Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/1-cr0q4OEqSUpaNi2eXT1FIHldoo.roa
File:                     1-cr0q4OEqSUpaNi2eXT1FIHldoo.roa (raw, json)
Hash identifier:          thVWlpHHOtWPQ0e6xf19ws4PNkcdfXlYCaJa9l5Sk3Q=
Subject key identifier:   F9:CA:F4:AB:83:84:A9:25:29:68:D8:B6:79:74:F5:14:81:E5:76:8A
Certificate issuer:       /CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
Certificate serial:       015E97
Authority key identifier: 32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/1-cr0q4OEqSUpaNi2eXT1FIHldoo.roa
Signing time:             Fri 03 Jun 2022 14:16:20 +0000
ROA not before:           Fri 03 Jun 2022 14:16:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59878
IP address blocks:        93.115.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89751 (0x15e97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
        Validity
            Not Before: Jun  3 14:16:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9caf4ab8384a9252968d8b67974f51481e5768a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:d7:70:60:8a:0a:c3:aa:f8:9a:10:7f:ba:
                    42:2b:d3:ee:93:92:0e:52:1a:a5:f7:59:05:0d:11:
                    ed:5d:06:97:f1:dd:fa:c3:75:8e:77:71:24:1a:d6:
                    b9:8c:ad:a9:0d:d6:ed:69:98:f2:04:73:fd:ed:09:
                    58:0e:d6:cf:6b:30:67:c7:a7:68:b6:89:b7:a1:63:
                    99:1b:55:25:ff:fe:b4:6b:f8:cc:39:49:f1:8b:26:
                    88:91:02:e9:88:74:ad:10:78:64:ee:c8:6f:dd:5f:
                    80:78:72:55:41:42:02:80:c2:37:ba:cc:87:4a:f8:
                    63:f4:ac:6b:73:de:ae:63:12:f2:18:d0:27:e2:05:
                    07:a5:5c:47:19:6d:9b:f8:7f:fd:e2:cb:8b:ad:c9:
                    db:d7:70:19:e1:4c:ec:37:b3:c4:f8:04:5e:54:15:
                    66:a7:de:8c:c6:03:c2:a4:57:38:e5:53:82:86:04:
                    7e:ea:df:cc:b8:68:2e:cb:dd:99:a0:30:09:12:f4:
                    27:d9:2d:a2:da:ec:e0:45:c9:c4:03:c3:ce:2e:28:
                    55:b3:77:30:a4:de:e2:76:7a:6a:5a:0b:47:76:c4:
                    2d:8b:d1:73:19:b2:ca:5b:b3:1d:2c:6a:87:94:05:
                    de:ae:c4:79:21:bc:54:1a:7f:15:6c:9f:9e:20:e5:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CA:F4:AB:83:84:A9:25:29:68:D8:B6:79:74:F5:14:81:E5:76:8A
            X509v3 Authority Key Identifier:
                keyid:32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/1-cr0q4OEqSUpaNi2eXT1FIHldoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:32:56:06:00:45:7b:f2:05:d0:21:37:20:a4:1e:77:7c:
         1d:e5:fe:df:04:6d:e5:d2:60:a7:0a:73:ae:7c:52:93:ff:f2:
         fe:23:41:b5:27:4e:f4:c7:ca:7d:b4:89:bd:bd:ad:00:d6:99:
         da:e0:37:83:af:c9:44:bd:6c:05:75:87:89:0b:3d:ba:9b:ec:
         71:35:6e:8b:f7:7d:67:ce:c6:97:e4:09:a0:2d:c8:8b:54:6e:
         04:fb:24:2a:64:55:52:16:9a:69:31:3c:1b:5e:f5:92:1a:15:
         21:98:62:ff:17:46:9a:74:7f:9f:19:7a:75:b4:f4:6b:82:1d:
         af:78:7f:a3:37:ad:57:d2:30:de:b7:84:dd:a3:4e:96:ac:30:
         8d:78:5d:f2:fc:46:64:96:2f:b4:56:e0:90:6f:0d:18:ed:48:
         bd:e2:be:ac:e3:d1:4e:53:57:22:1e:df:7d:e9:51:1a:03:f4:
         bf:61:c2:ba:7d:57:3c:5a:7e:92:ac:92:8c:0e:1a:a8:4b:a9:
         6b:17:e6:d1:59:71:d1:bc:a7:51:b5:fc:b1:6a:14:23:06:c0:
         45:db:8b:8d:2b:04:81:98:b2:71:db:00:e7:28:97:3b:e6:cf:
         d0:81:01:0e:99:12:de:69:ab:c4:e9:4a:05:16:e3:90:93:85:
         d3:18:97:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:06 2024 by rpki-client on console-ams.rpki-client.org