Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/e381c5-fa69-41ef-a59b-4c75a9291339/1/kPhq8z6YDks-LVWba_n72i-qfW8.roa
File:                     kPhq8z6YDks-LVWba_n72i-qfW8.roa (raw, json)
Hash identifier:          79sW4X0yF+sXUvxNOsBHxJiE4rN2RDg0EDnyIyQyCFI=
Subject key identifier:   90:F8:6A:F3:3E:98:0E:4B:3E:2D:55:9B:6B:F9:FB:DA:2F:AA:7D:6F
Certificate issuer:       /CN=f54dc98bf42e2627a3fe5c54040f8665b91f78f6
Certificate serial:       01856D5CE979DEDF1A220C33027F478AA8FE
Authority key identifier: F5:4D:C9:8B:F4:2E:26:27:A3:FE:5C:54:04:0F:86:65:B9:1F:78:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9U3Ji_QuJiej_lxUBA-GZbkfePY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/e381c5-fa69-41ef-a59b-4c75a9291339/1/kPhq8z6YDks-LVWba_n72i-qfW8.roa
Signing time:             Sun 01 Jan 2023 12:44:43 +0000
ROA not before:           Sun 01 Jan 2023 12:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209326
IP address blocks:        79.110.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:5c:e9:79:de:df:1a:22:0c:33:02:7f:47:8a:a8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f54dc98bf42e2627a3fe5c54040f8665b91f78f6
        Validity
            Not Before: Jan  1 12:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=90f86af33e980e4b3e2d559b6bf9fbda2faa7d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1a:51:5b:1f:d9:80:89:3d:db:8d:ae:33:e5:
                    ae:53:50:9b:06:be:73:75:74:c7:e6:d1:50:58:3a:
                    96:80:b2:0a:1d:2d:28:a4:37:f8:4f:6d:ac:c4:0d:
                    64:72:89:42:6e:29:6d:c0:dc:54:d9:b4:79:3a:5a:
                    33:81:c4:3f:8f:dc:0a:b2:65:e9:87:2c:45:79:98:
                    b9:c2:98:93:22:dc:45:4b:73:27:70:35:bb:71:18:
                    b2:39:21:c6:01:13:0c:a0:2f:3d:ec:cc:0d:b9:76:
                    82:48:17:5a:23:69:d2:a3:09:07:08:82:a4:3c:7f:
                    1c:04:72:49:f4:29:92:f5:18:09:1a:df:4d:53:4f:
                    e3:c1:28:f0:76:b1:9d:ab:c4:d8:62:5a:38:5f:a9:
                    72:bd:64:f8:55:9a:bf:f5:ee:1d:83:30:4f:e0:5f:
                    92:e6:58:1f:ef:99:90:e5:a8:ee:6c:cd:f5:e6:3b:
                    1a:ba:63:81:f4:be:2e:a4:a7:52:a2:9f:48:1b:bd:
                    84:d7:c5:36:6d:19:13:7f:61:68:9f:e6:19:dd:79:
                    20:f8:4d:68:ed:50:79:79:8e:0f:ab:29:48:43:e2:
                    3c:3a:fd:67:7a:4f:33:28:b6:e3:75:67:cb:02:28:
                    48:ed:37:d0:a6:73:75:30:37:31:ea:bd:dc:2b:22:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:6A:F3:3E:98:0E:4B:3E:2D:55:9B:6B:F9:FB:DA:2F:AA:7D:6F
            X509v3 Authority Key Identifier:
