Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JhayUpIGZ4xVZgtXXE2smtDBRFc.roa
File:                     JhayUpIGZ4xVZgtXXE2smtDBRFc.roa (raw, json)
Hash identifier:          4xnBJARM4k46CnI5I+JmZ66sdBWb3z24m/pBCkzp6Ic=
Subject key identifier:   26:16:B2:52:92:06:67:8C:55:66:0B:57:5C:4D:AC:9A:D0:C1:44:57
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A03E184
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JhayUpIGZ4xVZgtXXE2smtDBRFc.roa
Signing time:             Tue 08 Mar 2022 02:05:17 +0000
ROA not before:           Tue 08 Mar 2022 02:05:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        193.38.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168026500 (0xa03e184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar  8 02:05:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2616b2529206678c55660b575c4dac9ad0c14457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:06:43:67:3d:f0:6b:fb:b4:ed:55:d9:fe:
                    94:2d:e7:9d:65:5c:0d:af:95:f5:ae:47:b8:26:5c:
                    98:e5:ba:97:6d:ff:41:80:3e:70:fb:ca:fb:8c:6c:
                    e1:00:27:5d:45:ab:0d:5a:5d:de:60:b4:8d:69:54:
                    bd:e0:6b:d3:c8:31:95:34:11:6d:f0:1a:c8:9f:19:
                    45:f2:0e:10:87:df:f2:92:9f:61:63:49:5a:89:02:
                    22:dd:c2:03:0c:db:68:a6:9e:c6:84:20:43:55:db:
                    09:5c:b2:85:9a:0e:10:ad:7b:1c:89:6f:2a:88:b2:
                    16:fa:5d:d7:60:66:12:8c:e6:c8:be:c5:b7:e6:66:
                    11:0c:b5:b1:1b:ea:a1:eb:5e:a8:9f:d9:59:16:ea:
                    c1:da:0f:f0:b1:13:c4:30:2f:1e:4a:66:66:eb:10:
                    9c:fe:24:b8:ca:4a:ae:22:cc:be:a7:f5:f9:56:a7:
                    77:fd:10:bc:b5:a0:4b:df:82:a1:ce:1f:19:a9:57:
                    9d:05:e6:0c:17:84:b5:1b:b2:b6:2f:d5:b5:f6:c3:
                    7c:e8:15:a7:d1:74:1e:b0:0d:94:f5:f6:b1:c3:47:
                    66:2b:34:7e:f8:3a:33:9b:05:59:8e:c5:2a:f9:99:
                    1e:eb:a6:be:68:fd:a3:4c:e0:24:90:9e:a9:da:8a:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:B2:52:92:06:67:8C:55:66:0B:57:5C:4D:AC:9A:D0:C1:44:57
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/JhayUpIGZ4xVZgtXXE2smtDBRFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:97:83:ef:49:53:66:b1:8b:94:8a:c7:9f:03:a1:ff:dc:
         2e:e8:ee:63:08:e8:02:4a:eb:c7:2c:b3:83:40:15:a6:16:7a:
         59:9d:85:94:65:d1:05:20:ce:d3:26:b1:a4:b5:21:03:27:28:
         61:11:5d:8e:27:27:40:80:78:27:2b:3a:4e:4a:03:91:33:49:
         cd:38:e7:60:de:b7:14:78:59:0a:70:0c:72:3e:de:a2:d5:53:
         5d:88:c8:12:bc:8a:ae:72:c2:3e:c6:e0:07:81:98:b3:96:8e:
         08:ed:57:89:99:a0:a0:b0:f2:14:a4:88:df:c4:2a:7d:1b:d1:
         e5:e5:79:c1:bd:77:f8:ff:00:17:0f:dc:ea:a7:b9:dc:a2:ed:
         55:a2:64:51:c8:8d:01:6a:33:ba:10:09:09:c8:e3:b8:8b:fa:
         c0:1f:af:a8:e1:01:7d:6f:3c:75:14:3a:fe:35:f4:b2:9f:8a:
         24:a9:ad:6d:2c:dc:a2:be:ea:a5:ee:21:93:e7:e5:9c:b5:15:
         c7:8c:2e:48:75:b6:ba:46:8c:96:31:cf:a6:3f:5b:82:10:7e:
         c2:25:7a:7a:2a:75:8b:c4:a2:96:ba:20:b5:3c:7c:1b:72:42:
         db:0c:07:2b:b9:91:dd:85:96:77:dd:28:0b:0a:4c:c7:76:6d:
         a3:01:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org