Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/7mzXUDzFIZJqs-dibVTog0_arJ4.roa
File:                     7mzXUDzFIZJqs-dibVTog0_arJ4.roa (raw, json)
Hash identifier:          cYMOLZC2tZdlowqXzuXN5LDlqYyCAbU/N1ypgTpaeU4=
Subject key identifier:   EE:6C:D7:50:3C:C5:21:92:6A:B3:E7:62:6D:54:E8:83:4F:DA:AC:9E
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       018B75850DCE3245B5B5DBE6C0D670367D9C
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/7mzXUDzFIZJqs-dibVTog0_arJ4.roa
Signing time:             Sat 28 Oct 2023 09:02:15 +0000
ROA not before:           Sat 28 Oct 2023 09:02:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        194.59.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:75:85:0d:ce:32:45:b5:b5:db:e6:c0:d6:70:36:7d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Oct 28 09:02:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee6cd7503cc521926ab3e7626d54e8834fdaac9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:e9:bb:33:a4:57:0c:6a:3a:27:56:2a:d7:
                    62:ce:78:d8:32:5d:02:fb:3a:dd:b8:78:cf:3d:c8:
                    7e:fd:78:a6:3e:24:bb:1d:99:3d:74:7d:4f:3e:43:
                    ec:ca:b1:a8:5c:03:7f:2e:19:d5:8f:ea:c8:49:3f:
                    c2:9a:51:38:27:1a:60:c3:07:0f:7d:46:5f:0f:41:
                    f7:f6:d3:65:28:7a:8a:91:79:ed:ff:be:bc:69:da:
                    9c:c4:14:d1:5a:5e:73:55:19:cb:e6:2b:62:ed:f2:
                    fe:53:6e:95:91:01:f2:73:81:d9:fe:d8:2e:29:7d:
                    9c:ee:29:84:77:5d:99:a4:66:ee:3e:3c:07:36:13:
                    f1:46:5e:d8:97:ce:c7:5f:1a:41:44:94:6a:5a:a1:
                    54:bd:56:9c:d2:23:d2:2e:a1:31:43:f9:c0:18:85:
                    f4:76:bd:8b:c2:6d:4a:2a:e7:e1:c6:9f:eb:77:a8:
                    f2:b9:98:b2:d3:19:de:94:19:f0:79:3f:59:ec:cd:
                    ce:45:e5:35:30:72:64:2e:0d:67:74:fa:2c:5b:17:
                    cf:ff:ea:95:c2:3f:d4:76:1e:df:7a:31:5c:5f:10:
                    4c:eb:86:5d:10:c9:09:64:56:c8:78:1a:a3:ad:bf:
                    82:56:2c:82:86:b3:82:c1:31:53:61:7d:91:2b:a8:
                    c0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6C:D7:50:3C:C5:21:92:6A:B3:E7:62:6D:54:E8:83:4F:DA:AC:9E
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/7mzXUDzFIZJqs-dibVTog0_arJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:93:e2:b7:0c:58:98:10:89:57:41:62:d6:66:99:50:35:81:
         e8:d5:dd:a5:41:d4:7b:0d:5c:d3:15:bd:de:1e:7e:c9:e7:1b:
         04:b5:b7:f6:94:21:f6:49:52:7e:b9:2c:33:40:b9:dd:b9:f6:
         e1:8c:b9:ea:9e:2f:f2:23:3e:6c:ce:73:2c:44:e4:e1:84:09:
         ae:1d:2f:89:13:dd:31:0d:32:7f:50:33:70:74:5b:10:a4:7a:
         4e:96:0b:1f:e7:10:07:1b:c0:25:dc:2a:7b:14:ad:1c:b8:29:
         65:7f:cc:b3:76:64:5d:0a:00:ab:e7:b1:72:c9:30:f0:c9:4f:
         65:26:c1:08:2b:76:2a:36:0a:01:7e:de:b3:66:42:b7:6e:fe:
         25:89:3f:54:1f:08:23:84:30:d6:a0:be:87:d4:b7:35:12:ba:
         1e:a2:96:8f:81:68:ba:53:72:87:c1:9e:bd:ba:3f:9a:8b:db:
         dd:62:a9:84:ff:52:4e:4e:1f:bb:c9:b7:a5:4e:9e:50:ec:a4:
         8d:01:67:35:97:93:af:7d:4c:7f:18:ea:b2:ef:95:5e:79:ba:
         9b:bd:09:b8:68:3b:ef:2b:02:62:c3:56:7b:0b:35:c5:06:ae:
         c3:f7:d6:9d:70:b5:06:61:bd:6b:e5:f8:a6:bb:e7:54:c0:05:
         2f:9a:3c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org