Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/jpDTLotjJL4TH6u9nnuoA7SWJho.roa
File:                     jpDTLotjJL4TH6u9nnuoA7SWJho.roa (raw, json)
Hash identifier:          ypy+BHoAXd7tDuv9/OmQJRIQynZKWS4ZdvYbrdtu8AI=
Subject key identifier:   8E:90:D3:2E:8B:63:24:BE:13:1F:AB:BD:9E:7B:A8:03:B4:96:26:1A
Certificate issuer:       /CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
Certificate serial:       0182438D825D2C217F6233904ECC9B7D77A6
Authority key identifier: 62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/jpDTLotjJL4TH6u9nnuoA7SWJho.roa
Signing time:             Thu 28 Jul 2022 06:45:23 +0000
ROA not before:           Thu 28 Jul 2022 06:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44709
IP address blocks:        185.139.231.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:8d:82:5d:2c:21:7f:62:33:90:4e:cc:9b:7d:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6241ee2c44ace8a73384c255ad77c6c1f0452486
        Validity
            Not Before: Jul 28 06:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8e90d32e8b6324be131fabbd9e7ba803b496261a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:05:b9:61:88:07:5c:d0:fd:00:ef:89:62:
                    d9:ff:f1:4b:3c:3d:45:59:58:b4:f1:a3:ed:d4:41:
                    6b:bb:28:dc:33:7e:89:ff:75:df:e6:12:fa:bf:61:
                    ee:62:07:82:e6:82:89:2f:f0:7c:b0:a6:68:93:e1:
                    a3:6b:30:e4:b9:f1:89:25:d9:e6:4e:df:58:6a:36:
                    ad:41:b1:3c:c5:71:bc:84:37:0b:f9:58:f3:85:96:
                    e5:b6:8d:7b:cc:96:21:6f:71:05:ed:7b:31:e5:d4:
                    c7:ed:5e:41:63:a2:04:2e:85:52:de:8f:57:e9:38:
                    6b:9f:26:de:97:36:4f:5f:f1:a0:36:ee:6f:b6:8f:
                    42:7f:1c:ea:70:9d:d8:d1:23:f7:a0:b5:fd:e7:11:
                    ba:8b:25:a4:f8:bd:24:1c:e5:9e:22:d5:b9:d4:f7:
                    00:42:c0:0c:2d:02:6b:d9:a4:dc:44:b2:96:4c:92:
                    4c:60:18:1a:88:bd:13:3e:5f:2d:dc:7f:44:cc:7a:
                    32:a2:bc:a8:f2:fe:7c:25:e2:52:93:ad:9b:29:a3:
                    8d:92:5d:91:73:5d:09:1d:f4:ea:c2:28:a2:c3:db:
                    0b:29:f8:d0:ab:78:1c:9c:51:e8:c7:5b:39:22:e5:
                    ab:00:79:f6:37:fa:e9:c6:e3:62:02:2d:c6:d7:d8:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:90:D3:2E:8B:63:24:BE:13:1F:AB:BD:9E:7B:A8:03:B4:96:26:1A
            X509v3 Authority Key Identifier:
                keyid:62:41:EE:2C:44:AC:E8:A7:33:84:C2:55:AD:77:C6:C1:F0:45:24:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkHuLESs6KczhMJVrXfGwfBFJIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/jpDTLotjJL4TH6u9nnuoA7SWJho.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/beda3e-ddeb-4c42-993c-518fb8638716/1/YkHuLESs6KczhMJVrXfGwfBFJIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.139.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:5a:31:c0:39:41:ea:4c:bd:7f:27:b8:11:6d:1f:e9:1f:53:
