Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/PW_OmUJrrA5gJ_-hZEr_6XMy2cY.roa
File:                     PW_OmUJrrA5gJ_-hZEr_6XMy2cY.roa (raw, json)
Hash identifier:          hza0rkS4Vfwblgz23H6p/mCVu6wTQ7qKrp247XJ5T5g=
Subject key identifier:   3D:6F:CE:99:42:6B:AC:0E:60:27:FF:A1:64:4A:FF:E9:73:32:D9:C6
Certificate issuer:       /CN=13055cde17140400a98d4be05071888d6abb12df
Certificate serial:       01857295A0FD659C6020B65C2D1156EDC7AA
Authority key identifier: 13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/PW_OmUJrrA5gJ_-hZEr_6XMy2cY.roa
Signing time:             Mon 02 Jan 2023 13:04:46 +0000
ROA not before:           Mon 02 Jan 2023 13:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        31.24.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:95:a0:fd:65:9c:60:20:b6:5c:2d:11:56:ed:c7:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13055cde17140400a98d4be05071888d6abb12df
        Validity
            Not Before: Jan  2 13:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3d6fce99426bac0e6027ffa1644affe97332d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:98:ea:3a:69:10:a9:b1:e2:8a:22:ab:49:
                    a3:42:c2:49:b8:32:55:ca:50:b6:fc:d1:5a:ed:32:
                    c0:a4:e2:a0:c7:0b:8a:77:22:59:2d:ac:83:c2:44:
                    2d:4d:c4:e9:32:f3:53:bc:6b:4b:c1:ac:56:4c:a9:
                    78:ba:93:84:86:34:cc:36:0e:16:47:01:88:33:2e:
                    ed:dc:12:79:2b:9f:dd:d7:7a:65:11:e3:13:2e:b9:
                    09:15:67:66:ae:e3:db:6b:7a:86:13:81:15:c8:9d:
                    13:1c:ac:3b:37:a5:17:f7:95:6a:28:07:a4:3b:49:
                    db:d8:46:3c:d9:42:08:51:c2:c2:2b:6d:6c:30:c3:
                    bc:d5:98:d4:97:5f:68:a3:2c:c6:6f:4b:16:fb:2d:
                    b3:68:13:f5:e0:3a:69:dc:52:fa:f6:5d:23:a8:9b:
                    aa:ab:ac:d0:1c:59:81:38:45:33:a1:c5:72:51:43:
                    69:dc:37:ea:33:47:ba:1b:1b:5f:c7:d8:f1:9f:34:
                    c0:ee:78:18:ce:a7:c9:c4:3f:53:b6:66:e0:d5:57:
                    80:90:41:35:3b:53:87:8b:68:16:4d:26:4d:21:19:
                    af:15:77:62:ba:43:94:e5:74:7f:10:ca:e2:62:6e:
                    9f:c9:8d:ee:72:88:39:3c:2e:84:71:b9:b4:c2:bf:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6F:CE:99:42:6B:AC:0E:60:27:FF:A1:64:4A:FF:E9:73:32:D9:C6
            X509v3 Authority Key Identifier:
                keyid:13:05:5C:DE:17:14:04:00:A9:8D:4B:E0:50:71:88:8D:6A:BB:12:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwVc3hcUBACpjUvgUHGIjWq7Et8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/PW_OmUJrrA5gJ_-hZEr_6XMy2cY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8a781f-ab6c-4e9b-a057-2e9ed8e74836/1/EwVc3hcUBACpjUvgUHGIjWq7Et8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.24.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:07:4a:3f:43:59:2a:ab:b2:8d:0e:ee:7a:1b:a3:01:29:ac:
         83:19:74:75:6e:82:bd:34:92:8d:20:b5:af:7e:c1:1e:9a:6e:
         c8:be:94:cf:d8:1b:3b:7e:db:1b:d2:97:22:ad:93:a4:40:43:
         34:a7:56:35:54:df:72:44:05:20:33:76:e0:53:6d:84:10:05:
         34:0f:c5:03:51:12:65:81:76:aa:5b:aa:c5:05:45:10:fd:2e:
         8c:de:05:49:d9:d9:6e:e2:05:a7:1a:be:74:52:45:9d:99:5b:
         5a:68:53:2a:64:c3:05:51:9c:d3:f0:d3:9d:06:25:8e:ca:12:
         70:ee:55:9d:6d:4d:6e:ad:7e:93:16:58:25:71:86:2b:da:1f:
         8a:40:e3:76:9b:43:88:5c:b3:ae:2e:bd:b9:0d:84:80:54:c8:
         f0:25:ab:97:ff:b0:c4:a4:f0:07:85:e6:44:2a:1f:5e:63:4e:
         3b:b4:5a:c7:dd:3e:fe:96:80:7f:f0:23:8e:67:fe:dd:eb:1e:
         cf:32:85:db:c9:80:2d:be:7f:13:8e:7a:ff:f5:af:c7:99:b1:
         5b:b0:63:04:66:28:6f:4b:2f:e7:a7:6a:52:24:f7:da:39:a9:
         27:f3:cb:38:8a:e8:52:78:47:b1:f2:6f:9b:6c:4b:32:db:c4:
         72:0f:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:23 2024 by rpki-client on console-ams.rpki-client.org