Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/7dmuqVnKFzri4xpJMH44ANX55UA.roa
File:                     7dmuqVnKFzri4xpJMH44ANX55UA.roa (raw, json)
Hash identifier:          /sjVNy8PU3kWmOdSiYmAbkW5KeMApno2rT+jvtT1bzc=
Subject key identifier:   ED:D9:AE:A9:59:CA:17:3A:E2:E3:1A:49:30:7E:38:00:D5:F9:E5:40
Certificate issuer:       /CN=1c06b69560a9d314626a7fe988fdd217474bf86d
Certificate serial:       01856C6ED938705EBE3539CCA9790C148290
Authority key identifier: 1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/7dmuqVnKFzri4xpJMH44ANX55UA.roa
Signing time:             Sun 01 Jan 2023 08:24:41 +0000
ROA not before:           Sun 01 Jan 2023 08:24:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48011
IP address blocks:        185.182.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:6e:d9:38:70:5e:be:35:39:cc:a9:79:0c:14:82:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c06b69560a9d314626a7fe988fdd217474bf86d
        Validity
            Not Before: Jan  1 08:24:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=edd9aea959ca173ae2e31a49307e3800d5f9e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:92:d5:c8:21:66:e8:ff:1b:65:43:d4:f9:
                    bd:7e:68:b9:a4:7e:b8:bf:ea:50:2f:32:6c:c6:02:
                    01:63:c0:ba:d2:96:17:36:24:85:b5:4e:8c:fc:4b:
                    cf:cc:73:b0:a9:6e:51:b1:b5:97:7b:8c:73:41:25:
                    65:f9:8d:30:2b:bf:73:dd:e7:2e:9f:23:21:0e:cf:
                    3a:51:11:55:72:b1:e8:1d:a9:56:75:52:b4:4f:b8:
                    b0:b8:2c:f4:20:06:ac:82:1b:c1:bd:e9:6d:9f:b5:
                    07:4c:2d:b5:2d:23:01:a9:4b:2e:1d:59:74:dc:78:
                    3b:72:1c:41:02:92:47:d0:36:16:cd:b9:e9:72:44:
                    4d:e2:1e:eb:de:aa:f5:c1:38:73:24:fd:07:b4:e5:
                    5a:77:cd:af:a1:00:b4:0c:39:b7:9e:4b:2e:85:67:
                    e0:81:6b:51:eb:e0:ed:4b:2f:f0:7c:a2:58:cd:a3:
                    1a:b1:c9:b4:d4:7f:ac:98:03:26:0d:1b:96:e3:8c:
                    3f:08:15:af:c8:30:c9:f8:f1:00:26:62:75:97:75:
                    73:65:96:6c:30:41:44:8c:7e:f6:74:7b:b4:9b:9d:
                    55:8e:f3:89:55:a6:29:09:59:95:0a:3d:29:ee:cc:
                    db:6e:b1:bd:2f:ec:98:79:80:19:4c:01:33:43:60:
                    f8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D9:AE:A9:59:CA:17:3A:E2:E3:1A:49:30:7E:38:00:D5:F9:E5:40
            X509v3 Authority Key Identifier:
                keyid:1C:06:B6:95:60:A9:D3:14:62:6A:7F:E9:88:FD:D2:17:47:4B:F8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAa2lWCp0xRian_piP3SF0dL-G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/7dmuqVnKFzri4xpJMH44ANX55UA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1c5284-577a-441d-ad05-5153ff6660f5/1/HAa2lWCp0xRian_piP3SF0dL-G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:16:fc:13:1e:fc:e9:90:bf:27:67:31:2b:a4:06:30:e0:8e:
         03:6a:a2:af:08:96:1e:b2:f0:c0:e9:7e:20:7b:79:37:f2:ed:
         28:f3:4f:22:61:33:36:43:02:dc:7e:93:33:bd:c5:eb:7b:af:
         91:0e:cc:0f:99:88:89:6a:28:23:82:9d:e1:c9:f7:0a:c7:13:
         99:81:1d:73:b2:66:e1:d1:b0:73:59:89:c5:40:d9:62:34:d6:
         d1:6d:37:58:08:65:20:e9:6e:ce:62:2e:45:29:90:24:e5:5c:
         2a:9b:e8:61:44:ad:92:89:1a:aa:bc:dd:5e:29:c9:ba:b8:48:
         8c:c0:c2:35:1e:8a:58:6e:06:b1:8b:d0:33:b2:d5:07:20:25:
         8b:04:13:20:e8:45:e1:e3:90:e9:9a:eb:18:b4:49:37:90:5f:
         ec:2c:a2:cd:43:7c:27:13:b3:2e:a5:d8:b2:c5:b3:1c:36:e3:
         4a:cf:43:5e:fa:e8:60:97:eb:79:31:68:38:be:26:e6:f0:26:
         8c:82:a5:03:6a:73:b3:0a:2b:c7:dc:39:11:e9:b7:1d:d8:d9:
         a6:21:81:2b:3e:ae:b2:3a:38:94:1a:e2:6f:dc:06:56:b8:f2:
         ec:bb:94:c7:55:23:6b:22:35:40:67:f3:59:ee:57:91:c0:f3:
         c2:76:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org