         f9:d8:48:c2:b9:39:0c:2e:bf:22:e7:1c:82:2e:00:fb:9d:fd:
         35:d9:47:f7:05:a3:04:57:9c:f5:5e:28:81:37:9a:39:50:e9:
         d5:9c:d0:5a:0f:dc:d8:e8:86:fc:26:49:7e:3b:47:08:2b:83:
         d0:16:a9:8e:8b:77:ed:d5:2a:a9:57:e5:8e:6e:ea:7a:3d:20:
         30:04:0b:67:cf:9a:6d:1f:41:b9:f1:92:ae:06:9a:a3:97:75:
         b2:db:1c:b7:a1:fc:53:a0:f1:9e:e8:8c:64:92:42:5c:c8:0a:
         db:98:b5:49:11:b3:37:b3:bd:2f:95:cb:62:c1:b9:fb:48:c0:
         f0:41:bf:39:6a:76:0f:2d:4e:ed:61:82:7f:4a:02:26:37:f2:
         fb:47:38:be:f5:2e:b6:fe:1a:5f:c2:6e:1a:5f:31:77:e7:05:
         62:cb:64:79:8f:53:8b:a5:ff:f3:7d:90:ea:e8:28:2e:e5:25:
         03:61:eb:6c:12:6f:dd:4b:51:5e:ac:0d:37:f6:e8:a8:51:a4:
         36:b2:25:4e:f5:4d:c1:e3:de:a4:10:16:d6:d2:5c:9d:b9:5c:
         23:2e:11:24:da:11:0b:8b:8e:1e:4b:b3:2b:1c:45:20:80:4a:
         88:1c:33:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJDjYJdLCF/YjOQTsybfXemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDFlZTJjNDRhY2U4YTczMzg0YzI1NWFkNzdjNmMxZjA0
NTI0ODYwHhcNMjIwNzI4MDY0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTkwZDMyZThiNjMyNGJlMTMxZmFiYmQ5ZTdiYTgwM2I0OTYyNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw8FuWGIB1zQ/QDviWLZ//FLPD1F
WVi08aPt1EFruyjcM36J/3Xf5hL6v2HuYgeC5oKJL/B8sKZok+GjazDkufGJJdnm
Tt9YajatQbE8xXG8hDcL+VjzhZblto17zJYhb3EF7Xsx5dTH7V5BY6IELoVS3o9X
6ThrnybelzZPX/GgNu5vto9CfxzqcJ3Y0SP3oLX95xG6iyWk+L0kHOWeItW51PcA
QsAMLQJr2aTcRLKWTJJMYBgaiL0TPl8t3H9EzHoyoryo8v58JeJSk62bKaONkl2R
c10JHfTqwiiiw9sLKfjQq3gcnFHox1s5IuWrAHn2N/rpxuNiAi3G19inWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6Q0y6LYyS+Ex+rvZ57qAO0liYaMB8GA1UdIwQY
MBaAFGJB7ixErOinM4TCVa13xsHwRSSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtIdUxFU3M2S2N6aE1KVnJYZkd3ZkJGSklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iZWRhM2UtZGRlYi00YzQyLTk5M2Mt
NTE4ZmI4NjM4NzE2LzEvanBEVExvdGpKTDRUSDZ1OW5udW9BN1NXSmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iZWRhM2UtZGRlYi00YzQyLTk5M2MtNTE4ZmI4NjM4NzE2
LzEvWWtIdUxFU3M2S2N6aE1KVnJYZkd3ZkJGSklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYvnMA0G
CSqGSIb3DQEBCwUAA4IBAQCdWjHAOUHqTL1/J7gRbR/pH1P52EjCuTkMLr8i5xyC
LgD7nf012Uf3BaMEV5z1XiiBN5o5UOnVnNBaD9zY6Ib8Jkl+O0cIK4PQFqmOi3ft
1SqpV+WObup6PSAwBAtnz5ptH0G58ZKuBpqjl3Wy2xy3ofxToPGe6IxkkkJcyArb
mLVJEbM3s70vlctiwbn7SMDwQb85anYPLU7tYYJ/SgImN/L7Rzi+9S62/hpfwm4a
XzF35wViy2R5j1OLpf/zfZDq6Cgu5SUDYetsEm/dS1FerA039uioUaQ2siVO9U3B
496kEBbW0lyduVwjLhEk2hELi44eS7MrHEUggEqIHDM0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:06 2024 by rpki-client on console-fra.rpki-client.org