Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g0AwEuO2LuQYSIqEpn3QNV1ir0w.roa
File:                     g0AwEuO2LuQYSIqEpn3QNV1ir0w.roa (raw, json)
Hash identifier:          ADYK5p4oHUzj4RmTAduOnURngIK4PezfOdd1kybZU4M=
Subject key identifier:   83:40:30:12:E3:B6:2E:E4:18:48:8A:84:A6:7D:D0:35:5D:62:AF:4C
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       018CC94AC0360B299F07A8E4CBD8399330E5
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g0AwEuO2LuQYSIqEpn3QNV1ir0w.roa
Signing time:             Tue 02 Jan 2024 08:29:28 +0000
ROA not before:           Tue 02 Jan 2024 08:29:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9087
IP address blocks:        194.59.9.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:c0:36:0b:29:9f:07:a8:e4:cb:d8:39:93:30:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Jan  2 08:29:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=83403012e3b62ee418488a84a67dd0355d62af4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:ca:6a:c4:46:e5:f2:cb:cc:6a:8b:dd:10:
                    9c:f0:0a:66:77:e4:31:5b:8a:02:cb:97:3e:c5:48:
                    a2:d8:ad:05:20:9c:6d:eb:4b:4f:71:b7:70:25:7c:
                    e2:89:b7:f4:29:34:71:a7:81:60:67:d9:3e:31:16:
                    f4:93:ef:bf:dd:49:8c:85:8b:75:2d:41:80:9e:34:
                    e0:36:ca:50:d8:97:e5:4b:65:87:76:5e:ae:4c:fb:
                    ea:2c:b6:35:7c:47:2f:88:86:63:a2:43:b5:e4:14:
                    5b:a6:4a:80:2a:52:45:59:54:1c:2b:ab:7e:85:5a:
                    ad:97:57:a9:79:9e:ca:bb:63:e8:fe:26:52:8d:97:
                    a0:d7:2a:5c:d8:de:05:07:d2:f7:cb:15:c8:d0:78:
                    d4:65:26:94:5b:a8:0e:45:6f:39:4e:a6:33:60:bb:
                    3f:96:79:c0:7c:ea:21:3a:ca:05:f5:27:7a:60:62:
                    7a:5c:30:3b:aa:76:4e:0c:1c:63:ea:6a:3a:b4:a1:
                    f1:85:6a:97:92:0f:dc:16:de:11:8a:25:f3:c2:fa:
                    ec:33:a6:3b:37:72:61:d0:83:3b:0c:0c:8b:2d:b4:
                    e6:03:af:2c:96:c6:db:b1:88:a3:3f:ef:37:3a:33:
                    3c:d1:bf:7d:66:4d:02:04:b9:72:90:d5:6d:ff:cc:
                    8e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:40:30:12:E3:B6:2E:E4:18:48:8A:84:A6:7D:D0:35:5D:62:AF:4C
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/g0AwEuO2LuQYSIqEpn3QNV1ir0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:25:36:e8:8f:87:59:8a:25:db:2e:79:b6:54:09:14:1c:ba:
         b1:f9:f2:c5:dc:83:f5:33:92:9f:82:a0:c5:78:69:31:f4:b2:
         70:b0:49:8f:50:7d:67:57:8d:b9:da:80:34:a1:43:f9:39:63:
         a3:cd:0d:5e:40:2b:bf:80:a9:91:df:48:41:a2:a2:d6:0c:1c:
         bd:3a:b6:6d:1f:67:58:e3:92:51:e2:08:2f:d8:7b:39:d6:55:
         e3:99:a0:0f:b5:d7:db:62:9c:0b:f3:83:af:ca:5f:c8:33:f5:
         37:b6:4b:6e:03:56:b6:4b:19:c6:71:ba:ba:6e:52:e6:3b:9e:
         83:86:c7:4a:39:5d:89:23:a2:62:df:a4:d5:96:a2:f2:c9:e4:
         b2:7a:f6:4e:6e:93:75:6a:a8:2a:bd:94:01:ef:f3:14:ec:55:
         e3:c6:de:18:9f:26:6d:fb:23:0d:15:6c:80:ca:8f:5e:05:0f:
         dd:ab:64:52:1f:04:6b:6c:d2:5a:ed:f2:9f:52:5d:16:6d:1e:
         78:79:b2:84:e9:ed:14:64:cf:05:1c:ec:79:97:14:c3:5c:d0:
         a7:53:cd:03:7a:9f:97:61:46:3e:9a:b6:b9:46:2c:71:ad:45:
         f3:da:c4:18:49:4e:1d:16:ec:96:67:c9:da:02:74:cc:2f:36:
         e8:f2:93:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJSsA2CymfB6jky9g5kzDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDY1Y2NmMWViZTU1NWIzNzUyNzE3ZTU5NWMyNzViY2Fk
MDBiNGUwHhcNMjQwMTAyMDgyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzQwMzAxMmUzYjYyZWU0MTg0ODhhODRhNjdkZDAzNTVkNjJhZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfXKasRG5fLLzGqL3RCc8Apmd+Qx
W4oCy5c+xUii2K0FIJxt60tPcbdwJXziibf0KTRxp4FgZ9k+MRb0k++/3UmMhYt1
LUGAnjTgNspQ2JflS2WHdl6uTPvqLLY1fEcviIZjokO15BRbpkqAKlJFWVQcK6t+
hVqtl1epeZ7Ku2Po/iZSjZeg1ypc2N4FB9L3yxXI0HjUZSaUW6gORW85TqYzYLs/
lnnAfOohOsoF9Sd6YGJ6XDA7qnZODBxj6mo6tKHxhWqXkg/cFt4RiiXzwvrsM6Y7
N3Jh0IM7DAyLLbTmA68slsbbsYijP+83OjM80b99Zk0CBLlykNVt/8yOtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINAMBLjti7kGEiKhKZ90DVdYq9MMB8GA1UdIwQY
MBaAFHkGXM8evlVbN1JxfllcJ1vK0AtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTIt
MDE3ZWI1NzM1YjEzLzEvZzBBd0V1TzJMdVFZU0lxRXBuM1FOVjFpcjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9iZTRlMzEtM2RiZS00MTMwLWI0NTItMDE3ZWI1NzM1YjEz
LzEvZVFaY3p4Ni1WVnMzVW5GLVdWd25XOHJRQzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsJMA0G
CSqGSIb3DQEBCwUAA4IBAQCUJTboj4dZiiXbLnm2VAkUHLqx+fLF3IP1M5KfgqDF
eGkx9LJwsEmPUH1nV4252oA0oUP5OWOjzQ1eQCu/gKmR30hBoqLWDBy9OrZtH2dY
45JR4ggv2Hs51lXjmaAPtdfbYpwL84Ovyl/IM/U3tktuA1a2SxnGcbq6blLmO56D
hsdKOV2JI6Ji36TVlqLyyeSyevZObpN1aqgqvZQB7/MU7FXjxt4YnyZt+yMNFWyA
yo9eBQ/dq2RSHwRrbNJa7fKfUl0WbR54ebKE6e0UZM8FHOx5lxTDXNCnU80Dep+X
YUY+mra5RixxrUXz2sQYSU4dFuyWZ8naAnTMLzbo8pNg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:20 2024 by rpki-client on console-fra.rpki-client.org