Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/5wuhqAmycF5dZ0_PUtIzO6OVoTs.roa
File:                     5wuhqAmycF5dZ0_PUtIzO6OVoTs.roa (raw, json)
Hash identifier:          h4yuUUPdtHW0vxfcekeYlbI8uSQquOl74Yq62wbpYRY=
Subject key identifier:   E7:0B:A1:A8:09:B2:70:5E:5D:67:4F:CF:52:D2:33:3B:A3:95:A1:3B
Certificate issuer:       /CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Certificate serial:       018570D533BBAEBEE5E911E2355C68638223
Authority key identifier: E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/5wuhqAmycF5dZ0_PUtIzO6OVoTs.roa
Signing time:             Mon 02 Jan 2023 04:54:58 +0000
ROA not before:           Mon 02 Jan 2023 04:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50041
IP address blocks:        185.226.142.0/24 maxlen: 24
                          185.226.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:33:bb:ae:be:e5:e9:11:e2:35:5c:68:63:82:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
        Validity
            Not Before: Jan  2 04:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e70ba1a809b2705e5d674fcf52d2333ba395a13b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:3c:5c:9d:16:dd:39:36:8e:13:9c:06:3c:
                    42:05:18:4f:5b:c7:37:2d:32:16:65:13:e8:ba:91:
                    1b:c6:b5:19:6f:ff:49:2f:23:a3:b6:97:11:6c:1f:
                    56:c9:58:4c:b9:1c:35:68:68:7d:84:35:6d:bd:3b:
                    c2:8d:30:30:1c:2c:4a:c4:fb:fb:f6:53:23:fd:ea:
                    c4:14:0d:7e:ff:2a:32:ee:b8:d3:cf:11:f3:af:7e:
                    13:89:67:cd:8c:dc:9c:c1:64:d3:88:ef:b6:bf:d5:
                    5d:6b:68:a7:93:d4:3e:14:8b:78:59:62:ae:13:8a:
                    e0:36:f3:d5:00:86:a7:fc:77:09:3f:cb:0f:df:73:
                    17:fc:c0:c1:8a:f8:a0:f8:81:d2:7a:b3:34:05:43:
                    17:b9:3f:f5:6c:c8:62:01:5c:27:ab:d1:77:06:59:
                    fd:25:f1:52:14:23:d3:55:13:b5:be:4f:1c:20:98:
                    53:e3:20:96:a1:35:46:f6:aa:ae:5d:3d:3c:a3:66:
                    e5:9b:94:92:98:41:b5:d2:0e:60:0f:23:ab:ee:c4:
                    ae:21:1e:9b:20:95:ee:94:7c:cd:09:72:3a:f0:c4:
                    2e:05:c5:6c:a9:6b:0c:0e:1e:cc:b3:4b:41:95:31:
                    d0:7d:cc:fe:16:72:fa:cd:72:d7:2d:62:56:c8:f4:
                    89:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:A1:A8:09:B2:70:5E:5D:67:4F:CF:52:D2:33:3B:A3:95:A1:3B
            X509v3 Authority Key Identifier:
                keyid:E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/5wuhqAmycF5dZ0_PUtIzO6OVoTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.140.0/24
