Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/fc5f6c-7113-4cdf-ade6-a4ce2e4d8971/1/uie1xvX3aZTgdbAo8KGWUfHjXAQ.roa
File:                     uie1xvX3aZTgdbAo8KGWUfHjXAQ.roa (raw, json)
Hash identifier:          X9u04iPcGAC5ln8NlBxTwnP59yGXavNAkrD4wriHRiw=
Subject key identifier:   BA:27:B5:C6:F5:F7:69:94:E0:75:B0:28:F0:A1:96:51:F1:E3:5C:04
Certificate issuer:       /CN=89bfb01f637e4156168fefd2192a5a0075b25ce3
Certificate serial:       061BD843
Authority key identifier: 89:BF:B0:1F:63:7E:41:56:16:8F:EF:D2:19:2A:5A:00:75:B2:5C:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ib-wH2N-QVYWj-_SGSpaAHWyXOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/fc5f6c-7113-4cdf-ade6-a4ce2e4d8971/1/uie1xvX3aZTgdbAo8KGWUfHjXAQ.roa
Signing time:             Sat 01 Jan 2022 05:01:10 +0000
ROA not before:           Sat 01 Jan 2022 05:01:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48294
IP address blocks:        84.252.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102488131 (0x61bd843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89bfb01f637e4156168fefd2192a5a0075b25ce3
        Validity
            Not Before: Jan  1 05:01:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba27b5c6f5f76994e075b028f0a19651f1e35c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:95:7c:9e:7c:3a:18:e5:36:89:a6:9b:ee:
                    bd:d3:3a:0a:fd:54:23:bb:05:d7:85:b4:f2:4a:24:
                    c9:ba:25:ab:e1:3f:5b:a7:95:3b:8f:91:b3:ed:e2:
                    77:c4:b5:b3:be:1d:b9:5d:fa:89:62:ea:a1:d2:a4:
                    a7:37:f9:ce:a6:e3:d5:de:e3:7d:47:20:1d:a1:e8:
                    d2:0d:cf:11:59:1e:f1:db:8a:c3:b8:a8:a3:38:c2:
                    e1:eb:b5:03:a7:b0:72:e1:ed:3a:04:6d:d1:d3:fa:
                    33:0c:ad:56:aa:4d:28:5d:d8:8a:95:fa:0d:a7:7e:
                    d2:3f:66:4a:27:47:2f:83:f8:c0:cc:15:b4:64:4e:
                    81:cf:ea:c2:7a:21:8c:e0:b2:b2:0c:ab:a8:3a:e6:
                    ee:c5:fa:92:b4:2e:da:8e:92:f8:c6:07:e1:3c:b0:
                    5c:e6:c6:06:9f:82:f4:78:9d:3c:15:0f:f1:fc:2d:
                    17:3b:5b:35:a9:4a:a4:c4:16:f0:a8:ad:26:f4:ec:
                    2e:d0:92:cf:d9:0c:e2:cf:7b:77:5a:ca:31:2d:fc:
                    c2:f6:11:e6:5a:63:bd:11:44:16:90:2e:41:d4:79:
                    b6:fd:f6:1b:36:6e:72:40:fa:27:fe:10:00:5c:0c:
                    2e:a3:a8:32:9e:ef:42:19:76:c6:f2:a3:ae:cf:7d:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:B5:C6:F5:F7:69:94:E0:75:B0:28:F0:A1:96:51:F1:E3:5C:04
            X509v3 Authority Key Identifier:
                keyid:89:BF:B0:1F:63:7E:41:56:16:8F:EF:D2:19:2A:5A:00:75:B2:5C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib-wH2N-QVYWj-_SGSpaAHWyXOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fc5f6c-7113-4cdf-ade6-a4ce2e4d8971/1/uie1xvX3aZTgdbAo8KGWUfHjXAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/fc5f6c-7113-4cdf-ade6-a4ce2e4d8971/1/ib-wH2N-QVYWj-_SGSpaAHWyXOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.252.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:c4:dd:bb:3f:03:4e:ac:5e:5e:34:36:d6:45:5b:9f:06:
         98:76:6f:3b:dd:80:dd:56:9b:27:9b:b0:1c:f8:65:e7:6b:5d:
         6d:1d:e0:95:95:3f:08:cc:00:0e:98:23:b2:47:7b:ea:03:3e:
         43:84:49:f9:3d:6a:54:2c:08:f5:d3:08:a2:d9:c9:18:64:a0:
         88:4a:f6:a7:a5:69:8e:d6:91:ed:6d:4b:32:0c:7b:07:34:e9:
         9a:69:a4:78:5a:62:1d:63:a9:a6:92:99:54:df:0b:e3:8c:e5:
         91:1e:41:d9:7d:b8:24:c5:5f:0b:b7:33:85:ce:6c:f4:e3:71:
         f2:95:4b:1f:2d:7b:dc:62:1c:11:d4:12:53:f0:d0:ee:49:8c:
         c2:c5:b4:18:5e:17:34:83:c5:05:85:a4:d9:67:0a:12:48:52:
         3d:22:c1:87:26:39:1a:c9:b5:da:50:d8:31:48:bc:13:7a:85:
         cc:42:03:fc:6a:5b:02:30:ad:18:40:51:a3:e7:bc:eb:95:3c:
         5f:f6:89:63:96:0c:4a:b1:5b:dc:c2:14:3a:9e:92:f6:01:1a:
         51:05:2c:5e:a2:70:2d:86:2d:03:82:f6:57:b1:42:c5:22:e9:
         bc:c6:c8:49:a1:4b:8a:b7:c6:96:59:38:7e:a0:6b:83:d8:42:
         ff:ba:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:39 2024 by rpki-client on console-ams.rpki-client.org