Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa
File:                     Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa (raw, json)
Hash identifier:          JFIyFAkhda54v0GKonJN5NQ3UVtB5bBgR8ERoKWeG8s=
Subject key identifier:   0B:0B:BD:95:9F:A4:8F:95:DA:80:64:68:06:61:FD:1B:39:7C:1B:9D
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       01882CEE98BD1EF653AC189DED041F553252
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa
Signing time:             Thu 18 May 2023 03:36:54 +0000
ROA not before:           Thu 18 May 2023 03:36:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.108.59.0/24 maxlen: 24
                          193.108.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2c:ee:98:bd:1e:f6:53:ac:18:9d:ed:04:1f:55:32:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: May 18 03:36:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b0bbd959fa48f95da8064680661fd1b397c1b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:df:56:be:fb:a5:54:6e:c6:91:b2:03:df:
                    a7:b1:5c:2e:b4:94:ab:e3:28:8a:88:f1:d7:6c:86:
                    55:6c:84:a7:6f:55:8c:61:8b:9d:42:68:66:c4:6a:
                    85:e9:3b:8f:85:c8:e9:78:f4:a8:ab:f5:96:65:22:
                    f4:85:cd:18:b5:7b:14:20:e8:6c:c2:33:f4:bf:77:
                    a8:31:64:1c:99:3c:86:a2:6b:d1:38:72:46:ba:a9:
                    cc:3d:6a:0b:9c:b6:4a:0a:e2:ac:02:28:a4:6c:2b:
                    22:8a:35:f2:5c:3a:b2:68:ea:12:24:79:fc:fd:0b:
                    78:94:01:c3:53:ae:10:d9:a4:fe:82:40:d3:61:1f:
                    a3:a6:c4:fb:4a:fe:86:16:5b:ce:93:25:b4:76:97:
                    96:6b:e2:ea:aa:98:87:55:1b:d7:e7:1c:7d:f0:70:
                    2c:8f:70:6f:79:50:f3:32:e2:5e:5a:aa:93:0c:68:
                    f6:d2:11:00:99:75:97:64:c3:cc:89:49:7b:91:fc:
                    ba:bb:f6:4b:6b:53:d2:de:51:a4:ea:eb:f4:e8:8b:
                    be:fa:cf:83:ed:cb:f4:b3:82:e1:24:5d:07:2a:d1:
                    8b:02:da:3c:b0:f7:b8:e9:c7:31:f8:57:46:41:02:
                    ad:3c:4a:83:4b:c8:02:7b:8c:fa:a5:71:eb:60:b4:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:BD:95:9F:A4:8F:95:DA:80:64:68:06:61:FD:1B:39:7C:1B:9D
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/Cwu9lZ-kj5XagGRoBmH9Gzl8G50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.59.0/24
                  193.108.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:89:9b:d9:ec:00:a4:8d:d9:03:fc:fd:4c:20:8e:d0:55:
         51:df:58:36:d4:93:aa:4c:3c:e8:c3:33:83:63:03:ff:f2:6c:
         be:f0:52:02:4b:dc:8e:3e:a7:e5:b1:73:a4:f4:7e:1f:e6:dd:
         ed:c0:c4:0b:5b:73:a1:38:dd:02:ba:5d:9a:94:3c:03:29:6a:
         43:0d:24:db:c2:8e:e6:6e:00:95:e1:db:1b:7e:81:3f:68:05:
         fc:ea:17:03:d1:19:66:87:f5:ad:fe:48:bf:aa:57:3a:e4:b2:
         d6:99:db:e7:04:73:62:25:19:f5:2d:22:89:ed:17:75:bb:52:
         6a:b6:fd:d3:fe:96:3b:72:fb:b9:0f:9f:cc:96:80:b3:00:d8:
         6e:a5:cb:71:95:e8:af:0d:d6:ff:0b:65:78:7f:5c:0e:9d:2c:
         e3:6e:2d:c7:c5:1b:55:c3:e3:55:3c:3c:a6:45:5c:d5:b6:75:
         f3:24:d2:c1:88:6f:13:ef:3c:5b:4e:ad:69:cd:24:bc:ce:f6:
         56:52:63:14:8f:23:21:c1:30:c7:67:05:0b:a1:1f:44:7f:52:
         ef:7c:9f:47:d5:ff:12:07:62:8e:8a:35:fe:c2:d0:12:e0:5a:
         71:fc:95:7c:39:03:d4:98:ee:e0:03:09:19:48:e3:3a:e6:ff:
         eb:cf:1e:94
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYgs7pi9HvZTrBid7QQfVTJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwNTE4MDMzNjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBiYmQ5NTlmYTQ4Zjk1ZGE4MDY0NjgwNjYxZmQxYjM5N2MxYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKTfVr77pVRuxpGyA9+nsVwutJSr
4yiKiPHXbIZVbISnb1WMYYudQmhmxGqF6TuPhcjpePSoq/WWZSL0hc0YtXsUIOhs
wjP0v3eoMWQcmTyGomvROHJGuqnMPWoLnLZKCuKsAiikbCsiijXyXDqyaOoSJHn8
/Qt4lAHDU64Q2aT+gkDTYR+jpsT7Sv6GFlvOkyW0dpeWa+LqqpiHVRvX5xx98HAs
j3BveVDzMuJeWqqTDGj20hEAmXWXZMPMiUl7kfy6u/ZLa1PS3lGk6uv06Iu++s+D
7cv0s4LhJF0HKtGLAto8sPe46ccx+FdGQQKtPEqDS8gCe4z6pXHrYLRucQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAsLvZWfpI+V2oBkaAZh/Rs5fBudMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL0N3dTlsWi1rajVYYWdHUm9CbUg5R3psOEc1MC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBADBbDsD
BADBbGkwDQYJKoZIhvcNAQELBQADggEBAGXXiZvZ7ACkjdkD/P1MII7QVVHfWDbU
k6pMPOjDM4NjA//ybL7wUgJL3I4+p+Wxc6T0fh/m3e3AxAtbc6E43QK6XZqUPAMp
akMNJNvCjuZuAJXh2xt+gT9oBfzqFwPRGWaH9a3+SL+qVzrkstaZ2+cEc2IlGfUt
IontF3W7Umq2/dP+ljty+7kPn8yWgLMA2G6ly3GV6K8N1v8LZXh/XA6dLONuLcfF
G1XD41U8PKZFXNW2dfMk0sGIbxPvPFtOrWnNJLzO9lZSYxSPIyHBMMdnBQuhH0R/
Uu98n0fV/xIHYo6KNf7C0BLgWnH8lXw5A9SY7uADCRlI4zrm/+vPHpQ=
-----END CERTIFICATE-----
Generated at Tue Aug 22 12:44:35 2023 by rpki-client on console-ams.rpki-client.org