                  185.226.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:fd:41:77:05:39:1f:e3:aa:4d:12:29:20:33:29:7f:94:a9:
         ac:75:c0:df:ff:af:9c:4f:06:21:4e:13:e9:ab:bb:bd:36:b0:
         ed:78:3f:ac:45:de:7d:86:5d:79:ee:ea:c6:2b:df:9c:ef:4b:
         be:40:ac:15:97:75:2d:4e:63:d5:87:f2:f1:72:22:35:97:a4:
         4a:40:c6:42:0c:4d:50:d9:e3:ac:ee:5d:ba:01:77:ad:ab:09:
         76:7d:37:c9:f7:8f:f5:b8:5d:ff:82:30:fe:21:14:37:99:c2:
         68:cf:55:24:10:5c:c6:19:e8:c2:1a:69:23:fb:07:31:ff:b5:
         49:a3:4e:51:4a:c9:ee:bc:32:90:a3:bb:4b:70:80:02:1b:2b:
         ec:ac:db:78:4f:a2:f3:18:99:4b:3f:58:9e:b0:60:82:19:65:
         fd:0b:18:1f:d5:55:2c:4c:6b:50:71:4c:a3:9b:a7:7a:c9:92:
         61:99:e7:ad:99:b1:73:cf:4f:1e:d6:23:39:02:fe:6f:70:60:
         03:db:56:c0:f6:a8:97:dd:59:d4:ea:d9:64:76:68:0a:43:ad:
         ee:dc:81:10:4f:28:79:a4:2c:89:1a:37:6d:bb:2b:60:74:61:
         22:45:1e:c9:14:cf:65:65:53:04:a3:ed:f4:5f:32:2b:2f:8d:
         52:7b:69:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw1TO7rr7l6RHiNVxoY4IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOTMyZmE5ZWE2N2RiOTEwMGJmMmVhOTM2MjhmYTQ1NTdk
NGM3OTQwHhcNMjMwMTAyMDQ1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzBiYTFhODA5YjI3MDVlNWQ2NzRmY2Y1MmQyMzMzYmEzOTVhMTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI48XJ0W3Tk2jhOcBjxCBRhPW8c3
LTIWZRPoupEbxrUZb/9JLyOjtpcRbB9WyVhMuRw1aGh9hDVtvTvCjTAwHCxKxPv7
9lMj/erEFA1+/yoy7rjTzxHzr34TiWfNjNycwWTTiO+2v9Vda2ink9Q+FIt4WWKu
E4rgNvPVAIan/HcJP8sP33MX/MDBivig+IHSerM0BUMXuT/1bMhiAVwnq9F3Bln9
JfFSFCPTVRO1vk8cIJhT4yCWoTVG9qquXT08o2blm5SSmEG10g5gDyOr7sSuIR6b
IJXulHzNCXI68MQuBcVsqWsMDh7Ms0tBlTHQfcz+FnL6zXLXLWJWyPSJnQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOcLoagJsnBeXWdPz1LSMzujlaE7MB8GA1UdIwQY
MBaAFOCTL6nqZ9uRAL8uqTYo+kVX1MeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEpNdnFlcG4yNUVBdnk2cE5pajZSVmZVeDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82MWU0NDAtNjJkNC00M2JlLTk2ZDMt
YzUyOWI2YTNlNzFhLzEvNXd1aHFBbXljRjVkWjBfUFV0SXpPNk9Wb1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82MWU0NDAtNjJkNC00M2JlLTk2ZDMtYzUyOWI2YTNlNzFh
LzEvNEpNdnFlcG4yNUVBdnk2cE5pajZSVmZVeDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueKMAwQA
ueKOMA0GCSqGSIb3DQEBCwUAA4IBAQBH/UF3BTkf46pNEikgMyl/lKmsdcDf/6+c
TwYhThPpq7u9NrDteD+sRd59hl157urGK9+c70u+QKwVl3UtTmPVh/LxciI1l6RK
QMZCDE1Q2eOs7l26AXetqwl2fTfJ94/1uF3/gjD+IRQ3mcJoz1UkEFzGGejCGmkj
+wcx/7VJo05RSsnuvDKQo7tLcIACGyvsrNt4T6LzGJlLP1iesGCCGWX9Cxgf1VUs
TGtQcUyjm6d6yZJhmeetmbFzz08e1iM5Av5vcGAD21bA9qiX3VnU6tlkdmgKQ63u
3IEQTyh5pCyJGjdtuytgdGEiRR7JFM9lZVMEo+30XzIrL41Se2lK
-----END CERTIFICATE-----
Generated at Tue Nov 28 14:40:21 2023 by rpki-client on console-ams.rpki-client.org