Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa
File:                     Pdo7IcqADHviSOKNa8MZSk6rtj8.roa (raw, json)
Hash identifier:          SkSO9cGCMYYHWs845SpQBgdBeNUanUW31D2VlTCM6+w=
Subject key identifier:   3D:DA:3B:21:CA:80:0C:7B:E2:48:E2:8D:6B:C3:19:4A:4E:AB:B6:3F
Certificate issuer:       /CN=655db0434a917bb2980986a7c84e3512c2a895ad
Certificate serial:       0188916D310DB86E4F461553647101C20705
Authority key identifier: 65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa
Signing time:             Tue 06 Jun 2023 15:57:12 +0000
ROA not before:           Tue 06 Jun 2023 15:57:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        194.70.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:91:6d:31:0d:b8:6e:4f:46:15:53:64:71:01:c2:07:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=655db0434a917bb2980986a7c84e3512c2a895ad
        Validity
            Not Before: Jun  6 15:57:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3dda3b21ca800c7be248e28d6bc3194a4eabb63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:46:7c:e2:49:46:ea:ee:b5:d8:56:64:a9:
                    3f:9f:94:de:17:ca:8f:a7:b3:07:0b:d6:58:c5:b0:
                    06:e1:30:15:e0:94:96:58:a6:e0:c8:1a:cb:2f:e5:
                    13:d9:a8:62:aa:d7:06:c3:01:25:f0:2a:de:13:bb:
                    66:eb:d0:ee:b4:0f:6e:32:f2:2e:d8:88:41:34:f3:
                    b1:de:d8:e7:7d:21:49:80:bd:ba:35:d4:9c:80:04:
                    92:1a:65:9e:83:c1:c5:25:39:a2:05:6f:93:ce:8e:
                    9b:1e:f9:24:9e:9d:d4:95:04:0d:e0:f8:9a:d8:01:
                    eb:62:1d:2a:80:e1:58:a7:64:01:bb:98:28:15:15:
                    17:3d:ce:90:22:3a:a9:25:e5:78:d0:a5:e0:e0:57:
                    52:83:ee:e9:29:a5:23:ba:92:d8:ba:bf:fe:e4:94:
                    90:25:0a:c5:e7:9d:8e:1f:99:6a:04:a2:5f:ff:28:
                    7d:cf:37:47:bd:03:6a:0f:1e:af:6e:55:c7:b2:05:
                    60:19:16:2e:e8:fe:13:3b:21:97:dc:5c:ae:ae:59:
                    56:1c:cf:6d:f8:d9:22:96:ed:9b:15:2a:7f:90:6c:
                    0a:bb:51:c2:0b:ed:31:3a:3e:96:8e:65:6c:e0:d1:
                    6f:53:cb:45:26:87:f4:4d:e0:2c:df:66:13:df:49:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:3B:21:CA:80:0C:7B:E2:48:E2:8D:6B:C3:19:4A:4E:AB:B6:3F
            X509v3 Authority Key Identifier:
                keyid:65:5D:B0:43:4A:91:7B:B2:98:09:86:A7:C8:4E:35:12:C2:A8:95:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZV2wQ0qRe7KYCYanyE41EsKola0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/Pdo7IcqADHviSOKNa8MZSk6rtj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88abd2-6288-4471-80ab-e49f7f31362c/1/ZV2wQ0qRe7KYCYanyE41EsKola0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.70.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:17:78:f5:d1:a9:44:ad:f4:a8:b4:cd:b3:1a:2a:2a:44:dd:
