Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/HhoURI9aFhS0dTk4NcFZMuE3Gig.roa
File:                     HhoURI9aFhS0dTk4NcFZMuE3Gig.roa (raw, json)
Hash identifier:          D+cOGjYgcWkC87KnrkPNQaU10M1rwsxk3VOr9lQQaCU=
Subject key identifier:   1E:1A:14:44:8F:5A:16:14:B4:75:39:38:35:C1:59:32:E1:37:1A:28
Certificate issuer:       /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial:       021873C0
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/HhoURI9aFhS0dTk4NcFZMuE3Gig.roa
Signing time:             Thu 14 Apr 2022 07:59:29 +0000
ROA not before:           Thu 14 Apr 2022 07:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        194.31.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35156928 (0x21873c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
        Validity
            Not Before: Apr 14 07:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e1a14448f5a1614b475393835c15932e1371a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:1b:2c:f7:e5:a5:2f:22:0a:6b:5d:f4:d5:
                    c6:17:76:9a:af:e8:03:41:aa:c6:a5:9d:d5:1b:1f:
                    68:02:90:86:57:e1:55:6b:94:90:0b:e7:ad:ca:08:
                    66:78:bc:d4:b3:1d:79:8a:ab:1f:48:be:94:cf:69:
                    44:7b:00:e8:45:93:dc:32:eb:ec:f7:8f:b2:99:a9:
                    bc:6d:c1:9e:15:3a:4e:ea:ff:3a:5a:eb:6e:39:e2:
                    00:c4:50:1c:25:68:49:71:af:b1:42:6f:b0:35:bc:
                    c8:9e:62:58:b3:f7:8a:09:48:9c:81:45:b2:fb:a8:
                    af:6b:97:e5:9e:78:77:a9:22:e1:b7:21:0c:f4:cf:
                    78:b2:80:5c:e9:1d:13:dd:3b:d8:d0:17:c6:1b:fb:
                    de:1a:ec:87:6f:a2:5d:75:71:12:c8:16:ac:28:2d:
                    e5:42:7f:97:3e:b2:14:09:7f:37:d0:ef:31:68:ab:
                    66:6e:6f:c0:54:da:ea:91:16:95:33:67:ab:e0:2a:
                    06:f3:4c:58:9a:41:2a:3f:b2:24:fb:3b:d1:d6:69:
                    93:02:3d:fc:57:2e:21:45:47:80:b3:ff:db:33:0c:
                    e5:52:65:7e:bc:bd:38:4d:04:e5:92:34:c1:24:69:
                    31:3d:39:f9:bd:59:b2:26:f7:e1:dd:3d:6f:7b:08:
                    37:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1A:14:44:8F:5A:16:14:B4:75:39:38:35:C1:59:32:E1:37:1A:28
            X509v3 Authority Key Identifier:
                keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/HhoURI9aFhS0dTk4NcFZMuE3Gig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a4:45:4e:41:0f:fe:38:53:2f:41:76:99:b5:8e:d8:e1:23:
         24:db:9a:0e:53:66:15:d4:b9:a6:8d:e6:11:94:f0:eb:34:1a:
         9c:e3:75:5b:6e:00:7e:c2:3e:d7:89:1a:bf:22:b9:51:14:f1:
         8f:54:f3:5b:c4:28:b9:fa:a3:11:4c:c0:e4:b7:7e:18:1c:1b:
         35:94:5f:2c:bf:9d:88:db:a7:57:a2:1f:30:54:63:13:27:04:
         16:35:b0:11:fb:a4:f8:74:4c:df:36:96:ce:4b:c9:8c:d1:c5:
         f4:0b:91:03:d9:ff:67:8f:4b:86:73:48:98:db:04:fa:b2:f6:
         45:af:98:aa:39:27:45:6c:8e:f6:72:25:17:3f:4a:83:5e:7b:
         a7:b3:cc:b7:58:5b:db:12:46:3b:76:a2:95:22:b5:cb:50:5c:
         e1:72:77:8d:b7:8d:17:0f:26:ee:bb:5b:79:74:0b:44:67:39:
         72:e2:50:5a:3a:21:44:ae:8d:ac:14:3b:41:d3:15:54:f9:21:
         fb:a5:6d:68:1c:db:ff:23:15:30:ff:0c:0b:79:17:d7:6c:bf:
         63:75:fc:3b:73:1e:cc:c2:42:4a:b9:a9:6b:a7:fd:85:8b:e0:
         3d:19:d9:89:43:9d:ef:66:62:c2:73:6c:27:2a:7d:37:e7:3f:
         9d:2b:30:8a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAhhzwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NDFiY2EzOTg2MWY5YzMwYzc1NzYxNDgwMWY4NmQxN2U1ZWExZTRiMB4XDTIyMDQx
NDA3NTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWUxYTE0NDQ4ZjVh
MTYxNGI0NzUzOTM4MzVjMTU5MzJlMTM3MWEyODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxyGyz35aUvIgprXfTVxhd2mq/oA0GqxqWd1RsfaAKQhlfh
VWuUkAvnrcoIZni81LMdeYqrH0i+lM9pRHsA6EWT3DLr7PePspmpvG3BnhU6Tur/
OlrrbjniAMRQHCVoSXGvsUJvsDW8yJ5iWLP3iglInIFFsvuor2uX5Z54d6ki4bch
DPTPeLKAXOkdE9072NAXxhv73hrsh2+iXXVxEsgWrCgt5UJ/lz6yFAl/N9DvMWir
Zm5vwFTa6pEWlTNnq+AqBvNMWJpBKj+yJPs70dZpkwI9/FcuIUVHgLP/2zMM5VJl
fry9OE0E5ZI0wSRpMT05+b1Zsib34d09b3sINyUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQeGhREj1oWFLR1OTg1wVky4TcaKDAfBgNVHSMEGDAWgBTUG8o5hh+cMMdX
YUgB+G0X5eoeSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFCdktPWVlmbkRESFYyRklBZmh0Ri1YcUhrcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzUvNTk4NjQyLWUzNmYtNGM1Yy1hOGUwLWEwYjUxNDI0OWMwNi8x
L0hob1VSSTlhRmhTMGRUazROY0ZaTXVFM0dpZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUv
NTk4NjQyLWUzNmYtNGM1Yy1hOGUwLWEwYjUxNDI0OWMwNi8xLzFCdktPWVlmbkRE
SFYyRklBZmh0Ri1YcUhrcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIfzTANBgkqhkiG9w0BAQsFAAOC
AQEAiqRFTkEP/jhTL0F2mbWO2OEjJNuaDlNmFdS5po3mEZTw6zQanON1W24AfsI+
14kavyK5URTxj1TzW8QoufqjEUzA5Ld+GBwbNZRfLL+diNunV6IfMFRjEycEFjWw
Efuk+HRM3zaWzkvJjNHF9AuRA9n/Z49LhnNImNsE+rL2Ra+YqjknRWyO9nIlFz9K
g157p7PMt1hb2xJGO3ailSK1y1Bc4XJ3jbeNFw8m7rtbeXQLRGc5cuJQWjohRK6N
rBQ7QdMVVPkh+6VtaBzb/yMVMP8MC3kX12y/Y3X8O3MezMJCSrmpa6f9hYvgPRnZ
iUOd72ZiwnNsJyp9N+c/nSswig==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:08 2025 by rpki-client