Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/j6Oi6_nJ7hHlt5pzZ8CdVzdXYRQ.roa
File:                     j6Oi6_nJ7hHlt5pzZ8CdVzdXYRQ.roa (raw, json)
Hash identifier:          ITeDnS4opmLK5O7mxWrjfZJJq+Audo2/D8yaW5rB1z8=
Subject key identifier:   8F:A3:A2:EB:F9:C9:EE:11:E5:B7:9A:73:67:C0:9D:57:37:57:61:14
Certificate issuer:       /CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
Certificate serial:       0228D106
Authority key identifier: FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/j6Oi6_nJ7hHlt5pzZ8CdVzdXYRQ.roa
Signing time:             Sat 01 Jan 2022 06:52:49 +0000
ROA not before:           Sat 01 Jan 2022 06:52:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        193.163.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36229382 (0x228d106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7997ef7f7f1e1da10e5c1d98ea31474b6dbb11
        Validity
            Not Before: Jan  1 06:52:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8fa3a2ebf9c9ee11e5b79a7367c09d5737576114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:8a:41:94:34:4e:a5:1d:aa:95:3c:65:45:
                    cc:ee:7e:8c:88:69:13:1a:a2:cc:03:ea:b3:a2:08:
                    fd:84:2d:46:92:37:53:bf:e6:46:64:d0:33:65:48:
                    cf:94:53:e0:50:76:7f:43:e7:3f:8b:39:75:96:ba:
                    d8:ff:ab:45:e3:c1:09:d3:3a:8f:b6:61:ea:ec:6d:
                    27:13:a2:a5:a6:70:6f:06:4d:c2:bb:97:0f:fc:e4:
                    d3:e6:c4:2d:76:3d:98:b4:b8:e0:49:68:6d:1f:51:
                    27:bf:f9:33:44:d8:ea:0c:ac:87:1a:db:1c:b2:51:
                    bf:03:9c:01:20:f9:dc:6c:38:5f:03:90:bf:a3:31:
                    43:6a:a5:10:c1:83:28:42:9c:b4:e9:c0:0a:7d:ca:
                    37:12:ea:46:e7:dd:5f:f5:a5:0d:8b:c4:06:b8:92:
                    be:10:42:a7:48:3a:29:00:12:66:2f:58:0a:80:0e:
                    5e:6f:31:9a:d1:8e:82:75:46:39:20:df:95:12:6f:
                    c3:9c:47:f1:3f:51:d5:f0:0b:13:ad:53:f5:81:2f:
                    be:1c:08:c9:e1:76:c1:b5:85:10:0d:d5:ad:fd:91:
                    26:36:fd:84:79:00:3d:19:32:9b:f1:3d:f0:c4:80:
                    de:9e:af:8b:7e:d2:f4:ad:6c:e0:c0:6d:dc:f6:0b:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:A2:EB:F9:C9:EE:11:E5:B7:9A:73:67:C0:9D:57:37:57:61:14
            X509v3 Authority Key Identifier:
                keyid:FF:79:97:EF:7F:7F:1E:1D:A1:0E:5C:1D:98:EA:31:47:4B:6D:BB:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3mX739_Hh2hDlwdmOoxR0ttuxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/j6Oi6_nJ7hHlt5pzZ8CdVzdXYRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c67904-4f38-4a2a-96e2-23aa142444e1/1/_3mX739_Hh2hDlwdmOoxR0ttuxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:c0:f0:6c:eb:90:ba:01:4b:59:83:2a:f8:95:dd:65:a3:65:
         77:b0:79:df:e5:2b:14:b7:76:7d:ea:27:cb:8b:f6:3f:1c:d8:
         53:ee:f3:70:12:26:a0:d3:50:64:85:a0:74:11:52:de:b2:8d:
         f1:dd:83:ec:83:7e:cf:8e:ef:cd:08:99:52:ce:20:10:c1:b7:
         76:50:2d:f9:62:1f:0c:30:12:b8:db:70:8e:3f:c2:33:4b:69:
         fc:2d:b6:42:bc:e0:d2:30:8a:6a:06:29:b8:32:61:92:cc:ec:
         b4:a7:6e:7f:67:61:9a:1e:fa:34:cc:8b:26:54:7a:90:73:f1:
         c0:4b:cf:0f:3a:f1:79:7e:23:c2:f7:8e:4e:06:43:09:73:b1:
         81:ed:7e:79:82:6f:cd:7f:af:59:1b:71:7c:0b:2b:36:0b:d0:
         a2:50:5e:33:d0:ac:60:de:69:c9:1e:e6:19:6a:62:8a:b4:4a:
         41:62:3f:6a:c2:6f:f7:8c:eb:73:e7:fb:05:b3:ad:2c:38:e7:
         61:60:a0:88:be:2c:c8:c6:9d:8a:84:c2:04:ee:6a:e7:24:f3:
         e6:e4:6a:9e:d2:f7:44:5f:7a:0f:cc:57:83:b6:ae:f4:cd:41:
         8e:84:f4:dc:c2:b4:08:1e:39:ef:8c:8e:e0:77:02:9a:df:67:
         1e:c8:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:26 2024 by rpki-client on console-ams.rpki-client.org