Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa
File:                     p42tVKRgtW90NYVe4yV4TVcbL8E.roa (raw, json)
Hash identifier:          Fnu2rBchgcLJYjfD7pLzHkdsd+iSS8drEcgmn9sA27E=
Subject key identifier:   A7:8D:AD:54:A4:60:B5:6F:74:35:85:5E:E3:25:78:4D:57:1B:2F:C1
Certificate issuer:       /CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
Certificate serial:       018CC349511F58EC37C875B3F064BAD82A06
Authority key identifier: C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa
Signing time:             Mon 01 Jan 2024 04:30:11 +0000
ROA not before:           Mon 01 Jan 2024 04:30:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198949
IP address blocks:        185.39.216.0/22 maxlen: 24
                          95.181.220.0/22 maxlen: 24
                          2a04:800::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:49:51:1f:58:ec:37:c8:75:b3:f0:64:ba:d8:2a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53feb2ac60fa313f9a7300e4c5ee33b43a88341
        Validity
            Not Before: Jan  1 04:30:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a78dad54a460b56f7435855ee325784d571b2fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:21:0d:ac:ef:81:a6:8f:d9:48:6d:4e:76:2c:
                    76:78:ab:3a:88:0d:27:b9:95:ab:22:1d:46:17:8d:
                    71:33:8c:8b:99:82:e3:c5:36:6a:88:49:79:f9:6a:
                    6c:b8:7d:51:71:f6:b0:83:af:5d:97:21:98:38:2f:
                    15:a9:27:b7:68:0f:cb:61:5a:1f:25:60:ec:41:9f:
                    17:e5:f4:a2:01:5b:e0:30:9d:e1:49:ae:75:e2:30:
                    9f:67:bd:df:98:c6:22:4d:8d:3e:5c:c7:8f:20:f6:
                    23:c4:4a:e3:5f:78:c9:63:89:81:0a:80:5c:94:24:
                    77:34:4c:6e:ad:ad:7c:68:f5:c4:b9:b9:70:01:e6:
                    17:ea:45:3f:56:78:60:74:69:13:da:59:f1:58:ab:
                    45:79:4c:d9:73:78:bc:92:68:c8:44:8c:7f:19:86:
                    5e:f5:74:77:c0:e3:fe:18:7f:82:db:ce:4a:fa:fc:
                    cc:96:30:84:cd:5a:01:e5:9d:42:2b:06:a5:14:bd:
                    d4:31:e2:de:d7:7a:40:01:97:a7:e2:0d:f0:2d:75:
                    a8:cb:bf:1a:4c:f7:b9:8b:ac:7b:54:88:ea:9d:69:
                    85:a4:f4:ac:67:6f:32:6c:c2:63:9d:5f:5f:61:24:
                    f2:aa:f7:9d:db:85:27:05:9f:27:66:b5:a7:d1:1a:
                    a5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:AD:54:A4:60:B5:6F:74:35:85:5E:E3:25:78:4D:57:1B:2F:C1
            X509v3 Authority Key Identifier:
                keyid:C5:3F:EB:2A:C6:0F:A3:13:F9:A7:30:0E:4C:5E:E3:3B:43:A8:83:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT_rKsYPoxP5pzAOTF7jO0Oog0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/p42tVKRgtW90NYVe4yV4TVcbL8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/37efd5-4266-4146-8e21-67fd717c6ca7/1/xT_rKsYPoxP5pzAOTF7jO0Oog0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.181.220.0/22
                  185.39.216.0/22
                IPv6:
                  2a04:800::/29

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:1f:11:77:6b:1a:73:ca:1f:76:9a:b6:d6:00:80:c8:1a:
         99:81:d0:40:e4:86:75:39:9b:62:63:d4:b3:26:9f:d2:40:6f:
         0a:1d:43:25:1d:92:ff:04:ec:b5:fa:db:5f:3d:00:56:07:d2:
         75:12:a8:8e:4f:cf:24:30:f5:c7:ab:62:7c:a0:9c:56:08:6a:
         c1:0e:17:48:99:e5:46:04:6c:bb:3e:d7:60:ec:da:5f:b5:80:
         30:c6:06:2e:ef:5e:a3:43:7d:ba:12:7e:4b:a5:8f:1d:a2:ac:
         2e:2c:bf:10:cf:59:6b:6f:fa:e8:8d:cd:47:1f:1f:7d:72:47:
         40:7c:41:dc:c6:6d:c6:c2:1a:34:d7:fb:79:d3:ed:00:69:2b:
         3b:28:06:8a:5a:f3:a5:e2:17:84:55:93:3e:79:a8:c0:3b:83:
         87:b0:5b:d1:33:89:fc:a7:95:d5:61:c3:eb:82:04:7f:ac:8c:
         8d:43:d0:9c:82:88:10:66:26:59:2f:25:a4:72:11:45:d3:cc:
         ec:89:08:68:62:51:81:0c:d7:f7:3e:7b:95:ad:bd:18:b4:a2:
         a7:28:ff:d2:50:d2:11:a0:ea:8e:8c:25:b1:52:92:aa:6f:87:
         40:ce:df:7e:74:50:6f:b7:91:8b:43:f6:ef:32:52:3f:c3:9a:
         90:b4:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org