                keyid:F5:4D:C9:8B:F4:2E:26:27:A3:FE:5C:54:04:0F:86:65:B9:1F:78:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U3Ji_QuJiej_lxUBA-GZbkfePY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e381c5-fa69-41ef-a59b-4c75a9291339/1/kPhq8z6YDks-LVWba_n72i-qfW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/e381c5-fa69-41ef-a59b-4c75a9291339/1/9U3Ji_QuJiej_lxUBA-GZbkfePY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:61:2e:7e:bd:32:3c:53:cf:6e:66:7b:a0:71:9e:0a:1f:b4:
         68:d5:71:ac:4d:8c:9a:3b:e9:98:04:b8:ed:01:9f:06:b1:22:
         bb:ed:b4:f5:ae:9d:34:b4:b6:16:c6:63:e2:5f:29:b2:c9:7b:
         f7:e8:fe:79:fb:03:62:b8:86:80:cc:d6:99:c2:db:cf:c8:58:
         0d:26:d6:aa:9f:1a:fd:fa:ed:a4:91:0e:f0:7c:d7:d8:5f:c3:
         ab:67:97:dd:fb:80:0e:fa:7a:6b:98:83:d4:da:36:78:7b:67:
         af:69:99:4f:fd:bf:c6:17:9c:ea:3c:9d:00:6e:35:57:6b:90:
         c0:92:3c:d8:fc:6e:45:69:96:30:68:5b:e0:9e:97:16:59:cb:
         52:86:59:4d:da:fb:40:8f:49:13:1d:f5:dd:23:b7:a4:a5:52:
         bf:0e:2f:48:0b:8e:d1:cd:bb:00:04:79:65:51:0a:2e:0c:98:
         e4:71:1c:d8:7e:b9:56:50:c2:9c:f2:6e:8b:61:47:d6:4c:65:
         01:62:68:31:9a:ac:0e:72:79:6f:40:54:30:f8:f7:6a:cd:cd:
         fb:18:d2:d3:0b:d0:87:38:8c:7b:06:2b:32:58:62:dc:98:43:
         24:11:59:e6:af:fe:ad:ca:c0:19:53:d3:28:72:2e:91:f3:0d:
         16:ce:88:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXOl53t8aIgwzAn9Hiqj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NGRjOThiZjQyZTI2MjdhM2ZlNWM1NDA0MGY4NjY1Yjkx
Zjc4ZjYwHhcNMjMwMTAxMTI0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGY4NmFmMzNlOTgwZTRiM2UyZDU1OWI2YmY5ZmJkYTJmYWE3ZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBpRWx/ZgIk9242uM+WuU1CbBr5z
dXTH5tFQWDqWgLIKHS0opDf4T22sxA1kcolCbiltwNxU2bR5OlozgcQ/j9wKsmXp
hyxFeZi5wpiTItxFS3MncDW7cRiyOSHGARMMoC897MwNuXaCSBdaI2nSowkHCIKk
PH8cBHJJ9CmS9RgJGt9NU0/jwSjwdrGdq8TYYlo4X6lyvWT4VZq/9e4dgzBP4F+S
5lgf75mQ5ajubM315jsaumOB9L4upKdSop9IG72E18U2bRkTf2Fon+YZ3Xkg+E1o
7VB5eY4PqylIQ+I8Ov1nek8zKLbjdWfLAihI7TfQpnN1MDcx6r3cKyJj5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJD4avM+mA5LPi1Vm2v5+9ovqn1vMB8GA1UdIwQY
MBaAFPVNyYv0LiYno/5cVAQPhmW5H3j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVUzSmlfUXVKaWVqX2x4VUJBLUdaYmtmZVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lMzgxYzUtZmE2OS00MWVmLWE1OWIt
NGM3NWE5MjkxMzM5LzEva1BocTh6NllEa3MtTFZXYmFfbjcyaS1xZlc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lMzgxYzUtZmE2OS00MWVmLWE1OWItNGM3NWE5MjkxMzM5
LzEvOVUzSmlfUXVKaWVqX2x4VUJBLUdaYmtmZVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT27hMA0G
CSqGSIb3DQEBCwUAA4IBAQBAYS5+vTI8U89uZnugcZ4KH7Ro1XGsTYyaO+mYBLjt
AZ8GsSK77bT1rp00tLYWxmPiXymyyXv36P55+wNiuIaAzNaZwtvPyFgNJtaqnxr9
+u2kkQ7wfNfYX8OrZ5fd+4AO+nprmIPU2jZ4e2evaZlP/b/GF5zqPJ0AbjVXa5DA
kjzY/G5FaZYwaFvgnpcWWctShllN2vtAj0kTHfXdI7ekpVK/Di9IC47RzbsABHll
UQouDJjkcRzYfrlWUMKc8m6LYUfWTGUBYmgxmqwOcnlvQFQw+Pdqzc37GNLTC9CH
OIx7BisyWGLcmEMkEVnmr/6tysAZU9Moci6R8w0WzohA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:40 2024 by rpki-client on console-ams.rpki-client.org