Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/k64lNe7WF0dd6Mgx0LI9H8Df3Yo.roa
File:                     k64lNe7WF0dd6Mgx0LI9H8Df3Yo.roa (raw, json)
Hash identifier:          fkg44GY3561RjYHK5bn2RVUDYpUmaX4pBDVRCr94y2U=
Subject key identifier:   93:AE:25:35:EE:D6:17:47:5D:E8:C8:31:D0:B2:3D:1F:C0:DF:DD:8A
Certificate issuer:       /CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
Certificate serial:       5885
Authority key identifier: 5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/k64lNe7WF0dd6Mgx0LI9H8Df3Yo.roa
Signing time:             Thu 03 Feb 2022 16:44:48 +0000
ROA not before:           Thu 03 Feb 2022 16:44:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     701
IP address blocks:        185.112.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22661 (0x5885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0779e65d0ba10ddb25b4829bd725ce6cabe182
        Validity
            Not Before: Feb  3 16:44:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93ae2535eed617475de8c831d0b23d1fc0dfdd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:e5:f5:a1:4a:3d:f5:b0:56:35:d2:c4:ab:
                    cc:93:0a:6d:80:c9:ac:51:8c:ce:3f:24:74:40:e1:
                    87:6e:31:27:0b:77:53:2f:35:f1:79:04:06:fb:b7:
                    f9:88:94:43:43:70:fd:43:12:6f:44:9e:89:19:40:
                    c6:93:f5:a1:f4:eb:f8:6e:fd:3a:6f:14:1c:5f:24:
                    81:79:73:20:5c:54:ef:18:bf:63:43:1c:cd:24:fa:
                    dc:92:c6:cf:6c:7c:9d:8c:e9:e7:97:9e:6a:d9:a5:
                    d8:bd:eb:fc:89:cb:6e:2c:74:0b:5b:1f:ee:81:7e:
                    57:a5:5e:ed:3d:78:88:ad:1a:b6:db:ba:46:34:a6:
                    9a:e4:d8:dd:21:64:6b:8f:92:aa:c4:86:e5:21:18:
                    7d:79:d9:5f:01:2a:37:83:ff:5a:78:b6:ee:d9:e8:
                    d4:e5:2d:bf:7d:af:90:41:9f:cc:68:ff:06:79:54:
                    55:1e:8b:61:49:5c:93:c8:e8:df:b3:dd:4f:fb:4e:
                    f9:94:f9:15:1b:27:1d:2d:51:89:43:7a:38:0e:d7:
                    e8:7a:cc:fe:7b:7a:bf:f4:0c:22:da:56:e1:ef:73:
                    1b:9b:1f:78:7f:fa:4a:4a:04:5c:8b:6e:8b:de:a7:
                    f5:42:ad:b4:05:26:87:de:73:1b:68:e0:1f:56:11:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:25:35:EE:D6:17:47:5D:E8:C8:31:D0:B2:3D:1F:C0:DF:DD:8A
            X509v3 Authority Key Identifier:
                keyid:5A:07:79:E6:5D:0B:A1:0D:DB:25:B4:82:9B:D7:25:CE:6C:AB:E1:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wgd55l0LoQ3bJbSCm9clzmyr4YI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/k64lNe7WF0dd6Mgx0LI9H8Df3Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/675859-bf96-4458-a30a-623c27a529df/1/Wgd55l0LoQ3bJbSCm9clzmyr4YI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:2a:7a:cb:85:c8:ab:ff:73:0e:f8:6c:79:f2:96:66:00:
         73:70:73:3a:5e:ec:7b:59:19:d6:28:f6:b7:eb:2f:91:9e:70:
         b9:cb:b7:05:2a:9c:80:66:e6:4f:38:85:62:cb:1f:36:e5:4d:
         04:c1:13:60:e0:bb:d4:2b:64:f8:89:20:55:60:d2:6e:f4:98:
         f9:96:c5:21:71:63:fc:eb:17:f2:72:4f:5c:e7:e4:97:61:75:
         4c:b3:62:57:cc:5c:69:fb:08:20:72:58:e9:e8:04:19:a8:9b:
         98:43:2b:6f:62:9f:c3:72:97:f6:ba:22:1e:f7:50:2b:b7:c0:
         3d:44:de:4b:6a:21:54:0c:05:f6:31:9e:fd:47:71:d4:1f:05:
         af:e3:2c:35:c6:8b:02:47:e2:c3:f0:5d:26:ef:46:ab:c0:be:
         40:92:9f:92:6a:b7:b2:72:39:f5:5c:2b:0c:f3:19:a0:cc:52:
         44:37:36:38:21:70:20:fb:e8:20:40:61:21:11:23:e1:bb:73:
         b6:49:df:14:64:da:46:18:4c:12:30:61:2a:40:ac:35:4a:86:
         36:00:8f:c3:e4:0e:f7:8c:1a:4e:32:ba:dc:6b:60:8a:f1:b6:
         38:a3:fc:f8:67:bd:1a:98:ef:94:84:9a:32:11:c0:97:8c:42:
         17:d0:36:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org