Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/HOd9Bc0G5nE1I4CShWUxZ_eb6Jg.roa
File:                     HOd9Bc0G5nE1I4CShWUxZ_eb6Jg.roa (raw, json)
Hash identifier:          zEyTYh4Bxho9dPi4qCULQeVJjn8tOG4MtZqwQFFtxJ0=
Subject key identifier:   1C:E7:7D:05:CD:06:E6:71:35:23:80:92:85:65:31:67:F7:9B:E8:98
Certificate issuer:       /CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
Certificate serial:       6D7C3C
Authority key identifier: 60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/HOd9Bc0G5nE1I4CShWUxZ_eb6Jg.roa
Signing time:             Sat 05 Mar 2022 19:19:23 +0000
ROA not before:           Sat 05 Mar 2022 19:19:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.176.93.0/24 maxlen: 24
                          185.229.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7175228 (0x6d7c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d9cd2e30c3ea2ba586cd81f3eb26a1a000f56
        Validity
            Not Before: Mar  5 19:19:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ce77d05cd06e6713523809285653167f79be898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:ac:fd:97:2a:32:bd:d0:bc:7e:e3:52:07:
                    fa:81:18:7d:4a:68:7b:4d:b3:c3:23:51:41:14:72:
                    52:4f:de:c5:61:f4:08:5f:c5:2f:3e:2b:0e:94:cf:
                    01:7a:5e:c6:d5:cb:91:a2:fc:59:11:d4:b4:c4:70:
                    0d:19:b9:0d:5c:98:05:7f:9b:ce:e3:a5:61:79:ba:
                    c9:10:8d:20:d6:39:0d:0e:68:14:03:5b:33:99:fb:
                    77:c6:77:76:ff:5a:bb:9d:86:dd:a2:29:d0:1b:dd:
                    20:5a:14:f7:3c:f6:02:8f:ee:b0:27:9a:f9:af:d0:
                    8f:95:de:c9:f3:51:2e:0a:dd:ca:c2:4a:2f:fe:9a:
                    a1:2d:3d:14:43:33:66:7a:8f:2b:a8:15:f3:17:c7:
                    6b:b5:79:4a:bc:e2:9b:b7:de:b2:32:fe:c5:51:54:
                    5c:f5:1d:4a:1f:4f:24:7f:66:77:32:7d:67:b7:56:
                    bb:10:82:8b:55:16:ca:fa:89:e2:ee:4d:94:ce:0e:
                    52:3e:b5:7b:44:64:32:a6:02:4e:d5:dd:01:63:76:
                    5f:1b:9a:a3:dd:49:fc:e4:db:07:44:50:e3:b9:a6:
                    5a:16:07:be:e3:63:7e:1b:19:cb:eb:91:26:0e:69:
                    12:c2:8a:b6:d4:33:65:3c:0e:25:d2:c9:65:61:53:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E7:7D:05:CD:06:E6:71:35:23:80:92:85:65:31:67:F7:9B:E8:98
            X509v3 Authority Key Identifier:
                keyid:60:1D:9C:D2:E3:0C:3E:A2:BA:58:6C:D8:1F:3E:B2:6A:1A:00:0F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB2c0uMMPqK6WGzYHz6yahoAD1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/HOd9Bc0G5nE1I4CShWUxZ_eb6Jg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/372b31-7114-4af0-8bb1-e99924daa1d5/1/YB2c0uMMPqK6WGzYHz6yahoAD1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.176.93.0/24
