Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/9rjd6Ow998TtQqBg4rhsjkVuYc0.roa
File:                     9rjd6Ow998TtQqBg4rhsjkVuYc0.roa (raw, json)
Hash identifier:          TmNuL3aJrOFm73EVCZAsfKKFH6iiTu7oFve8VICQ1e0=
Subject key identifier:   F6:B8:DD:E8:EC:3D:F7:C4:ED:42:A0:60:E2:B8:6C:8E:45:6E:61:CD
Certificate issuer:       /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial:       01A34319
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/9rjd6Ow998TtQqBg4rhsjkVuYc0.roa
Signing time:             Wed 04 May 2022 06:02:44 +0000
ROA not before:           Wed 04 May 2022 06:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        45.81.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27476761 (0x1a34319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
        Validity
            Not Before: May  4 06:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6b8dde8ec3df7c4ed42a060e2b86c8e456e61cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:c3:8c:d0:7e:8b:27:17:c0:92:d6:7d:2e:
                    b6:c5:19:8d:c9:74:b2:d0:78:0d:0f:e5:e3:84:9a:
                    2b:55:ab:d4:05:34:65:cd:cb:44:27:43:25:3b:66:
                    b1:b7:86:bd:4f:65:2e:c1:28:31:a3:49:91:4e:97:
                    40:fe:f5:46:47:9e:65:46:23:be:5a:1a:4a:0a:eb:
                    91:f5:a7:83:15:f5:37:d8:07:6d:4e:78:3d:87:68:
                    65:48:36:e0:12:ea:08:a1:be:95:d8:ae:fb:1c:a1:
                    f3:a2:20:0b:7d:9b:95:73:61:70:13:78:9d:5c:8f:
                    f9:11:1e:25:d9:00:a7:66:07:fa:68:0a:47:15:ed:
                    8c:13:4b:1b:64:68:c0:3b:e4:0e:9c:4f:ee:a1:66:
                    93:a5:87:c7:61:69:cf:2d:30:8f:b3:b6:a1:e7:38:
                    cf:de:f5:4c:d7:2e:3a:c8:4c:e8:08:2b:6a:19:07:
                    f8:70:8c:d7:50:64:0a:c4:11:c0:95:b6:5f:16:a8:
                    1b:82:b4:6e:cc:ed:3d:dc:d2:ad:31:e9:b6:20:b9:
                    b3:2f:79:e8:18:be:30:16:90:e7:ca:e7:1d:0b:38:
                    d3:52:88:f1:66:8f:9a:08:51:04:b8:e3:89:74:5e:
                    d4:33:95:17:01:2c:7e:0d:7b:3b:b9:09:48:f9:4e:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B8:DD:E8:EC:3D:F7:C4:ED:42:A0:60:E2:B8:6C:8E:45:6E:61:CD
            X509v3 Authority Key Identifier:
                keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/9rjd6Ow998TtQqBg4rhsjkVuYc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:ed:a4:59:dc:e7:9d:ac:bb:3d:5b:15:f8:2b:bf:7c:1f:
         dd:d8:27:46:2c:47:de:10:25:04:1e:d2:cc:1a:10:df:23:b6:
         25:b0:c0:04:ce:80:fa:71:fc:b4:7c:04:25:d6:48:8b:5e:f8:
         79:79:09:c3:95:62:14:e6:b1:d6:ee:24:6e:41:30:f0:63:05:
         88:f5:46:9f:02:8d:67:cc:5b:76:9c:5f:5a:04:26:2a:a8:63:
         5c:1a:28:58:ee:b2:34:ef:ec:3e:76:fb:fc:fc:12:9f:f2:b2:
         fd:fc:bf:62:d4:c3:33:8f:66:40:80:77:53:2f:33:60:4f:84:
         84:8b:3e:c5:3c:2b:da:80:5a:88:57:04:47:06:85:21:95:0a:
         81:23:e3:02:ab:3a:cd:f5:db:65:d5:94:63:71:21:aa:48:e2:
         0f:ca:be:1f:60:cd:02:3d:2c:36:56:66:c1:d5:9e:b2:00:09:
         45:f6:a7:55:a2:f2:dd:8f:03:6c:01:42:e9:e9:c3:7c:36:fd:
         dc:6f:ea:e2:e5:9a:d0:d6:4c:33:ac:2c:d7:e6:ae:0d:9f:97:
         1e:fd:4f:2b:65:f4:bb:1b:53:82:8f:c6:c0:e1:62:b9:e6:27:
         e2:2d:e5:6f:88:b6:12:c7:d7:7b:54:dd:e0:fa:40:35:68:78:
         9a:f3:b2:e1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAaNDGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ODkzY2M2ZGI4N2Q2OWNmNWQwMWE5Zjk2Y2Y2YmMzYzgzOTdhZDgwMB4XDTIyMDUw
NDA2MDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZiOGRkZThlYzNk
ZjdjNGVkNDJhMDYwZTJiODZjOGU0NTZlNjFjZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmOw4zQfosnF8CS1n0utsUZjcl0stB4DQ/l44SaK1Wr1AU0
Zc3LRCdDJTtmsbeGvU9lLsEoMaNJkU6XQP71RkeeZUYjvloaSgrrkfWngxX1N9gH
bU54PYdoZUg24BLqCKG+ldiu+xyh86IgC32blXNhcBN4nVyP+REeJdkAp2YH+mgK
RxXtjBNLG2RowDvkDpxP7qFmk6WHx2Fpzy0wj7O2oec4z971TNcuOshM6AgrahkH
+HCM11BkCsQRwJW2XxaoG4K0bsztPdzSrTHptiC5sy956Bi+MBaQ58rnHQs401KI
8WaPmghRBLjjiXRe1DOVFwEsfg17O7kJSPlOF40CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT2uN3o7D33xO1CoGDiuGyORW5hzTAfBgNVHSMEGDAWgBSYk8xtuH1pz10B
qfls9rw8g5etgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21KUE1iYmg5YWM5ZEFhbjViUGE4UElPWHJZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYjlmZTgyLTNjYzQtNDcxMy05YjdjLTk5MTY2MmMwMmZiNC8x
LzlyamQ2T3c5OThUdFFxQmc0cmhzamtWdVljMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YjlmZTgyLTNjYzQtNDcxMy05YjdjLTk5MTY2MmMwMmZiNC8xL21KUE1iYmg5YWM5
ZEFhbjViUGE4UElPWHJZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1R8zANBgkqhkiG9w0BAQsFAAOC
AQEAc7btpFnc552suz1bFfgrv3wf3dgnRixH3hAlBB7SzBoQ3yO2JbDABM6A+nH8
tHwEJdZIi174eXkJw5ViFOax1u4kbkEw8GMFiPVGnwKNZ8xbdpxfWgQmKqhjXBoo
WO6yNO/sPnb7/PwSn/Ky/fy/YtTDM49mQIB3Uy8zYE+EhIs+xTwr2oBaiFcERwaF
IZUKgSPjAqs6zfXbZdWUY3EhqkjiD8q+H2DNAj0sNlZmwdWesgAJRfanVaLy3Y8D
bAFC6enDfDb93G/q4uWa0NZMM6ws1+auDZ+XHv1PK2X0uxtTgo/GwOFiueYn4i3l
b4i2EsfXe1Td4PpANWh4mvOy4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:05 2024 by rpki-client on console-ams.rpki-client.org