Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/mYVp49ahtxwdd9OIzZumIstES_I.roa
File:                     mYVp49ahtxwdd9OIzZumIstES_I.roa (raw, json)
Hash identifier:          QXi8XBI9vD/PqOfBVLEBOntS8yWm1yxPozN06mOklBg=
Subject key identifier:   99:85:69:E3:D6:A1:B7:1C:1D:77:D3:88:CD:9B:A6:22:CB:44:4B:F2
Certificate issuer:       /CN=79065ccf1ebe555b3752717e595c275bcad00b4e
Certificate serial:       0187864B680C6B77C9AA5652AAF8047CA8F0
Authority key identifier: 79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/mYVp49ahtxwdd9OIzZumIstES_I.roa
Signing time:             Sat 15 Apr 2023 19:01:41 +0000
ROA not before:           Sat 15 Apr 2023 19:01:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        194.59.9.0/24 maxlen: 24
                          194.59.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:86:4b:68:0c:6b:77:c9:aa:56:52:aa:f8:04:7c:a8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79065ccf1ebe555b3752717e595c275bcad00b4e
        Validity
            Not Before: Apr 15 19:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=998569e3d6a1b71c1d77d388cd9ba622cb444bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:b7:15:43:03:c3:54:b5:d7:4d:d6:bd:f5:
                    18:84:d0:72:45:b4:84:05:4e:37:da:48:61:90:cc:
                    a4:eb:25:83:d1:df:27:32:86:54:7a:a2:89:0a:b5:
                    fe:a7:b7:80:5b:92:74:d5:1b:d4:cd:2e:65:4b:6c:
                    18:06:59:08:20:39:26:c0:32:1f:bc:46:8d:5e:c9:
                    5d:aa:77:db:82:16:63:b2:49:f6:4b:2b:ba:2c:8e:
                    70:24:3f:9a:61:c1:8e:2e:bc:2e:96:0e:d1:e1:14:
                    56:1f:08:cf:da:a6:1d:83:43:82:60:49:0a:fc:af:
                    a4:be:4e:b5:e6:4f:26:90:5d:d9:68:0b:56:45:b8:
                    2d:ea:26:c9:54:22:6e:e1:29:1b:95:9c:ee:38:bd:
                    94:25:65:3f:d9:ba:29:66:a5:a2:58:dd:14:4b:f0:
                    85:02:e0:15:c0:d6:f7:64:c3:61:d8:e6:3c:27:ea:
                    f9:1a:a0:f3:b7:bd:e2:75:95:33:f1:93:1f:2b:bc:
                    20:c2:c9:1d:b1:75:9a:7c:88:32:21:04:4a:6d:50:
                    2f:0b:e6:9e:d7:3b:26:ef:c5:c0:5b:0c:10:5e:6f:
                    60:0c:e2:d0:ab:98:02:2c:75:42:95:e3:7f:79:ef:
                    e2:47:5b:72:05:2d:e3:82:ec:f3:27:68:d7:45:f2:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:85:69:E3:D6:A1:B7:1C:1D:77:D3:88:CD:9B:A6:22:CB:44:4B:F2
            X509v3 Authority Key Identifier:
                keyid:79:06:5C:CF:1E:BE:55:5B:37:52:71:7E:59:5C:27:5B:CA:D0:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQZczx6-VVs3UnF-WVwnW8rQC04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/mYVp49ahtxwdd9OIzZumIstES_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/be4e31-3dbe-4130-b452-017eb5735b13/1/eQZczx6-VVs3UnF-WVwnW8rQC04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:c2:f8:9c:1c:18:a6:9d:fe:5b:55:27:e4:b3:c5:84:0c:
         6a:07:0f:31:1f:17:1a:7c:0c:0e:ea:80:21:58:c7:d4:4e:e7:
         c0:0c:39:eb:e7:9e:5d:ad:6e:f6:b4:84:26:45:c8:4d:cd:a5:
         a6:b0:6b:6d:63:c5:ee:5a:da:53:12:74:19:96:92:b4:b1:0c:
         72:3f:39:70:9c:f6:6f:c0:3a:22:7a:61:39:b3:58:9f:b6:e1:
         1e:30:a4:2b:46:4e:5e:a5:ff:87:fa:af:bd:af:a4:89:23:f0:
         06:ed:bd:53:ee:43:be:2c:b3:1f:2a:1c:16:54:43:90:66:52:
         37:d3:2c:1b:a1:60:4a:d2:65:10:6c:c4:e1:ad:8f:f7:b0:ce:
         05:81:98:3c:39:ff:f5:b3:51:25:6f:21:dd:a1:c0:61:3c:d0:
         d6:ba:4c:26:41:be:ce:1d:6e:3b:6c:32:34:29:0c:84:42:01:
         c9:f1:05:6e:51:3f:32:24:3e:c6:c5:a4:0b:1f:fd:6a:0d:c5:
         ae:f0:ab:2f:36:83:0a:29:14:d0:1d:19:5c:98:6c:38:98:85:
         ba:31:4c:18:65:2c:84:82:2c:34:21:4b:ea:11:32:0b:91:10:
         fd:bb:99:87:25:14:71:b5:a5:01:78:41:47:17:1d:6c:9c:8a:
         18:59:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org