                  185.229.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:85:a5:7f:06:04:ea:37:0a:6e:c4:63:9f:90:42:83:da:
         9b:77:b6:d1:c2:b0:7a:57:86:11:25:b6:a1:e8:01:62:71:dc:
         cb:d6:63:85:81:d6:b7:d9:0c:d7:20:85:ec:07:52:27:30:e8:
         0a:02:0f:d9:5e:4d:c8:c4:a0:84:d2:cf:7a:88:22:9a:7b:0a:
         8c:15:79:4d:0c:82:3b:86:da:11:63:d9:4c:dc:5a:02:61:e9:
         1a:06:14:91:29:a3:ee:2a:ee:c3:48:7b:54:ea:f3:9a:ec:5d:
         fb:33:9a:8d:42:9e:4d:41:62:da:4e:c1:6c:9c:02:96:48:df:
         c3:cd:5f:e8:8c:b2:fc:fb:20:3d:6a:fc:98:a8:c0:2b:73:74:
         d0:e1:01:f3:58:14:9e:3a:24:28:0e:c1:88:42:26:f7:81:8e:
         81:3c:c6:f5:f5:8f:e7:02:4b:a7:0c:7d:45:a6:88:12:26:ef:
         0f:30:b6:35:a0:a8:a1:02:49:81:85:49:dc:73:ed:58:d4:41:
         47:d0:83:6f:b7:dd:12:a6:cf:a7:37:9a:eb:c1:f0:88:cf:b8:
         65:d2:66:18:29:02:65:11:53:0a:15:87:38:a8:19:7b:09:bf:
         02:df:42:84:c0:3a:7e:4b:ce:ea:10:bf:ac:28:68:42:f0:54:
         d2:9f:d5:e6
-----BEGIN CERTIFICATE-----
MIIE9DCCA9ygAwIBAgIDbXw8MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYw
MWQ5Y2QyZTMwYzNlYTJiYTU4NmNkODFmM2ViMjZhMWEwMDBmNTYwHhcNMjIwMzA1
MTkxOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxY2U3N2QwNWNkMDZl
NjcxMzUyMzgwOTI4NTY1MzE2N2Y3OWJlODk4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmJWs/ZcqMr3QvH7jUgf6gRh9Smh7TbPDI1FBFHJST97FYfQI
X8UvPisOlM8Bel7G1cuRovxZEdS0xHANGbkNXJgFf5vO46VhebrJEI0g1jkNDmgU
A1szmft3xnd2/1q7nYbdoinQG90gWhT3PPYCj+6wJ5r5r9CPld7J81EuCt3Kwkov
/pqhLT0UQzNmeo8rqBXzF8drtXlKvOKbt96yMv7FUVRc9R1KH08kf2Z3Mn1nt1a7
EIKLVRbK+oni7k2Uzg5SPrV7RGQypgJO1d0BY3ZfG5qj3Un85NsHRFDjuaZaFge+
42N+GxnL65EmDmkSwoq21DNlPA4l0sllYVO3xwIDAQABo4ICDzCCAgswHQYDVR0O
BBYEFBznfQXNBuZxNSOAkoVlMWf3m+iYMB8GA1UdIwQYMBaAFGAdnNLjDD6iulhs
2B8+smoaAA9WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WUIyYzB1TU1QcUs2V0d6WUh6NnlhaG9BRDFZLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85MC8zNzJiMzEtNzExNC00YWYwLThiYjEtZTk5OTI0ZGFhMWQ1LzEv
SE9kOUJjMEc1bkUxSTRDU2hXVXhaX2ViNkpnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8z
NzJiMzEtNzExNC00YWYwLThiYjEtZTk5OTI0ZGFhMWQ1LzEvWUIyYzB1TU1QcUs2
V0d6WUh6NnlhaG9BRDFZLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG
CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubBdAwQAueXcMA0GCSqGSIb3DQEB
CwUAA4IBAQBekoWlfwYE6jcKbsRjn5BCg9qbd7bRwrB6V4YRJbah6AFicdzL1mOF
gda32QzXIIXsB1InMOgKAg/ZXk3IxKCE0s96iCKaewqMFXlNDII7htoRY9lM3FoC
YekaBhSRKaPuKu7DSHtU6vOa7F37M5qNQp5NQWLaTsFsnAKWSN/DzV/ojLL8+yA9
avyYqMArc3TQ4QHzWBSeOiQoDsGIQib3gY6BPMb19Y/nAkunDH1FpogSJu8PMLY1
oKihAkmBhUncc+1Y1EFH0INvt90Sps+nN5rrwfCIz7hl0mYYKQJlEVMKFYc4qBl7
Cb8C30KEwDp+S87qEL+sKGhC8FTSn9Xm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:44 2024 by rpki-client on console-ams.rpki-client.org