Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa
File:                     i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa (raw, json)
Hash identifier:          mC+MLhcr3EpysgE3oTWnE65TQd5v1r3hizJF21L4OPI=
Subject key identifier:   8B:EF:50:C9:12:BB:71:3A:A4:93:32:E6:F5:52:49:85:5B:12:65:00
Certificate issuer:       /CN=5251cedc9387c6b3d37fd56461019ca52118aa73
Certificate serial:       018CC8DF523479AF4B5AF3BE9FA271BE4030
Authority key identifier: 52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa
Signing time:             Tue 02 Jan 2024 06:32:07 +0000
ROA not before:           Tue 02 Jan 2024 06:32:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58061
IP address blocks:        195.64.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:52:34:79:af:4b:5a:f3:be:9f:a2:71:be:40:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5251cedc9387c6b3d37fd56461019ca52118aa73
        Validity
            Not Before: Jan  2 06:32:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8bef50c912bb713aa49332e6f55249855b126500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4b:1e:51:f9:82:8d:66:cf:f1:ef:d7:17:60:
                    ab:df:03:e3:01:21:41:74:d1:6c:25:23:b2:47:00:
                    0d:20:9b:c6:71:79:a8:0b:32:f8:0b:cf:a4:49:91:
                    db:cc:7b:4c:a2:0e:83:b3:d2:f8:da:75:04:0d:9f:
                    50:66:83:53:49:84:11:bf:3e:2d:fd:76:5d:a3:a3:
                    9a:3c:1d:df:4d:2b:15:15:e6:1c:e9:d2:6c:e4:be:
                    61:1a:cf:5b:ca:e5:f5:18:a1:71:dd:7b:de:03:a3:
                    57:85:2f:71:b7:8b:08:88:b3:e1:bb:8a:79:64:a0:
                    b6:62:38:4e:7e:04:2e:78:00:2e:fc:48:1f:f7:3d:
                    bf:0e:f5:dd:0d:8b:29:7c:7b:46:12:6e:f3:8f:5a:
                    15:b8:f5:fe:98:8d:60:a2:48:f4:79:55:4a:09:ce:
                    8d:13:2e:a7:81:19:1e:61:91:a1:d3:46:b1:96:4f:
                    a0:9b:0f:62:0f:d5:40:4e:75:d8:5e:20:bb:30:dd:
                    a0:aa:c9:bf:ae:01:16:e4:e9:b8:b9:dc:4a:73:c9:
                    d7:d9:41:5f:1f:f1:ef:09:d9:87:90:1d:1b:4b:5e:
                    67:b6:35:a1:cf:cd:7c:c5:a5:14:78:27:4e:e2:6a:
                    bd:db:92:56:0c:f7:fd:d2:56:19:c6:25:ce:b0:78:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:50:C9:12:BB:71:3A:A4:93:32:E6:F5:52:49:85:5B:12:65:00
            X509v3 Authority Key Identifier:
                keyid:52:51:CE:DC:93:87:C6:B3:D3:7F:D5:64:61:01:9C:A5:21:18:AA:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlHO3JOHxrPTf9VkYQGcpSEYqnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/i-9QyRK7cTqkkzLm9VJJhVsSZQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b8a72-7f7c-44e5-ad18-3d475e8e6c68/1/UlHO3JOHxrPTf9VkYQGcpSEYqnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.64.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:04:2f:34:42:69:7d:c6:80:4f:fe:8f:a0:a8:75:de:a5:bb:
