Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/sU3nHOOFxSL8WDqaAF1B_Z9Lj_g.roa
File:                     sU3nHOOFxSL8WDqaAF1B_Z9Lj_g.roa (raw, json)
Hash identifier:          8dOBImlMdI2OBKxiCozdaDUoYxfw8+ElFtkHV91dE0E=
Subject key identifier:   B1:4D:E7:1C:E3:85:C5:22:FC:58:3A:9A:00:5D:41:FD:9F:4B:8F:F8
Certificate issuer:       /CN=0f6122c3d7c5c5ff8352e4ed23f8b3d7dff48f71
Certificate serial:       018573E85AAEB7108B013DC2F88E33311711
Authority key identifier: 0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/sU3nHOOFxSL8WDqaAF1B_Z9Lj_g.roa
Signing time:             Mon 02 Jan 2023 19:14:45 +0000
ROA not before:           Mon 02 Jan 2023 19:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62455
IP address blocks:        185.233.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:e8:5a:ae:b7:10:8b:01:3d:c2:f8:8e:33:31:17:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6122c3d7c5c5ff8352e4ed23f8b3d7dff48f71
        Validity
            Not Before: Jan  2 19:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b14de71ce385c522fc583a9a005d41fd9f4b8ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:3b:ab:ec:99:91:fa:00:cb:55:e7:b4:c2:
                    af:ae:99:3d:66:a5:0b:fa:99:ff:f0:f6:59:11:b2:
                    49:c7:e1:1b:ce:15:21:68:03:fa:4c:db:cd:2a:f7:
                    09:ca:bf:b8:51:3c:3b:b9:d8:3d:7f:e0:6d:a6:9a:
                    26:13:53:90:07:8e:61:2d:f9:f2:dd:21:73:8e:5c:
                    e6:d7:c5:f7:f2:2c:1c:6d:0f:c2:f4:4d:26:29:e0:
                    ec:d5:78:ce:f3:1d:a9:26:3a:9f:62:9f:f3:e8:d2:
                    58:4c:83:6a:bb:58:46:4b:3b:76:13:2f:33:8c:ab:
                    91:fc:3b:22:96:81:e5:d1:ad:f7:bf:ed:1c:6c:d4:
                    ef:6c:23:73:69:c7:ed:e5:1c:11:0c:ae:63:a7:d3:
                    71:96:06:dc:37:a5:6a:70:fe:83:22:99:c4:3c:de:
                    79:e4:fb:2b:d5:14:4c:48:a9:77:ab:97:ef:24:05:
                    9a:8f:d3:7c:4a:c7:35:55:1c:74:65:b4:11:aa:e0:
                    9a:b9:20:04:fa:cd:01:41:07:2d:df:c1:a3:77:87:
                    aa:a2:74:81:14:04:69:9f:c4:f8:7b:ff:30:d2:2f:
                    8d:88:c2:80:09:ed:bb:17:10:c2:16:aa:23:68:43:
                    56:39:4e:23:f6:ee:1c:3b:bb:dd:7c:c3:18:43:32:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4D:E7:1C:E3:85:C5:22:FC:58:3A:9A:00:5D:41:FD:9F:4B:8F:F8
            X509v3 Authority Key Identifier:
                keyid:0F:61:22:C3:D7:C5:C5:FF:83:52:E4:ED:23:F8:B3:D7:DF:F4:8F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Eiw9fFxf-DUuTtI_iz19_0j3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/sU3nHOOFxSL8WDqaAF1B_Z9Lj_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4f1e0-5de1-4c12-92fb-a716db54c7c4/1/D2Eiw9fFxf-DUuTtI_iz19_0j3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:a6:4f:f5:13:82:33:19:eb:6e:a2:6a:58:34:e3:fd:53:
         3d:ea:0e:37:bd:29:d7:e0:38:95:44:30:1a:05:3b:76:99:87:
         07:f9:b3:e7:f5:de:22:30:6c:ec:e5:f7:e8:81:49:4c:5b:b9:
         cf:96:8a:21:10:f7:2d:c3:d7:fd:20:85:d9:26:10:c9:d9:36:
         6f:21:d1:30:8b:9a:8c:6a:14:37:78:20:14:b8:f3:c7:f9:2b:
         8d:66:85:8f:66:dd:88:b1:74:79:6b:97:01:6d:b8:8f:bb:0e:
         a5:9c:7f:25:34:4a:80:ae:6c:1d:d4:4c:b4:5c:ba:c7:cb:77:
         1d:1d:ef:b7:88:74:ab:26:a7:79:05:08:9d:8f:ae:39:0e:a6:
         50:cb:8d:72:c8:45:1a:25:33:fb:e9:51:84:67:f8:82:e2:8c:
         47:72:c9:e6:3f:80:5c:83:18:e8:b8:bb:0e:20:cc:3f:39:c7:
         d3:ad:f5:0f:0a:67:44:94:4a:be:a2:16:26:e9:df:08:15:f8:
         a6:a9:8f:55:3e:ab:d3:8a:46:31:b4:49:39:20:2e:57:ff:a9:
         d1:82:4e:cf:44:04:d6:1a:fb:b8:37:4f:d2:58:f9:65:1a:f0:
         42:69:10:7a:9f:37:91:e2:83:f5:89:74:94:12:c4:76:17:3c:
         f3:95:d4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:23 2024 by rpki-client on console-ams.rpki-client.org