:b8:45:
         92:bb:8f:90:29:95:b8:e0:d6:cd:d0:c1:f9:c2:c7:87:0d:2d:
         e2:ff:65:f5:13:79:24:71:ef:22:8f:13:6c:e0:80:09:be:37:
         5e:4d:2c:21:02:41:c2:86:43:0f:e8:47:ae:07:c1:a4:71:9f:
         2c:1a:1d:a8:b5:4c:d4:7e:bc:c3:1a:fb:13:f8:56:97:c8:43:
         2b:82:9b:76:ad:84:19:e1:df:66:5f:2c:d0:71:63:2f:ea:bf:
         2d:69:eb:a7:4e:5f:83:66:44:6f:cb:49:09:db:41:9a:53:76:
         21:8e:d2:24:d6:aa:5e:0a:c0:1d:7f:b6:7f:2d:22:01:9b:fe:
         84:05:a8:63:c5:00:09:e0:45:f5:cc:5d:52:e2:6c:5d:42:d5:
         62:40:be:a7:30:16:42:09:fd:50:ba:e9:be:ad:06:6f:0b:eb:
         04:08:d5:78:ae:2e:96:9b:a1:d7:7c:fb:c0:bb:6a:1b:94:34:
         8e:ae:ea:72:74:a1:c8:91:fb:5b:b6:a7:fa:c8:da:e0:72:78:
         89:33:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:05 2023 by rpki-client on console-ams.rpki-client.org