         31:d4:0a:6c:b2:a9:6c:d7:ed:8c:d4:c5:8c:d6:95:11:bf:fb:
         6f:9f:41:7d:bc:a8:78:f9:53:c1:58:5b:a3:ad:81:16:0a:bc:
         f9:0a:3b:89:7d:d3:35:e2:0b:fb:e0:03:81:bb:e7:94:b7:13:
         82:3b:d4:51:5f:c7:1f:92:cf:bc:d3:56:dd:49:33:f2:8c:31:
         71:19:57:fd:0a:71:46:e7:3e:71:63:0f:ad:23:ac:f6:a1:8a:
         d0:6f:3a:25:54:98:68:6f:2e:cb:5b:b1:49:fe:9b:50:77:f3:
         32:42:a6:52:62:4f:d1:ce:97:69:4d:da:05:ea:97:2c:ce:d5:
         17:7e:f2:8e:00:36:e9:73:17:1c:6c:46:4a:c5:06:cb:69:76:
         0a:cc:38:92:46:c3:6a:dc:e0:86:62:23:6c:6d:31:10:fc:cc:
         2e:35:2c:9b:98:1f:e3:cf:0d:1a:6c:3d:03:51:63:54:42:4b:
         22:43:47:f3:52:c8:be:51:29:ca:38:c8:d6:a7:a0:3d:f4:2a:
         d3:b1:37:16:6f:84:51:d0:62:ab:1e:63:ea:eb:74:48:fd:c4:
         16:29:73:df:c5:7b:c0:16:3c:dc:92:d5:47:a9:f6:4d:db:3f:
         e4:eb:a0:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI31I0ea9LWvO+n6JxvkAwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNTFjZWRjOTM4N2M2YjNkMzdmZDU2NDYxMDE5Y2E1MjEx
OGFhNzMwHhcNMjQwMTAyMDYzMjA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmVmNTBjOTEyYmI3MTNhYTQ5MzMyZTZmNTUyNDk4NTViMTI2NTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEseUfmCjWbP8e/XF2Cr3wPjASFB
dNFsJSOyRwANIJvGcXmoCzL4C8+kSZHbzHtMog6Ds9L42nUEDZ9QZoNTSYQRvz4t
/XZdo6OaPB3fTSsVFeYc6dJs5L5hGs9byuX1GKFx3XveA6NXhS9xt4sIiLPhu4p5
ZKC2YjhOfgQueAAu/Egf9z2/DvXdDYspfHtGEm7zj1oVuPX+mI1gokj0eVVKCc6N
Ey6ngRkeYZGh00axlk+gmw9iD9VATnXYXiC7MN2gqsm/rgEW5Om4udxKc8nX2UFf
H/HvCdmHkB0bS15ntjWhz818xaUUeCdO4mq925JWDPf90lYZxiXOsHiYlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIvvUMkSu3E6pJMy5vVSSYVbEmUAMB8GA1UdIwQY
MBaAFFJRztyTh8az03/VZGEBnKUhGKpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWxITzNKT0h4clBUZjlWa1lRR2NwU0VZcW5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wYjhhNzItN2Y3Yy00NGU1LWFkMTgt
M2Q0NzVlOGU2YzY4LzEvaS05UXlSSzdjVHFra3pMbTlWSkpoVnNTWlFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wYjhhNzItN2Y3Yy00NGU1LWFkMTgtM2Q0NzVlOGU2YzY4
LzEvVWxITzNKT0h4clBUZjlWa1lRR2NwU0VZcW5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0BuMA0G
CSqGSIb3DQEBCwUAA4IBAQBHBC80Qml9xoBP/o+gqHXepbsx1Apssqls1+2M1MWM
1pURv/tvn0F9vKh4+VPBWFujrYEWCrz5CjuJfdM14gv74AOBu+eUtxOCO9RRX8cf
ks+801bdSTPyjDFxGVf9CnFG5z5xYw+tI6z2oYrQbzolVJhoby7LW7FJ/ptQd/My
QqZSYk/RzpdpTdoF6pcsztUXfvKOADbpcxccbEZKxQbLaXYKzDiSRsNq3OCGYiNs
bTEQ/MwuNSybmB/jzw0abD0DUWNUQksiQ0fzUsi+USnKOMjWp6A99CrTsTcWb4RR
0GKrHmPq63RI/cQWKXPfxXvAFjzcktVHqfZN2z/k66AX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:37 2024 by rpki-client on console-ams.rpki-client.org