Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/U4irIAP9OQIgVJ2SltsWWjyhSnk.roa
File:                     U4irIAP9OQIgVJ2SltsWWjyhSnk.roa (raw, json)
Hash identifier:          yG6nzz/1H9QYTub8SE9pAPhwpC1L5GQIeAd3qXY2GDY=
Subject key identifier:   53:88:AB:20:03:FD:39:02:20:54:9D:92:96:DB:16:5A:3C:A1:4A:79
Certificate issuer:       /CN=4c72883ebc2405f98a279e006c48b6caf39dfd51
Certificate serial:       018C879743B5621A0BE0E60CBB0A4CB7A0FB
Authority key identifier: 4C:72:88:3E:BC:24:05:F9:8A:27:9E:00:6C:48:B6:CA:F3:9D:FD:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THKIPrwkBfmKJ54AbEi2yvOd_VE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/U4irIAP9OQIgVJ2SltsWWjyhSnk.roa
Signing time:             Wed 20 Dec 2023 14:18:06 +0000
ROA not before:           Wed 20 Dec 2023 14:18:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198034
IP address blocks:        91.230.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:87:97:43:b5:62:1a:0b:e0:e6:0c:bb:0a:4c:b7:a0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c72883ebc2405f98a279e006c48b6caf39dfd51
        Validity
            Not Before: Dec 20 14:18:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5388ab2003fd390220549d9296db165a3ca14a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:45:9d:99:b1:2a:4f:d1:da:b2:ab:51:69:35:
                    09:b8:a8:b6:84:98:13:45:1b:3d:82:a5:fa:cb:2a:
                    98:0f:c2:1d:fe:b7:18:c5:00:8f:ac:29:ec:67:68:
                    78:4f:ef:cb:e3:b1:7d:78:b7:f2:1b:13:8d:81:11:
                    6f:9e:3b:59:6b:07:7c:05:68:a2:83:65:a2:ae:66:
                    0a:4c:36:a9:45:6f:c9:61:a5:66:5b:20:40:e3:1d:
                    21:e2:ce:d0:b0:72:51:88:30:da:a8:0c:86:96:9e:
                    ed:c6:d8:ef:03:10:34:25:8e:18:79:6d:7c:5f:d4:
                    47:3e:ec:ad:ef:d0:1b:ca:f3:70:8c:32:85:74:ea:
                    c8:aa:cf:9b:86:09:08:12:ad:06:eb:c8:0b:22:7b:
                    ec:00:25:1d:67:b4:0e:5f:77:5f:ab:4c:5e:35:1a:
                    5d:1c:89:fd:2e:50:73:05:f4:f5:2e:e6:04:e5:3d:
                    0e:2f:a1:97:b9:19:d5:fd:c1:a2:21:85:36:38:05:
                    cf:1c:47:46:30:4e:23:98:77:70:4d:65:b4:c6:69:
                    df:df:24:1e:02:16:85:43:45:80:72:6b:98:ec:b3:
                    bc:0a:a4:d6:7f:f8:1f:48:1a:4e:70:23:95:76:2c:
                    c6:8a:27:af:db:39:fc:8b:d1:a9:3a:6e:74:67:f3:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:88:AB:20:03:FD:39:02:20:54:9D:92:96:DB:16:5A:3C:A1:4A:79
            X509v3 Authority Key Identifier:
                keyid:4C:72:88:3E:BC:24:05:F9:8A:27:9E:00:6C:48:B6:CA:F3:9D:FD:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THKIPrwkBfmKJ54AbEi2yvOd_VE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/U4irIAP9OQIgVJ2SltsWWjyhSnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/50c033-54a8-44f0-8c1b-5f7691b6620a/1/THKIPrwkBfmKJ54AbEi2yvOd_VE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:0a:87:b1:48:1c:5d:65:84:c5:85:b8:4c:e1:a3:73:8b:
         99:0b:e2:23:f0:17:97:eb:df:52:cf:b7:6e:b5:f5:78:2c:7f:
         86:49:0d:36:49:47:bf:45:d6:be:4e:1e:f2:bb:c1:89:65:51:
         54:c3:43:a0:29:52:76:81:21:ff:c2:9b:85:7a:70:60:36:8a:
         0a:fb:3c:4a:74:54:c7:9c:0e:8d:cc:8c:f4:6f:51:23:28:5b:
         9f:28:46:d0:73:9a:f5:7e:1d:98:e1:24:f8:76:87:bd:44:cd:
         06:dd:b7:6b:bd:f4:4b:f0:c5:79:73:4b:1f:ea:ed:3a:20:1b:
         b3:8a:82:47:cc:a8:e3:72:5a:68:a6:b1:58:9b:d4:10:fd:dc:
         cd:9c:a6:81:91:6d:e3:54:f5:e2:42:49:a6:ce:75:50:9f:ac:
         12:9e:ae:3c:7c:2a:56:db:8a:b8:2f:df:4e:88:69:70:d7:cd:
         f5:ac:b9:65:54:ec:bc:5c:2a:7a:0b:92:3e:54:06:7c:d1:5a:
         9d:ad:bb:6b:71:10:c7:d4:30:b9:c9:d8:9e:ca:20:1b:db:64:
         ab:66:7a:0a:c6:8b:72:bf:6c:37:7d:7b:a7:07:91:3c:ae:7b:
         6f:85:85:0c:44:10:32:b3:10:b7:3e:58:74:22:75:98:0f:fa:
         fb:f5:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:42 2024 by rpki-client on console-ams.rpki-client.org