Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/hhOoHuTHOfGEMtHO1F4fEhN7biE.roa
File:                     hhOoHuTHOfGEMtHO1F4fEhN7biE.roa (raw, json)
Hash identifier:          3pLD/SmiRrwV0fKDGZ7hPfivFhLuVmIzc438zfPaxW0=
Subject key identifier:   86:13:A8:1E:E4:C7:39:F1:84:32:D1:CE:D4:5E:1F:12:13:7B:6E:21
Certificate issuer:       /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial:       018572C376C07DB74AC6D9D6F92417AC24F2
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/hhOoHuTHOfGEMtHO1F4fEhN7biE.roa
Signing time:             Mon 02 Jan 2023 13:54:50 +0000
ROA not before:           Mon 02 Jan 2023 13:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        185.83.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:76:c0:7d:b7:4a:c6:d9:d6:f9:24:17:ac:24:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
        Validity
            Not Before: Jan  2 13:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8613a81ee4c739f18432d1ced45e1f12137b6e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:ff:b5:0c:ee:01:eb:ce:a1:53:e6:72:a8:
                    dd:48:d6:de:6e:ea:89:ca:04:08:2a:27:73:84:4c:
                    7d:89:ed:2b:3a:37:61:7b:24:36:f8:e7:55:f5:3b:
                    b3:d3:46:76:e7:37:1c:12:9e:b8:38:6a:6b:02:64:
                    2c:e9:56:b8:7c:ee:c4:37:ed:fb:60:c0:f2:13:5b:
                    62:26:13:1a:0c:59:59:67:08:c8:7f:4d:58:97:35:
                    5d:43:02:9a:eb:bf:8b:a2:57:2d:96:b3:03:d0:a3:
                    a4:1b:fe:bf:89:b8:a6:d5:a3:25:84:d9:d5:ab:c6:
                    bb:4a:d5:f4:ec:69:05:e6:f9:53:c4:6d:03:b8:83:
                    63:fa:ad:c4:34:69:24:b4:d3:99:ed:7e:63:14:c3:
                    3a:a4:52:bd:65:9a:57:b1:48:29:bd:df:5c:68:8e:
                    6c:fd:b9:f4:8d:af:51:ad:7a:1c:43:fe:f9:08:7f:
                    d3:c3:d5:75:08:a1:e2:c1:f6:45:0b:ae:28:35:6b:
                    2e:f8:55:45:8c:fd:57:db:55:e8:94:95:0c:4b:cb:
                    ea:19:68:51:90:f6:65:03:eb:c1:3e:22:af:dc:d6:
                    19:66:4d:26:c1:3f:19:8e:d3:7b:41:cb:68:65:63:
                    2e:79:b4:5b:37:36:0d:38:6d:2c:a5:9a:ab:ca:f6:
                    94:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:13:A8:1E:E4:C7:39:F1:84:32:D1:CE:D4:5E:1F:12:13:7B:6E:21
            X509v3 Authority Key Identifier:
                keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/hhOoHuTHOfGEMtHO1F4fEhN7biE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:49:f7:58:d9:42:65:a2:2e:49:38:de:d8:03:eb:32:fc:2d:
         a8:b9:40:16:6b:ec:d9:89:94:6c:5c:9c:08:b1:a2:3e:01:60:
         17:a5:0f:42:a3:68:35:a6:73:91:aa:56:b0:16:cb:c8:2e:c6:
         52:b1:13:e6:a7:17:48:7a:58:9d:2d:7e:03:dd:3d:af:e7:1e:
         3f:75:25:ed:a6:b5:51:71:94:29:48:4c:84:35:f1:e3:d7:01:
         38:25:f7:af:36:0b:2b:43:00:c2:d3:d2:82:29:c5:3e:2d:ec:
         23:38:68:50:b0:d5:36:64:42:8b:f0:7e:c8:86:70:e3:f6:79:
         5e:29:70:ae:1e:bf:54:93:cb:62:a7:51:d4:fa:b6:20:7f:ff:
         53:67:22:48:d3:54:7e:fd:9b:f4:a2:67:f7:86:ee:22:49:15:
         e8:6e:50:03:fe:85:8c:d2:01:ef:29:79:77:45:b4:8e:91:a7:
         4c:d1:c4:e0:ea:0c:04:93:0b:95:11:96:27:fe:a1:36:d2:a3:
         2d:fb:80:96:d7:9d:4c:e6:10:3b:15:49:1e:e3:f3:1e:bb:da:
         0d:ed:d7:93:f9:00:ab:46:7d:82:be:c9:5f:94:c1:3d:fe:23:
         3c:c4:39:36:32:ce:c0:27:7c:e9:91:4e:32:4e:4f:64:6b:8f:
         e1:a2:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-ams.rpki-client.org