Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa
File:                     OfuobLURJseEIa7ErJButXy31sw.roa (raw, json)
Hash identifier:          qZHL1iPeBR9GuxWQlVMnj0cTTSusrAHVLLRdFNf2Ers=
Subject key identifier:   39:FB:A8:6C:B5:11:26:C7:84:21:AE:C4:AC:90:6E:B5:7C:B7:D6:CC
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       051B1B3A
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa
Signing time:             Thu 17 Mar 2022 09:43:42 +0000
ROA not before:           Thu 17 Mar 2022 09:43:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        193.109.195.0/24 maxlen: 24
                          85.237.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85662522 (0x51b1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Mar 17 09:43:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39fba86cb51126c78421aec4ac906eb57cb7d6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ee:61:e4:71:9d:5c:63:3a:05:58:2c:ec:05:
                    c3:26:a6:56:08:72:ab:c5:24:83:9b:12:84:25:0e:
                    b4:c0:47:9f:65:fc:0b:f3:95:20:03:48:97:cf:12:
                    f4:c2:46:82:49:a1:72:77:3d:c9:af:58:af:75:b5:
                    04:61:13:3e:8c:da:d2:06:08:8d:28:71:c4:0d:05:
                    0d:13:1f:09:bc:d0:b3:30:2e:fd:01:d9:d5:5e:1b:
                    c9:5d:65:83:35:e6:ba:4d:57:a9:fc:11:4e:84:14:
                    4d:8b:d4:f1:26:c0:4a:fc:5a:27:2e:64:42:6e:3e:
                    a3:43:e5:8f:2d:e1:b0:82:14:c0:7b:d4:1d:64:23:
                    a5:91:89:8a:27:7c:31:de:86:26:67:51:88:cc:e9:
                    6f:84:f4:06:f3:b2:8a:49:8b:37:ed:a0:31:45:9f:
                    eb:1f:48:91:b3:33:87:c3:39:1a:cc:bf:b0:71:05:
                    93:82:14:3d:96:e1:99:68:b3:38:66:9a:0d:32:41:
                    ea:39:41:be:01:52:ec:83:7d:c2:81:34:c7:f0:bd:
                    b4:e1:45:b3:d1:5c:4e:fb:d6:5a:a8:5e:05:92:9d:
                    6a:91:a9:76:78:4e:f5:d4:47:77:34:3f:b2:f7:ae:
                    67:06:5b:e8:f7:2f:73:cb:20:4c:8a:45:a4:0f:9e:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:A8:6C:B5:11:26:C7:84:21:AE:C4:AC:90:6E:B5:7C:B7:D6:CC
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OfuobLURJseEIa7ErJButXy31sw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.215.0/24
                  193.109.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:dd:4c:e6:6a:a3:fe:0d:35:4d:71:3c:5b:7d:f8:c4:95:93:
         ea:0b:d9:a7:01:66:96:16:53:b9:b0:a7:4f:a8:fe:d6:61:2b:
         4f:4d:9a:7a:04:5d:db:db:0b:73:cf:8c:69:47:cf:2e:09:70:
         38:f4:40:67:7e:eb:2a:7e:2b:ae:0c:2c:6a:00:49:5c:9c:85:
         67:70:76:8c:16:51:ae:5a:12:f0:f7:f1:a5:2e:5e:09:ed:c0:
         f8:7a:ea:11:d4:7a:fe:1a:4d:2a:b6:75:78:61:7a:32:17:4f:
         c0:1a:b4:ac:c1:a6:af:61:b7:65:8e:35:9d:2c:b3:98:a5:6c:
         ea:e5:c8:81:2e:ed:4e:35:0a:23:d2:69:95:00:cc:79:e7:e0:
         2f:38:80:6f:40:85:47:73:6f:35:5c:f1:71:1a:cd:9c:81:87:
         5d:2d:b5:c4:d8:3b:22:e9:2b:9c:bc:3c:76:b5:f1:02:49:93:
         80:89:a1:10:fb:1b:b5:59:7a:37:7a:cd:f4:38:b2:9d:f8:10:
         25:ce:6d:29:20:7e:a3:f0:10:6a:6b:4e:04:6a:34:1e:2a:ae:
         a5:eb:bb:47:aa:a0:2a:d1:8f:4e:40:41:c6:13:42:86:52:2d:
         22:d0:ae:65:49:fd:e0:22:95:5c:51:67:d5:6b:93:98:95:c7:
         17:1a:3b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org