Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/sJHpQ6nEkSymZbhE_e83FH-Ax9U.roa
File:                     sJHpQ6nEkSymZbhE_e83FH-Ax9U.roa (raw, json)
Hash identifier:          8jLwi23dlw5/NLoV8HWgziNboOmWEDUFMjn3x9K2mo4=
Subject key identifier:   B0:91:E9:43:A9:C4:91:2C:A6:65:B8:44:FD:EF:37:14:7F:80:C7:D5
Certificate issuer:       /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial:       01882086B5268DB3DA5D24967305BD16BAB3
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/sJHpQ6nEkSymZbhE_e83FH-Ax9U.roa
Signing time:             Mon 15 May 2023 17:47:59 +0000
ROA not before:           Mon 15 May 2023 17:47:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        94.247.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:b5:26:8d:b3:da:5d:24:96:73:05:bd:16:ba:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Validity
            Not Before: May 15 17:47:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b091e943a9c4912ca665b844fdef37147f80c7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c5:3e:34:99:c9:00:f0:c8:c1:af:ea:fe:e6:
                    44:39:4b:57:dc:c5:d6:b7:82:76:0d:88:ed:f6:6a:
                    a0:7e:63:04:d3:3d:27:76:54:20:e3:37:8e:70:e1:
                    a8:a1:d2:52:b6:ea:a6:c7:0c:a0:39:e8:0e:da:32:
                    10:7f:8e:a5:d1:67:28:62:14:f3:a0:ed:7e:bf:f4:
                    5e:15:9b:f1:9f:6f:94:29:d9:a4:13:e2:f9:6e:83:
                    62:56:d1:33:f0:17:f0:85:8b:b4:76:30:f8:4c:20:
                    36:97:42:65:5b:a2:ad:21:be:34:63:b1:d2:c5:a2:
                    8d:e1:03:08:f9:1e:9c:a6:ce:bd:1e:9c:45:b9:ef:
                    17:4b:f5:55:21:6f:a4:f0:e6:4c:c3:d3:53:67:58:
                    ef:6d:12:68:96:7e:bc:e9:fd:56:88:08:bf:14:77:
                    03:e5:50:64:aa:22:22:92:bd:b7:ce:16:5c:0a:22:
                    e2:8c:8e:38:f9:63:83:81:eb:3c:b3:4d:ea:c0:c7:
                    7d:3f:b0:69:83:7a:8c:a7:31:51:f9:19:bf:24:2a:
                    3f:98:f1:86:b9:eb:cb:21:5f:91:7c:34:f8:ad:73:
                    f0:c9:93:ce:6e:ad:fb:77:fc:31:1d:6d:42:fb:d0:
                    56:3a:34:3f:ea:3c:3b:89:81:c7:2e:58:20:34:98:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:91:E9:43:A9:C4:91:2C:A6:65:B8:44:FD:EF:37:14:7F:80:C7:D5
            X509v3 Authority Key Identifier:
                keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/sJHpQ6nEkSymZbhE_e83FH-Ax9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:11:3c:a6:63:96:13:8a:d3:19:7c:f3:b3:57:61:5f:84:eb:
         95:ec:b5:c1:60:4d:dc:64:87:e3:e3:7b:58:de:ab:5a:c2:cb:
         63:16:96:17:f4:b1:be:cc:23:98:1b:8c:5f:7b:8e:eb:3a:fb:
         67:07:a6:35:4b:d1:84:99:81:8a:93:25:b4:4c:4a:12:20:f5:
         0d:ed:f6:84:b8:cf:1c:e5:02:90:24:14:54:be:de:d9:c9:13:
         3d:64:5b:86:f0:ac:40:0c:7b:f3:c7:de:10:f7:95:3f:a4:9d:
         ec:1c:cc:c6:7e:91:d9:50:c7:ec:bc:41:63:ab:dc:d2:ba:09:
         e5:21:7e:d9:92:45:fe:22:4c:39:22:3e:92:94:72:53:1a:6a:
         34:d7:7e:7b:62:0d:e7:5e:94:09:be:14:ea:1e:68:ff:b0:25:
         1f:1f:2f:1d:06:89:d1:02:da:cb:b4:b1:30:0c:46:1a:a8:76:
         fd:08:6c:91:66:ee:eb:96:b4:b1:8a:e6:1a:42:17:ed:72:d2:
         bd:94:47:e3:be:d3:e1:b3:d7:3d:06:ac:17:59:cb:2a:3c:3b:
         c8:d5:94:16:ba:ac:f6:95:bf:c0:ac:83:2f:bd:21:64:5a:bf:
         53:87:bd:e0:0c:f1:83:4b:38:e1:b2:b9:68:a5:19:7e:fb:56:
         7e:a3:ca:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghrUmjbPaXSSWcwW9FrqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTYzMzJjYzM5N2QzMzhlMWQ2YTFmYjg2YzJiNzFjOTJj
YjI1NTkwHhcNMjMwNTE1MTc0NzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDkxZTk0M2E5YzQ5MTJjYTY2NWI4NDRmZGVmMzcxNDdmODBjN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMU+NJnJAPDIwa/q/uZEOUtX3MXW
t4J2DYjt9mqgfmME0z0ndlQg4zeOcOGoodJStuqmxwygOegO2jIQf46l0WcoYhTz
oO1+v/ReFZvxn2+UKdmkE+L5boNiVtEz8BfwhYu0djD4TCA2l0JlW6KtIb40Y7HS
xaKN4QMI+R6cps69HpxFue8XS/VVIW+k8OZMw9NTZ1jvbRJoln686f1WiAi/FHcD
5VBkqiIikr23zhZcCiLijI44+WODges8s03qwMd9P7Bpg3qMpzFR+Rm/JCo/mPGG
uevLIV+RfDT4rXPwyZPObq37d/wxHW1C+9BWOjQ/6jw7iYHHLlggNJgaNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLCR6UOpxJEspmW4RP3vNxR/gMfVMB8GA1UdIwQY
MBaAFKPmMyzDl9M44dah+4bCtxySyyVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1ZekxNT1gwempoMXFIN2hzSzNISkxMSlZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81ZWM1NWEtNzQ2MS00MDhlLWI0NWMt
ZTVmMjZiYzRkNDZlLzEvc0pIcFE2bkVrU3ltWmJoRV9lODNGSC1BeDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS81ZWM1NWEtNzQ2MS00MDhlLWI0NWMtZTVmMjZiYzRkNDZl
LzEvby1ZekxNT1gwempoMXFIN2hzSzNISkxMSlZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXveKMA0G
CSqGSIb3DQEBCwUAA4IBAQChETymY5YTitMZfPOzV2FfhOuV7LXBYE3cZIfj43tY
3qtawstjFpYX9LG+zCOYG4xfe47rOvtnB6Y1S9GEmYGKkyW0TEoSIPUN7faEuM8c
5QKQJBRUvt7ZyRM9ZFuG8KxADHvzx94Q95U/pJ3sHMzGfpHZUMfsvEFjq9zSugnl
IX7ZkkX+Ikw5Ij6SlHJTGmo01357Yg3nXpQJvhTqHmj/sCUfHy8dBonRAtrLtLEw
DEYaqHb9CGyRZu7rlrSxiuYaQhftctK9lEfjvtPhs9c9BqwXWcsqPDvI1ZQWuqz2
lb/ArIMvvSFkWr9Th73gDPGDSzjhsrlopRl++1Z+o8pt
-----END CERTIFICATE-----
Generated at Tue Sep 5 13:41:55 2023 by rpki-client on console-ams.rpki-client.org