Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa
File:                     GDofiyripy71GH8wf_d6bqa825I.roa (raw, json)
Hash identifier:          riyWOoaciCgQmnSuV6d3VHwhf0XNAvHggPkbAfX2bL4=
Subject key identifier:   18:3A:1F:8B:2A:E2:A7:2E:F5:18:7F:30:7F:F7:7A:6E:A6:BC:DB:92
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       094EB1B6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa
Signing time:             Sat 01 Jan 2022 12:04:02 +0000
ROA not before:           Sat 01 Jan 2022 12:04:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39368
IP address blocks:        193.39.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156152246 (0x94eb1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jan  1 12:04:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=183a1f8b2ae2a72ef5187f307ff77a6ea6bcdb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:34:d7:b8:b5:e8:b1:7f:4a:bc:68:34:3b:
                    06:f1:be:be:e2:a8:c4:91:72:00:b2:15:98:b1:00:
                    64:13:bd:16:61:9e:f5:0b:95:e5:f8:ee:72:26:06:
                    c2:c9:80:b6:4a:38:a7:4c:32:44:8a:26:1c:80:2a:
                    f4:35:4a:94:e0:5f:33:38:60:cc:07:79:d0:54:cb:
                    91:4b:b4:6b:0f:90:c6:b8:ee:97:df:74:d2:7d:30:
                    76:46:b0:58:17:0a:b1:fc:04:12:cd:d4:b3:c7:9d:
                    f4:15:62:b7:5e:c2:3c:8b:c0:bf:b0:e5:b9:84:0f:
                    1b:b8:8f:27:44:8a:04:f7:ff:ac:9c:b7:b5:aa:91:
                    10:68:f2:a0:b7:1e:fb:5d:9c:4e:d2:42:37:15:96:
                    0e:7e:f9:2a:76:d4:a0:b1:ef:83:e6:a1:ff:ca:6b:
                    97:d0:5e:0c:ca:4a:c6:1f:30:20:ea:c8:c1:75:e6:
                    c4:f2:8d:49:f4:9b:e0:b4:ad:98:34:da:9b:6e:03:
                    ee:a3:9f:f2:d5:5e:89:25:b8:86:3c:45:52:b8:5b:
                    ca:3b:1d:af:90:6a:b2:9b:80:ad:06:00:42:8a:73:
                    8e:82:22:67:f0:b2:c7:11:e8:a1:7b:d1:13:c3:27:
                    0b:36:2d:04:6c:f5:36:96:e0:60:36:ae:05:8a:6f:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:1F:8B:2A:E2:A7:2E:F5:18:7F:30:7F:F7:7A:6E:A6:BC:DB:92
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GDofiyripy71GH8wf_d6bqa825I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:83:bb:66:c9:6a:ed:94:df:0f:fe:aa:4a:d1:84:e1:75:d5:
         75:c6:18:e2:a5:c2:94:ef:58:24:a0:dd:fa:9c:74:39:92:5c:
         62:a9:12:75:cc:92:cf:1d:73:c0:48:49:74:61:a5:30:90:72:
         e7:35:c0:d6:70:e8:ec:ac:39:34:e4:74:4d:b7:80:de:72:5c:
         31:34:24:fc:e0:20:20:87:c1:3a:08:5d:27:18:03:f4:3e:69:
         09:e9:1f:17:37:51:08:5e:22:f0:e9:d0:30:17:b5:7a:fe:d1:
         43:16:73:4d:51:bc:5c:09:09:3c:47:3e:dc:5d:7d:6e:78:af:
         dd:74:af:ef:cb:85:08:57:d3:77:d9:58:a0:78:50:e9:f1:28:
         e0:c9:dc:75:c8:44:9a:43:d1:4b:3b:50:6b:05:34:32:e1:6a:
         d7:06:b9:7d:6f:72:d1:58:15:07:a1:81:c7:52:69:5d:f9:dd:
         51:5b:f5:17:a0:df:fe:19:18:86:09:52:20:11:72:59:b1:d3:
         40:bb:a7:d4:83:4a:33:40:39:ca:e9:e5:60:81:3e:dd:99:33:
         2e:30:e2:7d:38:f3:18:41:1b:2b:06:69:b9:55:20:27:ba:38:
         55:73:d5:4f:9f:81:4f:65:40:72:e2:20:a8:cc:55:91:2f:86:
         3e:9a:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org