Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/vV9htMAR4eS9tGwvxks9ncIvTd8.roa
File:                     vV9htMAR4eS9tGwvxks9ncIvTd8.roa (raw, json)
Hash identifier:          xAd7ivgY3msaKWqHQyWOHKU2IdasbcLByjCQlOppB1o=
Subject key identifier:   BD:5F:61:B4:C0:11:E1:E4:BD:B4:6C:2F:C6:4B:3D:9D:C2:2F:4D:DF
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       0185C70FCB5A7614A53E4C62FF38E802EFAB
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/vV9htMAR4eS9tGwvxks9ncIvTd8.roa
Signing time:             Wed 18 Jan 2023 22:46:19 +0000
ROA not before:           Wed 18 Jan 2023 22:46:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        194.50.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c7:0f:cb:5a:76:14:a5:3e:4c:62:ff:38:e8:02:ef:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Jan 18 22:46:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bd5f61b4c011e1e4bdb46c2fc64b3d9dc22f4ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0b:94:1b:f4:de:1e:82:dd:9d:7b:d4:d7:26:
                    89:3a:02:e1:11:b5:51:5f:22:ef:34:c6:cd:cd:59:
                    15:cd:f5:4f:52:33:f6:e4:c1:43:a8:54:b8:77:c2:
                    33:32:08:5b:c7:32:8f:74:7c:bb:13:5e:65:ce:43:
                    db:5f:19:a4:7a:7e:8d:0d:b9:4e:41:1e:93:7c:f8:
                    5a:30:ad:0c:35:ae:91:d6:9f:52:03:da:35:05:c2:
                    44:78:a3:cf:8d:a3:3f:5d:18:a6:39:2b:46:5f:4b:
                    56:9a:de:a0:fd:94:13:d3:2a:a5:a6:8f:9d:da:25:
                    50:9d:43:3b:95:51:b5:c8:ec:6c:36:e4:9a:f9:fb:
                    61:e3:89:36:f6:59:a3:9f:b2:27:94:f6:23:f0:6b:
                    ca:7a:45:77:37:55:ef:79:74:39:c6:04:1f:07:df:
                    63:e8:3b:93:3e:8d:dc:93:af:f1:06:6e:1b:d9:3d:
                    3d:70:d9:57:ff:0b:bd:03:13:83:2d:1c:56:e2:4a:
                    b0:c0:4f:b7:db:af:b0:7f:15:35:81:2b:1c:62:54:
                    e3:3a:a9:12:b0:88:82:1d:0b:59:09:ad:e1:4e:33:
                    0c:c8:54:9a:77:6d:57:18:44:6a:8f:eb:18:b8:d2:
                    49:38:33:69:0a:45:12:f3:32:0a:e2:5d:16:f6:c7:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5F:61:B4:C0:11:E1:E4:BD:B4:6C:2F:C6:4B:3D:9D:C2:2F:4D:DF
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/vV9htMAR4eS9tGwvxks9ncIvTd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:57:25:da:4d:16:92:a0:1a:50:12:ea:cf:f9:6f:4a:35:0f:
         7a:a0:d4:9c:15:f1:b7:06:5c:ff:38:8b:e1:87:12:53:d9:3f:
         c3:9b:14:bb:55:fe:57:3a:2e:28:cb:be:54:c2:2e:63:e5:6c:
         60:d5:3a:dc:cd:36:38:a4:23:15:33:80:a4:96:c1:46:13:9a:
         55:df:b9:08:51:94:cd:ad:3a:ed:6e:1e:5c:9c:f5:fd:e2:0d:
         65:74:98:40:e2:f3:99:ff:39:22:84:a3:55:60:1b:40:04:29:
         45:94:26:4c:03:2a:17:83:38:82:c7:55:36:f4:68:9c:49:38:
         2c:65:e5:8e:a0:b7:72:a9:64:50:c9:2b:bf:13:44:c2:b2:1a:
         bb:fd:bc:1d:4d:6d:0b:8d:d3:99:8b:10:b6:3e:d2:a4:29:5f:
         be:ad:21:bc:9a:a4:92:de:1b:8b:48:c8:92:40:3f:98:80:ad:
         86:55:4a:0e:75:ef:22:ff:c1:d4:3d:61:91:c5:26:21:11:ae:
         ce:79:bf:5e:fe:0e:8a:65:74:78:53:b0:9f:0c:e3:67:10:b6:
         c9:d8:5c:63:ab:86:37:df:69:b1:78:9e:28:15:7f:83:8e:ad:
         1e:90:0b:82:09:e8:91:25:be:eb:ef:e0:d7:6e:01:5d:00:f8:
         ab:5e:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:46 2024 by rpki-client on console-ams.rpki-client.org