Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/R95AssKEVqJTs7V7Cnl_5x40-bY.roa
File:                     R95AssKEVqJTs7V7Cnl_5x40-bY.roa (raw, json)
Hash identifier:          FuY7wZ88wLnYfpu6hbKzUYAWlL0TWmh0LAHBIM4BuGQ=
Subject key identifier:   47:DE:40:B2:C2:84:56:A2:53:B3:B5:7B:0A:79:7F:E7:1E:34:F9:B6
Certificate issuer:       /CN=0009e04f89095ad0af58b4b2a13dd4a9f44bed1e
Certificate serial:       018571F12274CCD1F148C7764347FF199B31
Authority key identifier: 00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAngT4kJWtCvWLSyoT3UqfRL7R4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/R95AssKEVqJTs7V7Cnl_5x40-bY.roa
Signing time:             Mon 02 Jan 2023 10:05:06 +0000
ROA not before:           Mon 02 Jan 2023 10:05:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48715
IP address blocks:        185.36.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:f1:22:74:cc:d1:f1:48:c7:76:43:47:ff:19:9b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0009e04f89095ad0af58b4b2a13dd4a9f44bed1e
        Validity
            Not Before: Jan  2 10:05:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=47de40b2c28456a253b3b57b0a797fe71e34f9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:89:66:da:aa:5c:0b:a9:d4:12:8b:2a:21:
                    c0:1f:6a:aa:8f:85:1f:fb:75:d9:a0:cf:4c:3b:fb:
                    2b:83:69:bb:69:36:c7:57:ff:5a:2c:1c:ad:35:49:
                    73:36:c7:dc:aa:da:40:fa:64:d4:fa:c4:28:15:63:
                    78:6e:58:8b:95:4a:09:cb:9a:e7:fe:7e:5c:09:9a:
                    eb:9e:73:d3:26:0c:20:d1:b0:95:79:6b:14:72:05:
                    93:72:0f:5e:a7:de:63:09:47:ff:ff:ce:02:03:b8:
                    68:78:a1:8e:16:28:0d:af:c6:7f:e4:65:c4:1f:c7:
                    1a:c8:79:ab:74:0c:e6:80:cf:47:7e:37:6a:3a:15:
                    ff:7b:f6:4f:fc:a0:8a:ea:37:a0:3c:7a:a1:e2:59:
                    17:63:27:9f:12:96:1f:7f:09:a3:16:bc:19:21:0d:
                    70:48:cb:b5:63:3a:b7:18:e1:a0:9a:b7:64:5f:26:
                    12:36:1d:e8:30:e8:94:30:10:67:9a:8b:42:36:a6:
                    8e:c0:89:8b:43:16:fe:1b:60:13:2f:c2:69:65:8b:
                    b6:a6:28:15:77:a4:69:c6:6a:dc:be:40:5a:d8:d6:
                    b9:21:39:a6:be:c0:bd:68:27:30:79:98:1a:00:c3:
                    2a:57:d4:85:42:df:6a:70:ba:b8:91:e3:d9:a7:2b:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DE:40:B2:C2:84:56:A2:53:B3:B5:7B:0A:79:7F:E7:1E:34:F9:B6
            X509v3 Authority Key Identifier:
                keyid:00:09:E0:4F:89:09:5A:D0:AF:58:B4:B2:A1:3D:D4:A9:F4:4B:ED:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAngT4kJWtCvWLSyoT3UqfRL7R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/R95AssKEVqJTs7V7Cnl_5x40-bY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/febda8-fac2-4b17-a353-eb3a01681046/1/AAngT4kJWtCvWLSyoT3UqfRL7R4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:24:42:5d:2a:a9:58:f3:ad:dd:97:4e:05:77:5b:b4:66:e5:
         0c:e2:1e:5e:75:c8:7b:79:a4:2d:d3:7e:26:c0:2b:f6:8c:b8:
         86:9e:c5:9a:f1:8f:9c:76:42:fa:88:de:75:12:2e:53:e2:c8:
         1e:37:18:d8:0b:76:1f:1c:7f:6d:87:44:ee:2b:37:02:e6:35:
         c7:4c:1a:9c:6b:c8:89:f2:a9:74:d5:ac:52:33:5a:5e:38:bf:
         82:e9:ca:98:63:9e:97:ba:67:0a:e1:12:a3:9d:a4:59:9a:5b:
         61:e8:1d:3f:30:c3:fa:9e:e7:b2:85:94:6f:51:11:8e:9b:4a:
         86:43:51:9e:91:3b:54:93:7b:54:a0:4f:84:85:b2:d4:52:3d:
         2c:a6:56:34:56:8c:2a:70:0e:c2:56:eb:a9:55:cb:0d:2d:f1:
         8a:49:94:69:d8:9a:48:e5:8f:44:01:d5:47:24:ae:e2:cc:21:
         79:ed:87:c3:44:18:c4:93:ed:ee:0e:5c:89:0f:43:1f:a9:89:
         15:b0:13:37:f1:2e:32:be:48:22:98:80:46:2c:89:fc:c6:9d:
         fe:6e:9f:6b:90:ae:ff:52:b3:e4:49:41:6f:c0:22:4b:d5:e5:
         df:a4:f2:77:f7:87:68:78:87:eb:8a:7b:03:1f:c9:3e:00:d3:
         27:02:39:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:27 2023 by rpki-client on console-fra.rpki-client.org