Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/JI-63-5Czuhav_W5egOdoSEg2Q4.roa
File:                     JI-63-5Czuhav_W5egOdoSEg2Q4.roa (raw, json)
Hash identifier:          8eluahuO87b73TMqfLLCEKOqXM105IAArxDY/rlWvxI=
Subject key identifier:   24:8F:BA:DF:EE:42:CE:E8:5A:BF:F5:B9:7A:03:9D:A1:21:20:D9:0E
Certificate issuer:       /CN=0009e04f89095ad0af58b4b2a13dd4a9f44bed1e
Certificate serial:       01C30C06
Authority key identifier: 00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAngT4kJWtCvWLSyoT3UqfRL7R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/JI-63-5Czuhav_W5egOdoSEg2Q4.roa
Signing time:             Sat 01 Jan 2022 04:53:12 +0000
ROA not before:           Sat 01 Jan 2022 04:53:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48715
IP address blocks:        185.36.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29559814 (0x1c30c06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0009e04f89095ad0af58b4b2a13dd4a9f44bed1e
        Validity
            Not Before: Jan  1 04:53:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=248fbadfee42cee85abff5b97a039da12120d90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:3a:ae:c3:b1:61:36:e8:88:7c:f5:af:6a:
                    5e:d2:39:31:a4:c7:fa:ee:6b:84:bf:55:0e:2b:6c:
                    40:b8:04:d8:00:35:fd:0b:83:e5:51:0c:aa:55:96:
                    6b:23:28:a4:46:98:46:ab:4a:db:08:8b:ea:7a:fc:
                    25:31:5d:29:8e:2c:55:d0:3e:60:af:38:25:7f:49:
                    94:6d:89:5e:d1:cf:b1:d7:73:7d:65:06:71:9e:66:
                    05:94:cf:e7:ae:c6:7a:fe:09:39:c9:a8:46:1f:24:
                    9b:19:cc:11:3b:86:20:3c:c6:71:dc:0b:e8:df:9a:
                    91:1b:96:0c:79:b2:d1:e1:01:f6:f1:62:6c:6e:18:
                    43:96:80:5b:e2:80:c6:f9:e7:29:4d:ca:21:61:12:
                    54:3c:d1:a3:40:ca:9f:5e:0e:aa:30:9e:0f:8b:99:
                    d7:79:d6:76:2d:c6:bc:f3:94:5c:b7:7a:af:ea:03:
                    77:8c:bb:a4:f7:56:61:34:38:e3:00:f2:2d:f1:32:
                    07:3a:76:6a:14:28:29:66:4d:59:bc:f6:cf:f4:fb:
                    a7:fa:57:25:59:0a:57:f2:38:43:c7:a9:21:c7:e1:
                    ca:1c:95:9a:0f:63:1e:a3:e5:d5:c9:84:cc:e8:d8:
                    6f:85:8b:3b:d2:dd:47:0d:c0:50:2b:3f:ec:45:d3:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8F:BA:DF:EE:42:CE:E8:5A:BF:F5:B9:7A:03:9D:A1:21:20:D9:0E
            X509v3 Authority Key Identifier:
                keyid:00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAngT4kJWtCvWLSyoT3UqfRL7R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/JI-63-5Czuhav_W5egOdoSEg2Q4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/AAngT4kJWtCvWLSyoT3UqfRL7R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:d6:6a:67:1e:a4:c1:7e:59:1c:50:3a:f5:58:f0:db:f1:
         30:9f:d1:8a:7b:10:18:23:03:46:34:66:5b:05:2a:2f:a7:a5:
         f2:c1:79:d8:14:8b:20:b4:33:ac:39:1f:27:5f:1f:2f:d8:a5:
         0a:7d:84:aa:67:2f:5d:b4:a3:44:07:51:e3:36:fb:a5:2c:30:
         21:39:87:2e:90:28:81:37:b7:4b:95:33:5e:97:55:4c:4d:31:
         89:6f:5b:8c:7b:78:1f:52:be:0c:1d:3c:74:ce:10:98:db:38:
         21:3f:66:5d:95:f8:05:13:26:b8:57:fe:7e:7a:99:af:c7:a9:
         1e:28:a7:2e:94:55:d6:68:0c:0c:81:d8:4c:f7:8b:a0:86:b8:
         91:d1:7f:bd:86:5d:a1:3c:51:9d:15:63:f0:ea:c6:0c:34:ab:
         79:47:6e:63:3a:64:be:2a:30:88:ed:bc:0d:a8:3c:a7:d1:9b:
         88:cd:3f:00:54:fe:06:cb:50:7b:7d:a1:d6:e1:84:7c:69:a2:
         e4:d2:8c:5e:1b:1e:f2:40:33:a0:83:49:dd:bc:ca:1f:36:70:
         87:03:22:8d:0e:83:45:cf:88:4e:36:ea:71:ad:be:5e:60:f5:
         73:95:79:52:4e:3a:6b:87:30:41:a3:91:06:37:e7:19:01:22:
         2d:d0:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:08 2023 by rpki-client on console-ams.rpki-client.org