Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/A0eIG5ScIyWQ9e5YxJOkBxdbj6U.roa
File:                     A0eIG5ScIyWQ9e5YxJOkBxdbj6U.roa (raw, json)
Hash identifier:          TNtAhkLMdIm5D+2dqnJelIoQ9Df+L+dEcZqM6a+yzTg=
Subject key identifier:   03:47:88:1B:94:9C:23:25:90:F5:EE:58:C4:93:A4:07:17:5B:8F:A5
Certificate issuer:       /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial:       0250B4FF
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/A0eIG5ScIyWQ9e5YxJOkBxdbj6U.roa
Signing time:             Sat 01 Jan 2022 10:05:28 +0000
ROA not before:           Sat 01 Jan 2022 10:05:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        194.180.232.0/23 maxlen: 24
                          194.180.236.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38843647 (0x250b4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
        Validity
            Not Before: Jan  1 10:05:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0347881b949c232590f5ee58c493a407175b8fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:8e:8b:77:db:06:ec:26:e1:81:7a:cb:0f:
                    8c:f8:80:10:52:8a:3d:f3:11:84:05:f5:a9:bb:33:
                    50:76:bd:ff:ca:47:60:76:d7:42:6a:61:83:12:5c:
                    33:bb:89:2f:8e:17:53:60:d6:4e:9e:41:7a:aa:5c:
                    e4:35:ef:a5:a3:1f:2f:cd:34:d1:55:4f:52:b0:11:
                    11:6a:df:4b:50:1b:42:2b:19:0e:1c:8d:13:8c:d9:
                    1b:30:ec:b3:89:86:31:7c:fe:ef:00:1d:36:51:75:
                    e9:ef:fb:2d:68:19:bf:e1:2f:78:25:cb:45:de:0a:
                    f0:ad:a5:17:4b:8d:89:db:5d:70:9a:a6:af:44:0e:
                    59:4b:fc:e2:e4:bd:dd:66:66:b8:8a:06:4d:73:3c:
                    c2:84:5f:eb:f9:5d:f3:17:3a:2f:37:68:01:61:eb:
                    61:6b:66:cc:89:80:b9:db:62:6c:20:9a:86:d0:72:
                    d5:11:e2:08:bc:32:7b:1c:6f:ae:a7:ca:f4:82:76:
                    f0:a7:cd:cf:38:c0:81:e9:17:7a:88:d6:9e:76:9b:
                    5e:2d:bc:0d:c9:b0:98:01:e7:73:26:c6:a8:77:9f:
                    c8:78:61:cb:d0:1b:c6:1d:40:25:7e:84:46:71:d5:
                    2c:e7:e9:55:79:76:59:71:4d:c8:5d:07:7c:d1:c3:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:47:88:1B:94:9C:23:25:90:F5:EE:58:C4:93:A4:07:17:5B:8F:A5
            X509v3 Authority Key Identifier:
                keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/A0eIG5ScIyWQ9e5YxJOkBxdbj6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.232.0/23
                  194.180.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:68:90:5d:e8:16:9e:38:3b:85:e6:90:02:61:1d:ae:3a:12:
         65:91:83:02:f7:0f:65:f0:f0:be:63:a4:e6:4e:ca:ed:a2:e0:
         65:6d:4c:a4:cf:57:a0:c4:c6:a2:55:89:52:03:ad:8b:d5:0f:
         60:87:9b:7f:ef:65:f6:13:54:27:77:2b:89:a7:e3:49:e2:03:
         de:82:70:ff:71:82:67:d3:2c:88:a1:1c:5e:68:01:5e:7a:cd:
         99:03:52:a1:e2:b6:ad:ca:af:04:ba:2e:7c:90:b3:63:1c:fb:
         ad:d6:a3:be:50:5b:53:c1:18:43:39:f4:1a:dd:65:33:f2:32:
         94:b4:ef:44:d9:39:1f:2e:ab:ff:24:1f:5f:7a:32:70:72:b4:
         e8:f3:87:26:f2:c6:29:50:8b:65:85:8f:80:3b:5f:c8:81:5c:
         5a:76:ea:bf:bf:74:5f:3b:ad:8d:45:83:c2:f8:2a:a7:df:b8:
         2c:11:3a:fe:76:7c:cf:06:81:9f:2c:f0:6f:9a:52:69:fa:02:
         d1:7b:35:32:60:ae:25:45:1c:43:7c:e6:e6:be:55:1b:46:79:
         a6:75:c2:bf:7e:ad:c5:d6:34:40:30:8d:c3:78:65:68:56:8c:
         2f:1f:0c:11:e7:b0:7f:6a:31:15:d7:7f:f9:c4:26:38:48:6d:
         46:26:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org