Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AOY10vHV8B3vyiooG0wf82zou1k.roa
File:                     AOY10vHV8B3vyiooG0wf82zou1k.roa (raw, json)
Hash identifier:          VIuZ4ZIRGwozf/C2iX0VMoqANoDOIpWcZQ9CHKVbd2E=
Subject key identifier:   00:E6:35:D2:F1:D5:F0:1D:EF:CA:2A:28:1B:4C:1F:F3:6C:E8:BB:59
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       09B83556
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AOY10vHV8B3vyiooG0wf82zou1k.roa
Signing time:             Wed 09 Feb 2022 15:06:14 +0000
ROA not before:           Wed 09 Feb 2022 15:06:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34984
IP address blocks:        193.37.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163067222 (0x9b83556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Feb  9 15:06:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=00e635d2f1d5f01defca2a281b4c1ff36ce8bb59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:10:a6:56:89:9b:76:04:2a:d9:47:07:07:
                    90:d7:a6:d5:e8:2c:e0:17:d3:fb:16:5d:26:b3:e4:
                    94:62:1b:1b:dc:72:d2:0c:2c:05:2a:30:13:f7:0a:
                    cb:0a:55:06:53:69:b4:db:7f:88:aa:94:83:db:dd:
                    be:5f:ec:fe:8e:32:6a:db:77:30:9d:5f:e8:c4:1b:
                    36:c0:23:37:6e:f4:82:67:5f:73:6e:69:16:51:14:
                    68:6a:b9:91:fe:45:dd:4b:f8:fe:6d:c2:55:fb:85:
                    31:ee:b4:ca:b0:01:2d:da:b3:73:6e:26:37:9c:4e:
                    b8:0d:72:f4:fa:54:3a:e6:e2:58:d0:46:8e:e6:5e:
                    ed:a7:96:24:60:a3:bd:ca:0f:0b:ed:c9:ff:63:40:
                    96:c2:8f:14:c8:bc:4d:66:80:1f:4d:ba:d2:62:4d:
                    bb:26:f3:ca:ac:cc:ce:36:33:49:b9:a1:85:fb:2a:
                    06:7b:ec:8e:f5:59:87:d8:9a:57:c4:c5:e8:38:3b:
                    57:1a:47:13:d6:fa:e6:d2:f7:18:1f:38:07:a2:10:
                    40:92:b2:c6:1c:6e:49:e0:7a:e1:3b:47:3d:6b:48:
                    43:ca:a2:30:6b:59:aa:3d:d5:9f:2b:b0:1c:ff:09:
                    f8:e5:e8:26:62:47:e1:fa:ee:15:04:9b:08:1a:8f:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E6:35:D2:F1:D5:F0:1D:EF:CA:2A:28:1B:4C:1F:F3:6C:E8:BB:59
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/AOY10vHV8B3vyiooG0wf82zou1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:84:92:b9:05:e5:ed:d2:b6:84:ad:46:9c:bf:67:b9:ab:
         69:b3:a3:13:d6:2c:48:70:ae:24:b0:8e:df:e8:fc:b5:49:2e:
         ce:91:c7:a5:5c:6e:29:b8:c3:85:f2:b0:63:a3:2f:6f:d6:4a:
         03:01:2a:34:47:ed:b0:ec:a4:8b:e4:7c:f3:cb:70:61:4e:01:
         23:1e:b6:65:56:22:50:a4:f6:1c:e6:6e:ed:b0:7f:64:75:ae:
         68:1c:fc:c3:03:f5:a4:51:e5:ba:3f:3c:87:1a:ee:21:24:00:
         05:a0:d3:a9:94:a7:54:a1:b6:f4:9c:fa:41:6d:51:d8:0b:e8:
         fb:3f:b2:be:32:7a:59:25:2d:00:58:62:98:45:1c:3e:ce:d5:
         dc:4c:b1:6b:49:92:3b:d1:cc:95:e8:88:4e:97:bf:14:76:bb:
         42:20:33:00:5c:25:2d:c7:48:5e:25:69:db:dc:5b:b3:7f:23:
         22:d9:1a:1b:c6:79:f2:7b:ef:34:b5:a1:4a:c3:ed:0c:30:ac:
         1a:6a:dd:87:15:53:fc:9b:31:bc:92:4a:d4:3b:67:c7:21:bf:
         97:81:2c:f8:28:27:a2:5d:a5:c4:ae:e8:16:99:37:58:fa:bb:
         40:64:1c:c0:a4:17:86:2f:c9:b8:56:c2:2a:52:54:92:6f:a7:
         6d:a1:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org