Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/GhamXc8XMrUpYTrqXJ3B5QiWEqU.roa
File:                     GhamXc8XMrUpYTrqXJ3B5QiWEqU.roa (raw, json)
Hash identifier:          qKDppiaUfj6iqr/k4e5Co14SpQk5SBbyoQlsB3ZADA4=
Subject key identifier:   1A:16:A6:5D:CF:17:32:B5:29:61:3A:EA:5C:9D:C1:E5:08:96:12:A5
Certificate issuer:       /CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
Certificate serial:       01859B18025A43A4F45D1B7DA1639F06F649
Authority key identifier: C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/GhamXc8XMrUpYTrqXJ3B5QiWEqU.roa
Signing time:             Tue 10 Jan 2023 09:51:59 +0000
ROA not before:           Tue 10 Jan 2023 09:51:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205091
IP address blocks:        193.3.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9b:18:02:5a:43:a4:f4:5d:1b:7d:a1:63:9f:06:f6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d4bcb45d851025811f532f478a8c7b3ce66888
        Validity
            Not Before: Jan 10 09:51:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a16a65dcf1732b529613aea5c9dc1e5089612a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:3a:13:9c:91:45:6c:56:d6:65:b5:05:3a:
                    e2:55:d6:41:44:42:72:94:e0:6f:d7:20:98:21:3c:
                    ee:c7:a7:01:b3:e2:29:bb:ef:08:23:7c:bb:cf:ae:
                    b5:dc:cf:05:ad:86:8d:16:e3:4f:5e:91:85:02:03:
                    cf:75:69:37:5c:ed:4c:f6:54:30:7d:a4:99:76:35:
                    9c:dc:47:ce:d2:2c:e2:c8:ed:d0:58:52:b7:75:f9:
                    99:97:df:9a:04:99:d9:fa:48:fa:c4:0a:0c:73:fe:
                    ce:6c:c9:42:b7:45:49:31:78:2a:18:64:d7:54:f5:
                    6e:ef:86:5c:dc:7c:3e:4c:7f:cb:0f:2e:cb:ca:9a:
                    7d:a9:e3:b0:83:fa:9b:58:9d:2e:7a:50:c4:82:63:
                    b8:8a:d2:69:9c:08:2e:2b:2c:46:5d:1f:cb:35:23:
                    6e:c6:dc:90:56:4a:c6:ef:56:e8:8b:8c:f0:2c:4d:
                    4f:20:2b:ac:19:b9:3f:9e:56:f8:23:8f:5e:d8:6c:
                    40:f5:44:06:d8:b6:30:4e:fb:2e:29:5e:91:44:2d:
                    3b:d0:a3:a6:90:0a:0c:a6:bf:5c:49:d2:63:54:d4:
                    a4:0c:f6:b5:58:2e:ae:62:e3:0a:27:95:18:21:d2:
                    2e:4c:ff:33:7c:8e:58:35:76:da:49:34:4c:40:85:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:16:A6:5D:CF:17:32:B5:29:61:3A:EA:5C:9D:C1:E5:08:96:12:A5
            X509v3 Authority Key Identifier:
                keyid:C0:D4:BC:B4:5D:85:10:25:81:1F:53:2F:47:8A:8C:7B:3C:E6:68:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNS8tF2FECWBH1MvR4qMezzmaIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/GhamXc8XMrUpYTrqXJ3B5QiWEqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6fc89-3376-4ea5-ae8b-ef7d21414db6/1/wNS8tF2FECWBH1MvR4qMezzmaIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:3b:05:05:9b:d9:85:db:03:82:ef:95:dd:73:ec:73:1f:
         bb:93:db:d1:8e:42:b2:d9:fb:f8:8a:a6:91:a0:c4:13:a1:bc:
         9c:bc:3e:cb:b1:0a:5e:30:97:5a:af:82:b8:32:61:33:32:42:
         1a:b3:1f:40:aa:e3:6e:37:48:b9:47:0d:ff:94:17:b5:48:c6:
         79:24:92:ac:9b:76:2e:ea:e7:d4:71:61:13:65:0b:01:e9:a9:
         f6:5a:bc:a8:19:d9:37:99:94:38:c5:03:61:07:dc:f6:e9:31:
         22:16:9a:ab:3b:da:00:8e:af:47:50:a9:f1:2c:fb:be:5a:08:
         b9:ff:42:1c:96:4e:e0:f6:57:4b:39:4d:4d:d7:c8:4d:4e:1b:
         fb:8e:03:7f:94:d9:ae:c6:b4:8a:93:a7:a3:50:e8:2d:26:1d:
         6a:af:b5:9a:ca:b1:bc:9e:30:9a:fe:14:e4:8a:b2:59:8f:17:
         bd:9d:1e:e9:98:16:b2:fa:d8:f2:18:6b:00:c8:f6:c3:a2:5e:
         02:55:12:a4:8e:41:7a:53:2b:6d:31:3e:12:d1:e7:ca:51:cf:
         42:be:df:5f:e1:03:f4:b2:4f:a5:06:6e:30:d8:9d:3c:86:d9:
         e9:e7:59:7e:a9:8c:08:7f:3b:ab:c2:10:2f:1b:14:b1:2a:90:
         85:10:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:19 2024 by rpki-client on console-ams.rpki-client.org