Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa
File:                     U58zKCOKC6bjYQ_OeVFiiyafhuE.roa (raw, json)
Hash identifier:          KnKeNBxGoVArZVoeVjT4vKalonpxDpELvarXcLsEB4Y=
Subject key identifier:   53:9F:33:28:23:8A:0B:A6:E3:61:0F:CE:79:51:62:8B:26:9F:86:E1
Certificate issuer:       /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial:       0186CF86099F7E94E6651B0AB8596DA98880
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa
Signing time:             Sat 11 Mar 2023 07:15:13 +0000
ROA not before:           Sat 11 Mar 2023 07:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        193.108.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:cf:86:09:9f:7e:94:e6:65:1b:0a:b8:59:6d:a9:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
        Validity
            Not Before: Mar 11 07:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=539f3328238a0ba6e3610fce7951628b269f86e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:dc:54:1c:d8:e8:3d:c6:af:3a:ec:92:82:
                    01:90:a6:95:68:f5:d1:30:64:4a:12:02:2d:37:4b:
                    b1:9f:1c:d8:0a:6c:c6:ac:b7:f9:e8:a7:6b:09:c8:
                    0b:62:3e:12:3a:3c:d9:23:1f:9d:18:f4:92:81:c9:
                    19:9b:93:62:b7:1d:41:b7:5c:7a:d1:5c:84:85:39:
                    f7:4a:31:d6:bc:c4:5a:64:b1:3f:2c:4e:63:77:e1:
                    22:05:e6:8c:18:91:1d:1a:e9:6a:fd:99:06:51:5d:
                    46:3d:60:6c:6f:96:bc:25:1e:74:d1:16:10:35:68:
                    76:00:49:23:c5:c3:c5:32:d1:f9:31:b9:0c:e3:2f:
                    fb:cc:80:70:29:2d:1f:3e:e8:ef:59:e2:9d:7d:c5:
                    69:b9:70:56:a5:f0:9d:cb:7d:4f:be:f0:ae:62:12:
                    7e:6c:25:9d:b7:2e:8c:9e:fb:96:85:57:0b:3e:71:
                    eb:14:e2:ad:0f:83:67:b8:48:a0:e5:a1:90:6f:8b:
                    c5:bc:62:be:4f:fc:d5:43:f1:64:78:0c:ff:4e:80:
                    07:3e:80:ae:9b:3d:1f:38:42:0e:f8:ac:3c:bb:d0:
                    5b:58:f9:23:57:9f:b9:c0:c9:a7:88:3c:0b:e1:24:
                    4c:53:1f:1d:8c:74:a6:c4:59:be:8e:39:86:20:92:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:33:28:23:8A:0B:A6:E3:61:0F:CE:79:51:62:8B:26:9F:86:E1
            X509v3 Authority Key Identifier:
                keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c0:48:c9:d0:7c:2d:f4:be:44:30:17:bd:5c:c0:13:52:9d:
         f7:42:6b:f6:c2:9b:ef:98:43:64:01:85:24:00:66:3f:c3:8c:
         e3:d1:de:fa:65:a4:92:ec:20:82:b0:8b:df:0a:6c:36:33:6b:
         96:b9:a9:90:ff:3e:bf:e2:a1:6d:0c:e1:bd:ec:87:5c:9e:63:
         f9:c4:8a:3b:fa:9b:ce:0d:89:a7:de:fa:e3:d1:0a:55:27:40:
         d9:e2:bf:19:0c:27:ca:55:de:01:c9:e6:1a:73:d8:ab:23:24:
         cd:04:bc:97:8d:dc:1e:84:2a:e7:7a:75:30:9e:4f:b3:b8:3c:
         c5:5e:e1:fb:b8:0d:8e:8f:1e:d2:7d:95:c5:2e:11:ad:ea:43:
         77:b4:d5:9c:25:d3:2e:fc:5c:5a:3f:d3:a0:0b:0e:01:e9:6f:
         48:3d:22:f0:3f:8a:39:75:cf:3a:fe:b9:c4:b6:97:bb:2d:95:
         05:9d:b6:0d:d4:3d:38:45:6f:1d:b0:1f:23:46:fb:d5:9d:28:
         34:ed:a8:0b:c6:bf:e3:7d:48:cd:17:c8:8b:96:a9:0e:13:60:
         7d:0f:04:91:b8:ef:d7:78:c0:24:1c:95:33:a5:af:60:47:66:
         cf:83:14:db:d4:dc:d4:e3:eb:3e:aa:92:01:dd:97:e6:37:b1:
         33:ce:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org