Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ebjmHSowUno17GaOc5Z8j0rnqcs.roa
File:                     ebjmHSowUno17GaOc5Z8j0rnqcs.roa (raw, json)
Hash identifier:          Aox1lbPgZb6pffS7j51GqQJ3rizawpVZDczFNWUULfw=
Subject key identifier:   79:B8:E6:1D:2A:30:52:7A:35:EC:66:8E:73:96:7C:8F:4A:E7:A9:CB
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       0A41250B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ebjmHSowUno17GaOc5Z8j0rnqcs.roa
Signing time:             Mon 28 Mar 2022 18:45:26 +0000
ROA not before:           Mon 28 Mar 2022 18:45:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142430
IP address blocks:        85.209.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172041483 (0xa41250b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Mar 28 18:45:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79b8e61d2a30527a35ec668e73967c8f4ae7a9cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:3d:50:74:44:3f:48:a6:bc:0f:db:23:9b:
                    08:3d:32:15:bf:53:b4:e8:4b:02:a4:7b:49:83:43:
                    16:81:eb:25:a5:40:c8:c8:eb:92:aa:b8:b7:60:61:
                    55:06:e2:45:98:6e:8d:bf:88:0f:e9:ef:86:1c:26:
                    28:44:79:f3:9b:a8:20:e1:aa:71:50:d2:cd:34:21:
                    7a:9c:ca:4a:88:ea:11:92:c9:e1:11:cd:3f:36:5f:
                    1f:8d:4b:69:82:d0:29:97:78:4d:5a:42:69:d5:05:
                    92:1e:67:b3:9c:f8:8f:ea:25:3c:1d:3a:45:4c:cd:
                    74:56:e0:7b:4e:98:fb:8b:95:6e:a2:81:eb:b3:a1:
                    37:ba:87:16:4b:ec:f3:b5:f5:5f:d6:19:0c:06:50:
                    2d:f2:1e:85:a9:6e:7c:fd:f0:01:93:e2:f6:eb:7b:
                    a4:2a:c6:22:6f:0e:26:44:d3:d5:91:d5:a8:45:a0:
                    0f:30:2a:ce:5c:6f:8a:b3:9b:b2:46:0d:94:30:b8:
                    43:43:62:8d:c2:d4:98:dc:d9:03:3d:64:e1:c4:6b:
                    de:aa:77:a6:53:91:8a:09:57:29:ec:b4:cd:9f:96:
                    3a:fa:8f:6a:d7:dd:3d:08:a0:e5:c3:95:df:b5:55:
                    62:ff:68:5c:c8:9e:78:71:2f:8f:c8:a4:36:41:26:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:E6:1D:2A:30:52:7A:35:EC:66:8E:73:96:7C:8F:4A:E7:A9:CB
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ebjmHSowUno17GaOc5Z8j0rnqcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:24:57:26:5e:8f:a1:e4:9b:00:38:c8:90:79:ac:53:48:d0:
         e4:a2:7f:fa:a9:cc:b3:83:0c:2e:d4:12:3c:6a:de:54:92:2c:
         2a:58:f6:08:3d:d9:f2:8a:b6:ce:d8:79:9e:76:ea:6e:e9:9c:
         65:ca:c3:61:c6:e6:f2:5d:7a:bd:b7:7f:c9:6f:c2:8f:81:80:
         49:f6:a6:65:30:b4:dc:7c:6a:2c:48:dd:82:6a:e0:73:6c:78:
         69:5c:c8:d1:19:f3:40:ce:54:88:d4:43:30:e7:09:7f:ac:7a:
         42:66:8f:04:70:61:4a:7e:78:26:76:0a:c4:30:f6:ca:97:73:
         0a:0d:b6:66:9e:e0:86:51:ba:53:2d:83:0c:c2:1f:b3:5b:02:
         6c:92:d3:6d:c2:d8:a8:65:b2:00:5c:32:23:86:87:b3:3d:65:
         19:a4:47:68:76:cc:96:e6:15:32:ab:b6:99:48:7f:76:6a:ad:
         9e:74:d8:7a:8e:98:d0:02:24:c5:40:2c:04:d4:a3:1a:7c:fd:
         8f:9b:50:3e:34:f3:51:46:f6:2b:f9:f1:a1:92:a7:4a:38:de:
         77:92:d6:d3:7e:e9:16:ff:2f:5e:5f:93:44:f4:42:da:33:25:
         69:f7:96:25:49:e7:f8:77:2a:02:d5:3e:44:53:5b:bc:8c:e4:
         31:c3:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org