Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa
File:                     SoOpRTbCsxQmVUOfO7RGlrnkYII.roa (raw, json)
Hash identifier:          /NHNZ9owOeiB6fJ2mWalv1Audw/nCzYt8WNLBFtC6Cw=
Subject key identifier:   4A:83:A9:45:36:C2:B3:14:26:55:43:9F:3B:B4:46:96:B9:E4:60:82
Certificate issuer:       /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial:       0431144B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa
Signing time:             Sat 01 Jan 2022 00:50:41 +0000
ROA not before:           Sat 01 Jan 2022 00:50:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        185.93.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70325323 (0x431144b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
        Validity
            Not Before: Jan  1 00:50:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a83a94536c2b3142655439f3bb44696b9e46082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fd:08:c9:3f:c1:63:08:c7:2b:7b:44:d4:47:
                    58:a7:af:0b:62:40:23:e0:a5:59:85:71:7c:2f:c3:
                    0e:70:69:44:25:17:a1:91:c6:18:35:5e:ee:12:f1:
                    69:b9:a1:b7:41:cf:71:11:c6:93:57:44:67:12:b3:
                    12:71:00:e3:07:a3:e0:97:71:7b:41:9a:e5:72:ee:
                    3d:db:04:86:9c:74:1c:c0:7d:63:69:76:d8:98:ab:
                    c4:3e:bb:5e:aa:6a:19:d5:54:a1:94:a9:46:e8:b4:
                    72:f6:9f:4f:84:12:ef:69:e6:02:26:3f:34:55:16:
                    7a:22:e7:34:77:87:35:f9:d4:74:5c:c3:b0:7c:63:
                    dc:90:7f:dd:a1:92:a9:05:c7:5a:19:56:6a:71:d2:
                    19:56:8a:bf:b4:04:e5:48:66:e6:11:6d:60:f6:f5:
                    7d:1c:32:bd:98:9a:85:74:97:54:d6:82:11:18:16:
                    d9:75:e0:b1:5a:1a:cd:62:90:aa:58:8b:d9:5f:2d:
                    0a:b8:4d:aa:a4:13:59:a5:25:56:74:7c:34:1a:90:
                    0a:05:03:08:1c:63:d7:d7:48:37:6b:d7:ab:f5:f7:
                    0a:81:cd:97:80:83:6e:f7:0d:2f:27:17:d1:ec:66:
                    24:8f:ec:20:73:22:43:8c:50:f4:d0:00:3c:12:76:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:83:A9:45:36:C2:B3:14:26:55:43:9F:3B:B4:46:96:B9:E4:60:82
            X509v3 Authority Key Identifier:
                keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/SoOpRTbCsxQmVUOfO7RGlrnkYII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f6:2e:c2:43:99:ea:53:dd:d5:79:7b:4b:06:70:da:55:e2:
         79:80:03:a0:fb:50:eb:f8:d5:58:0e:e0:50:ac:f2:d4:89:52:
         39:f4:13:7b:f5:6c:7f:a4:38:1d:97:f2:a2:1a:3d:1c:0a:f5:
         97:fd:a4:5f:b4:cb:f5:03:ce:82:2b:02:43:e5:0d:64:7b:e9:
         90:2c:ad:36:7a:4d:a1:ac:cf:9c:9f:18:c2:ed:77:33:26:38:
         25:2f:b5:f0:b2:d2:48:69:9d:63:cd:e9:83:37:58:79:d2:a6:
         67:e7:ae:36:8d:2d:fd:44:31:34:8e:14:6d:55:ad:39:a8:1f:
         85:a6:d2:2b:32:fa:fd:5b:56:55:37:0a:f6:7d:3c:58:d2:a8:
         86:c4:aa:62:fe:9f:0a:04:5d:c0:e1:45:bb:77:6d:07:f1:2b:
         db:fb:93:5f:c7:11:ce:5a:f0:5a:40:e3:56:d3:d5:d1:10:b1:
         4b:32:dc:f3:0b:6a:d9:c8:4e:7a:d4:94:16:cf:7d:f8:02:f3:
         e0:87:5f:31:37:09:10:bf:c3:6d:1b:c1:97:1d:34:7b:2e:92:
         f6:56:ff:16:a3:b7:7b:0a:31:e9:a3:0c:77:9f:5b:22:d3:0e:
         68:3a:40:b9:79:10:6b:b0:e7:ec:22:2d:10:da:87:cb:bf:39:
         d7:ac:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org