Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa
File:                     qjsm-xQ-0VmxR84Og9htyCvu-9A.roa (raw, json)
Hash identifier:          uf+7oehit7/q8DmhvJ1hVSS87H97JmEts7kgA8p0lto=
Subject key identifier:   AA:3B:26:FB:14:3E:D1:59:B1:47:CE:0E:83:D8:6D:C8:2B:EE:FB:D0
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       098EC205
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa
Signing time:             Sat 01 Jan 2022 14:56:46 +0000
ROA not before:           Sat 01 Jan 2022 14:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        83.150.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160350725 (0x98ec205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Jan  1 14:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aa3b26fb143ed159b147ce0e83d86dc82beefbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:02:3d:d7:21:df:84:77:45:91:f8:6e:28:
                    91:01:2a:78:3d:a0:23:cb:40:c0:00:29:0d:57:f5:
                    d9:37:60:81:49:76:be:d8:53:69:a5:9e:f9:d1:27:
                    39:48:41:98:7e:75:22:3f:09:b6:af:ca:1f:4d:1d:
                    f7:4c:7c:ca:8d:1b:77:c9:07:09:bc:5b:2b:c0:bd:
                    61:a2:21:ee:1c:0f:c2:a7:5f:57:26:6d:e6:74:33:
                    03:fe:b0:5c:f2:8f:1a:b9:f0:10:f7:33:3f:34:e5:
                    7c:e0:58:77:ce:1e:7b:a9:61:5b:e3:c6:18:77:31:
                    ab:48:05:e8:3c:5e:e0:b4:76:e6:e2:ce:61:b5:97:
                    16:45:93:00:64:91:47:2f:2e:e8:71:ef:98:5b:37:
                    00:68:f0:d7:52:78:00:50:d4:98:70:0e:24:74:c9:
                    7a:34:2a:81:37:2c:d4:e2:43:68:79:4a:1d:1c:d6:
                    00:43:f4:11:9a:a7:8d:df:3c:28:a6:df:1c:f3:36:
                    5b:f1:f6:de:38:46:7f:99:cd:ee:ab:12:a9:b7:1e:
                    17:7a:17:87:95:6a:2a:4b:cd:6b:01:62:d2:6b:11:
                    55:87:d9:03:e2:c7:c1:9b:71:c8:96:09:03:ec:d2:
                    84:7f:75:fd:60:0a:03:9d:1c:68:2c:cd:27:7c:ee:
                    62:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:26:FB:14:3E:D1:59:B1:47:CE:0E:83:D8:6D:C8:2B:EE:FB:D0
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/qjsm-xQ-0VmxR84Og9htyCvu-9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.150.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fb:2a:1f:4b:bd:46:a5:fc:49:13:c7:5a:4f:75:18:1f:a2:
         95:71:89:9f:a8:2a:26:b6:c5:ed:35:2d:8a:77:59:48:73:cd:
         eb:dd:7a:46:ea:74:15:40:d5:98:07:8b:25:30:44:ae:fd:4f:
         b4:1d:de:03:20:43:fb:96:76:9b:df:dc:df:79:62:88:f5:81:
         ea:78:32:70:7a:19:6e:5d:d0:b0:69:28:dd:ab:10:50:d9:f4:
         5a:9b:ff:fe:66:b9:a5:40:fd:21:1b:b1:42:01:7e:43:0e:9f:
         24:c6:ce:ca:a0:5e:8b:46:d6:2b:f1:b7:9f:04:ae:b6:5f:ef:
         4f:19:99:81:ec:58:73:69:00:7e:22:a3:6b:e3:0b:7d:f8:20:
         a2:09:7a:e0:8f:8c:73:29:ad:a1:f7:c9:11:12:d9:ec:9a:59:
         1b:88:5a:61:b2:34:6a:dd:01:9b:78:00:76:60:db:fd:4a:f7:
         0c:1b:9b:73:56:13:f8:79:f0:19:39:01:f6:ad:8c:77:21:56:
         0e:f1:e3:2f:98:eb:42:36:f5:66:b4:d8:9d:49:4a:4c:b1:81:
         4a:de:73:b8:8d:5b:4f:46:b2:2e:fc:e7:9c:48:ca:d9:59:e6:
         e6:5e:8e:cf:76:a2:a0:38:bd:cf:16:bf:98:2f:83:2e:cf:9e:
         01:bb:54:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECY7CBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YzQyNjE4ODBmODJmMzg0NzFhNTcxN2I4MDA5YzRmYmRhMmRmMjQyMB4XDTIyMDEw
MTE0NTY0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWEzYjI2ZmIxNDNl
ZDE1OWIxNDdjZTBlODNkODZkYzgyYmVlZmJkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANTnAj3XId+Ed0WR+G4okQEqeD2gI8tAwAApDVf12TdggUl2
vthTaaWe+dEnOUhBmH51Ij8Jtq/KH00d90x8yo0bd8kHCbxbK8C9YaIh7hwPwqdf
VyZt5nQzA/6wXPKPGrnwEPczPzTlfOBYd84ee6lhW+PGGHcxq0gF6Dxe4LR25uLO
YbWXFkWTAGSRRy8u6HHvmFs3AGjw11J4AFDUmHAOJHTJejQqgTcs1OJDaHlKHRzW
AEP0EZqnjd88KKbfHPM2W/H23jhGf5nN7qsSqbceF3oXh5VqKkvNawFi0msRVYfZ
A+LHwZtxyJYJA+zShH91/WAKA50caCzNJ3zuYkkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSqOyb7FD7RWbFHzg6D2G3IK+770DAfBgNVHSMEGDAWgBTMQmGID4LzhHGl
cXuACcT72i3yQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pFSmhpQS1DODRSeHBYRjdnQW5FLTlvdDhrSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvN2Q5M2IzLTdkZGYtNGQzYS1hNDU0LWQ1NjQ3MWU2MWMzMy8x
L3Fqc20teFEtMFZteFI4NE9nOWh0eUN2dS05QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
N2Q5M2IzLTdkZGYtNGQzYS1hNDU0LWQ1NjQ3MWU2MWMzMy8xL3pFSmhpQS1DODRS
eHBYRjdnQW5FLTlvdDhrSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOW2jANBgkqhkiG9w0BAQsFAAOC
AQEAWPsqH0u9RqX8SRPHWk91GB+ilXGJn6gqJrbF7TUtindZSHPN6916Rup0FUDV
mAeLJTBErv1PtB3eAyBD+5Z2m9/c33liiPWB6ngycHoZbl3QsGko3asQUNn0Wpv/
/ma5pUD9IRuxQgF+Qw6fJMbOyqBei0bWK/G3nwSutl/vTxmZgexYc2kAfiKja+ML
ffggogl64I+McymtoffJERLZ7JpZG4haYbI0at0Bm3gAdmDb/Ur3DBubc1YT+Hnw
GTkB9q2MdyFWDvHjL5jrQjb1ZrTYnUlKTLGBSt5zuI1bT0ayLvznnEjK2Vnm5l6O
z3aioDi9zxa/mC+DLs+eAbtUOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:08 2024 by rpki-client on console-fra.rpki-client.org