         b8:5c:e8:a1:66:19:63:11:a2:5c:f6:ef:16:8c:78:6e:81:35:
         6f:24:c2:ba:bc:c2:2f:c5:04:f1:03:30:e9:c9:ed:6a:55:aa:
         ab:51:6a:56:03:39:03:22:e1:0e:89:5f:2b:81:e0:15:f1:7a:
         aa:ce:0f:6e:bd:16:ee:d3:f2:ea:4d:fa:29:5d:4f:3a:54:49:
         0d:d6:df:d4:7c:6e:0d:59:16:26:d9:bb:ce:a3:22:0c:60:22:
         5a:51:25:82:ca:02:34:fe:19:35:d5:2a:16:16:bc:19:c4:34:
         fe:43:19:e6:89:b5:20:cd:90:5a:ad:94:39:31:60:42:b4:ec:
         d5:cd:7c:cb:f4:fe:86:87:47:85:ba:4a:b4:c3:80:e8:e0:9d:
         42:be:87:bb:77:d8:f0:a3:fb:85:c5:bb:6b:75:d1:4a:06:71:
         b5:76:63:4f:ce:4f:15:ee:dd:05:b4:96:fd:e5:76:b5:98:52:
         16:fa:e6:bb:3a:8f:a0:71:2d:54:56:3d:7e:a0:4b:46:a6:8a:
         4b:9c:4c:55:ac:c7:9d:e0:5a:18:10:1d:84:62:79:b4:27:74:
         8f:f5:24:6a:49:12:69:87:2e:ce:0e:21:b9:57:a1:4f:63:74:
         39:5f:ef:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiRbTENuG5PRhVTZHEBwgcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWRiMDQzNGE5MTdiYjI5ODA5ODZhN2M4NGUzNTEyYzJh
ODk1YWQwHhcNMjMwNjA2MTU1NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGRhM2IyMWNhODAwYzdiZTI0OGUyOGQ2YmMzMTk0YTRlYWJiNjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs9GfOJJRurutdhWZKk/n5TeF8qP
p7MHC9ZYxbAG4TAV4JSWWKbgyBrLL+UT2ahiqtcGwwEl8CreE7tm69DutA9uMvIu
2IhBNPOx3tjnfSFJgL26NdScgASSGmWeg8HFJTmiBW+Tzo6bHvkknp3UlQQN4Pia
2AHrYh0qgOFYp2QBu5goFRUXPc6QIjqpJeV40KXg4FdSg+7pKaUjupLYur/+5JSQ
JQrF552OH5lqBKJf/yh9zzdHvQNqDx6vblXHsgVgGRYu6P4TOyGX3FyurllWHM9t
+Nkilu2bFSp/kGwKu1HCC+0xOj6WjmVs4NFvU8tFJof0TeAs32YT30lHWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3aOyHKgAx74kjijWvDGUpOq7Y/MB8GA1UdIwQY
MBaAFGVdsENKkXuymAmGp8hONRLCqJWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlYyd1EwcVJlN0tZQ1lhbnlFNDFFc0tvbGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGFiZDItNjI4OC00NDcxLTgwYWIt
ZTQ5ZjdmMzEzNjJjLzEvUGRvN0ljcUFESHZpU09LTmE4TVpTazZydGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGFiZDItNjI4OC00NDcxLTgwYWItZTQ5ZjdmMzEzNjJj
LzEvWlYyd1EwcVJlN0tZQ1lhbnlFNDFFc0tvbGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkbqMA0G
CSqGSIb3DQEBCwUAA4IBAQBYF3j10alErfSotM2zGioqRN24XOihZhljEaJc9u8W
jHhugTVvJMK6vMIvxQTxAzDpye1qVaqrUWpWAzkDIuEOiV8rgeAV8Xqqzg9uvRbu
0/LqTfopXU86VEkN1t/UfG4NWRYm2bvOoyIMYCJaUSWCygI0/hk11SoWFrwZxDT+
QxnmibUgzZBarZQ5MWBCtOzVzXzL9P6Gh0eFukq0w4Do4J1Cvoe7d9jwo/uFxbtr
ddFKBnG1dmNPzk8V7t0FtJb95Xa1mFIW+ua7Oo+gcS1UVj1+oEtGpopLnExVrMed
4FoYEB2EYnm0J3SP9SRqSRJphy7ODiG5V6FPY3Q5X+9T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:30 2024 by rpki-client on console-ams.rpki-client.org