Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DwTBgcMOMOdFPh4UirLGygvPUjc.roa
File:                     DwTBgcMOMOdFPh4UirLGygvPUjc.roa (raw, json)
Hash identifier:          UbmT4HCYX6GL2vs6oruPenh6SywzrmJa7LpFZnBCa1E=
Subject key identifier:   0F:04:C1:81:C3:0E:30:E7:45:3E:1E:14:8A:B2:C6:CA:0B:CF:52:37
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       018572E83C279B5A9A17BBC2276278564C6E
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DwTBgcMOMOdFPh4UirLGygvPUjc.roa
Signing time:             Mon 02 Jan 2023 14:35:00 +0000
ROA not before:           Mon 02 Jan 2023 14:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202428
IP address blocks:        94.100.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:3c:27:9b:5a:9a:17:bb:c2:27:62:78:56:4c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  2 14:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f04c181c30e30e7453e1e148ab2c6ca0bcf5237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:c1:e1:3a:8a:35:f4:73:ce:eb:2f:28:fb:
                    45:a6:1d:a3:a2:7d:b2:29:4f:b5:33:92:1c:8d:03:
                    7f:53:26:83:f0:3c:0f:7e:79:ec:a2:e0:5c:15:18:
                    02:e2:b3:6d:e1:93:0b:09:a3:c8:fb:db:85:c4:9d:
                    ed:d9:0a:78:87:fc:0f:41:1c:ca:7c:e5:bc:e8:61:
                    ee:17:02:62:42:7e:2b:f2:26:0e:64:f7:ec:4a:c2:
                    c9:19:8e:a2:3f:95:bd:42:2a:31:84:fb:9c:38:c2:
                    0f:2c:00:81:a4:33:55:f3:7d:94:de:e0:e0:f8:11:
                    8d:01:b3:4e:60:5a:21:7c:14:4d:cb:b2:f9:1a:cc:
                    94:82:e8:24:83:74:e5:a7:35:07:4f:c6:c7:4d:7d:
                    d9:dc:0a:4e:f8:d4:35:76:73:5e:7e:b8:eb:7b:e2:
                    e9:6d:79:0f:69:36:96:34:c3:a0:b3:4c:a6:7f:ec:
                    7f:1c:e3:df:8b:37:03:11:5e:ec:bd:fb:66:3f:ff:
                    b1:68:ef:99:25:4e:b1:48:0e:f1:ea:56:06:42:27:
                    82:17:f5:b7:98:d2:85:82:29:11:d6:ea:86:aa:88:
                    9c:79:53:35:a3:f6:c4:26:e6:ba:9e:aa:e4:68:97:
                    45:0b:b0:20:94:3e:72:ab:72:d0:38:4b:b4:f7:2c:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:04:C1:81:C3:0E:30:E7:45:3E:1E:14:8A:B2:C6:CA:0B:CF:52:37
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/DwTBgcMOMOdFPh4UirLGygvPUjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.100.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:28:ae:74:fc:4d:12:85:36:e5:ac:7f:e0:4a:a9:c1:e0:6e:
         91:ea:71:97:8b:c8:19:61:2a:a6:27:30:35:cd:09:33:a5:96:
         fd:08:20:ba:8a:5b:e3:ba:60:49:0a:2d:74:db:19:06:97:64:
         4c:79:66:60:59:f8:52:3a:19:95:8d:02:c7:83:3d:b4:7d:2d:
         99:ff:d6:a0:66:fa:56:df:2a:29:a0:76:0c:bb:60:b4:4a:ec:
         a0:a9:5b:ac:f4:55:0f:fb:4c:a7:67:15:26:5e:49:b3:a4:22:
         b6:04:e4:c4:7e:0a:49:06:65:b0:65:82:eb:b9:84:1b:fd:b2:
         b9:37:b1:71:58:ad:a2:f3:5f:67:45:5e:ea:2c:3b:d0:f5:62:
         e8:d3:40:28:46:f2:4f:36:e6:20:84:99:1d:87:7c:f9:06:31:
         86:7d:ae:a5:4d:c6:44:c7:4b:13:f3:08:ba:27:4b:b1:22:71:
         04:93:f7:01:f9:ef:08:63:cf:e9:a3:05:6a:3c:9f:66:b8:1b:
         dc:3c:c0:67:b9:76:25:ee:59:12:79:a0:4e:d5:31:4d:34:15:
         7f:49:a4:5f:17:09:5d:6d:d7:6f:7e:0f:b9:5c:1d:2a:b8:ba:
         bb:5d:97:00:b5:97:81:aa:14:d6:e0:dc:3a:20:1e:83:c7:d6:
         56:73:17:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 08:34:53 2023 by rpki-client on console-fra.rpki-client.org