Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/kkp9M6qITWXTSoW2OCzQltzeLF4.roa
File:                     kkp9M6qITWXTSoW2OCzQltzeLF4.roa (raw, json)
Hash identifier:          Qn95VnctA9PI0Of5bz4x/8KeII7kN1OKwRTsCanKduo=
Subject key identifier:   92:4A:7D:33:AA:88:4D:65:D3:4A:85:B6:38:2C:D0:96:DC:DE:2C:5E
Certificate issuer:       /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial:       02877807
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/kkp9M6qITWXTSoW2OCzQltzeLF4.roa
Signing time:             Mon 30 May 2022 12:48:13 +0000
ROA not before:           Mon 30 May 2022 12:48:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        194.31.222.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42432519 (0x2877807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
        Validity
            Not Before: May 30 12:48:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=924a7d33aa884d65d34a85b6382cd096dcde2c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:12:a3:8c:eb:33:74:eb:2c:52:5b:18:2e:
                    82:58:5d:82:61:21:6c:b9:1f:82:86:c3:40:a8:c3:
                    9a:7f:48:bb:c2:6f:b2:60:ce:ad:84:3e:92:1f:97:
                    f3:4c:cd:59:fb:89:06:25:90:32:51:19:bf:96:f6:
                    6c:66:dc:dc:07:ad:29:ab:b6:83:83:db:05:54:48:
                    40:31:56:d6:c6:b5:75:33:c7:ba:5e:08:cf:08:ac:
                    9c:b8:83:3d:e2:99:73:99:dc:1f:7e:80:b8:34:cc:
                    be:04:10:a7:31:93:18:4f:6e:ec:a3:39:06:56:9a:
                    57:ac:98:bf:4d:3e:00:fb:9b:0c:da:ca:db:54:fc:
                    34:47:90:d8:c9:32:fc:09:54:15:29:ca:f1:b6:ac:
                    9e:76:20:19:6d:25:1e:3c:c2:b4:ef:32:98:e2:e0:
                    9c:c6:f8:12:dc:f2:94:58:b6:dc:39:be:72:de:b4:
                    b6:68:be:08:2e:2e:20:06:2b:0c:45:ed:97:1e:b3:
                    de:13:7b:f4:39:f1:2c:50:bf:67:45:ad:35:d1:eb:
                    bf:19:d5:61:76:84:cd:f2:ac:6f:57:7b:f2:5c:54:
                    ed:56:72:93:1d:00:3e:9e:27:ee:ae:b7:35:ac:2f:
                    37:e1:47:ea:92:8c:51:14:79:b9:ef:62:b4:86:ef:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4A:7D:33:AA:88:4D:65:D3:4A:85:B6:38:2C:D0:96:DC:DE:2C:5E
            X509v3 Authority Key Identifier:
                keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/kkp9M6qITWXTSoW2OCzQltzeLF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:6b:11:d0:2f:cf:d0:c3:71:63:a7:e1:54:0f:65:a6:28:
         fa:2f:b6:cd:1d:46:ec:7e:9a:6b:ee:31:d5:7c:22:86:a9:b7:
         41:f6:c6:61:6c:f9:d0:98:11:7d:a1:c2:c4:34:31:e2:f2:86:
         e1:89:e7:76:c8:c5:f6:06:f5:e5:6e:73:f3:56:44:2b:1a:28:
         db:ab:ef:6d:f8:53:1f:1f:00:83:3d:02:eb:94:32:fa:09:c6:
         1e:f7:1a:4f:02:2e:f5:9d:b0:af:04:46:cf:6b:d0:23:eb:ee:
         83:a1:bf:26:fb:ce:2e:64:95:ea:30:ba:3e:de:63:6e:f4:b5:
         97:55:c0:cf:22:f2:fa:38:32:56:83:87:92:7a:68:69:90:d7:
         c8:3d:f5:a2:04:61:1a:51:bb:c0:9c:7a:68:ab:d2:45:16:db:
         66:a3:6c:0e:ac:09:44:12:71:27:98:c7:cb:9c:4a:6d:22:25:
         01:bc:33:e7:b2:29:50:f1:9e:8e:e4:f7:16:b9:c6:b0:b7:f0:
         de:15:82:04:ef:3b:96:fa:63:99:c3:85:4b:80:75:9e:c7:09:
         e2:bf:9e:08:70:87:d4:f7:d8:8e:18:fa:0e:0b:62:4d:79:98:
         81:43:1a:bc:8a:bc:5d:c4:45:81:71:ce:d4:8f:2b:5c:d9:98:
         80:46:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org