Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/ji_solbFyonZGLDMqlcqzMWEha4.roa
File:                     ji_solbFyonZGLDMqlcqzMWEha4.roa (raw, json)
Hash identifier:          /ZfsNdRiDMDSTRpQJggcOyP4C49nw10OPJlfJa4jvEc=
Subject key identifier:   8E:2F:EC:A2:56:C5:CA:89:D9:18:B0:CC:AA:57:2A:CC:C5:84:85:AE
Certificate issuer:       /CN=b07325f2e9aa9d8a2fefc411d7c7f34f86d84bd6
Certificate serial:       01857231170B05D66714569EBBAF6036983A
Authority key identifier: B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sHMl8umqnYov78QR18fzT4bYS9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/ji_solbFyonZGLDMqlcqzMWEha4.roa
Signing time:             Mon 02 Jan 2023 11:14:57 +0000
ROA not before:           Mon 02 Jan 2023 11:14:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198380
IP address blocks:        185.211.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:31:17:0b:05:d6:67:14:56:9e:bb:af:60:36:98:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b07325f2e9aa9d8a2fefc411d7c7f34f86d84bd6
        Validity
            Not Before: Jan  2 11:14:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e2feca256c5ca89d918b0ccaa572accc58485ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:89:95:19:34:55:80:e8:38:74:1a:a5:82:9b:
                    1b:d9:56:98:b5:a8:45:6d:74:3d:19:4b:32:c5:0c:
                    de:4f:37:62:68:9b:88:4d:65:4a:9c:f2:94:56:e1:
                    35:20:63:7a:9a:55:37:5c:bc:92:37:5f:c2:e3:7f:
                    45:84:94:3e:15:a0:ce:90:01:4e:6b:d5:8a:c2:d7:
                    88:37:ca:16:15:43:86:56:e3:95:9e:64:fd:b7:ff:
                    65:ba:4f:d6:9a:67:88:35:ab:e7:2f:dc:26:f8:53:
                    6e:75:ef:ab:c1:95:f9:1f:d0:e0:90:74:e0:72:3c:
                    1d:e1:b7:bc:1e:f0:41:b0:4c:55:78:48:70:f7:28:
                    7c:17:12:95:b9:52:c8:70:e5:6a:ad:b1:90:80:85:
                    fc:d2:d2:05:5c:62:5a:d5:d0:98:c0:d5:d2:c2:bd:
                    65:94:22:6a:6b:39:3b:02:21:86:3e:9b:35:cf:6b:
                    25:78:2c:39:f7:c4:01:ea:1a:09:e9:53:7b:e5:4b:
                    b7:b4:90:3e:2e:c5:28:8d:f4:3b:fd:17:90:8b:c6:
                    5c:16:6f:80:99:29:ba:ca:fc:ca:dd:f5:e6:d8:c0:
                    81:d4:ad:6b:5d:5c:a5:00:2a:e4:c2:74:b1:94:ba:
                    f4:15:3e:13:6e:c7:eb:bb:e8:1b:52:c8:c8:2f:9f:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2F:EC:A2:56:C5:CA:89:D9:18:B0:CC:AA:57:2A:CC:C5:84:85:AE
            X509v3 Authority Key Identifier:
                keyid:B0:73:25:F2:E9:AA:9D:8A:2F:EF:C4:11:D7:C7:F3:4F:86:D8:4B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHMl8umqnYov78QR18fzT4bYS9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/ji_solbFyonZGLDMqlcqzMWEha4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/45974d-fbde-47ca-acdc-e10c87ffed22/1/sHMl8umqnYov78QR18fzT4bYS9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.211.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:72:3c:fa:ff:9b:67:91:19:a8:76:9d:13:e9:ca:09:80:65:
         fe:45:f6:7e:f3:61:8c:2e:0c:ca:bc:de:3d:2c:a0:f1:43:e4:
         df:71:c3:bd:6b:44:d7:88:ab:65:a2:1c:4e:2a:5c:77:dd:06:
         18:94:78:fa:37:5e:e6:8b:00:cf:37:7a:fa:09:74:96:2f:e5:
         75:2c:36:5e:b1:12:43:ac:76:65:33:e3:7b:02:39:f8:de:43:
         91:34:03:d5:e6:65:86:a9:f2:7b:33:f5:39:e1:18:90:39:54:
         84:e3:2b:fc:60:c5:80:23:f7:28:76:e3:0e:75:8b:33:65:08:
         cf:25:53:9d:f2:57:2e:c9:51:89:96:4a:9c:c9:7d:c8:86:eb:
         4b:15:17:c4:6a:bf:ea:ca:3c:da:8a:44:7b:3f:af:dc:7c:04:
         df:6a:96:27:c6:5a:6e:89:17:0a:a9:67:d5:99:ea:cf:41:f0:
         16:25:1a:07:a1:49:8f:58:47:06:77:40:03:e3:4f:a5:8d:cb:
         31:e4:db:15:32:76:00:61:11:13:38:57:ce:a9:46:d6:f0:fc:
         43:09:b3:ae:44:40:dc:42:ce:51:b7:bd:b8:a5:7a:54:19:c5:
         55:81:d8:45:9d:0e:e4:19:dd:a0:27:d1:16:e2:09:b2:b1:c8:
         60:ea:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org