Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa
File:                     H_WWP7E5zagh_X5vltScpa3jVw8.roa (raw, json)
Hash identifier:          mr8ZWrdDNN0cjrH6yk50fuvDOE9js5ZKFdrEfDNWQJc=
Subject key identifier:   1F:F5:96:3F:B1:39:CD:A8:21:FD:7E:6F:96:D4:9C:A5:AD:E3:57:0F
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0A3AA8A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa
Signing time:             Fri 08 Apr 2022 14:11:18 +0000
ROA not before:           Fri 08 Apr 2022 14:11:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        89.116.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171616423 (0xa3aa8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Apr  8 14:11:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ff5963fb139cda821fd7e6f96d49ca5ade3570f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2a:f1:2c:06:9d:67:13:3c:64:f2:2d:98:b3:
                    ae:2b:84:4e:39:f6:82:ab:40:47:69:be:a2:79:96:
                    e0:1a:3b:04:93:a8:7b:5b:ee:6b:67:bd:60:b3:e3:
                    00:db:30:c1:ea:fe:9f:e0:0e:cb:36:11:ae:29:f8:
                    53:ec:27:87:b6:19:36:84:ab:5b:48:eb:bb:a6:15:
                    2b:3e:9e:dd:2e:a4:32:f4:84:53:f3:4a:c3:b8:14:
                    e9:c1:71:db:fa:f9:7f:6f:bb:ea:a8:e0:b7:4e:21:
                    97:e4:3d:7c:b0:3d:b3:27:35:99:fa:3d:48:11:56:
                    06:d2:4d:a2:2d:50:01:a3:86:f9:2c:8f:33:66:fb:
                    79:0c:f5:e9:ea:53:d3:3c:4d:f3:35:7a:ab:a6:ca:
                    3f:6e:5a:e3:86:98:e3:2d:5d:fa:ff:d8:0b:f2:93:
                    b7:8e:63:3a:ce:1a:c9:47:ac:46:5e:1b:cb:4b:1e:
                    f7:e3:6d:8b:60:47:69:cd:79:93:c5:a3:cf:94:f3:
                    dc:db:c9:ad:f4:4e:7f:0f:15:b7:5c:0d:5b:b7:6e:
                    50:69:ce:0c:28:d0:26:58:8c:18:29:ea:65:75:1a:
                    71:2a:98:b2:b9:c6:c2:38:f8:a8:9d:32:dd:66:34:
                    8e:d3:00:3a:7b:9d:32:7b:7b:4c:aa:f3:ae:e9:8f:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F5:96:3F:B1:39:CD:A8:21:FD:7E:6F:96:D4:9C:A5:AD:E3:57:0F
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/H_WWP7E5zagh_X5vltScpa3jVw8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:66:88:34:48:dd:29:5e:c8:be:ba:6b:ea:0b:b1:7a:43:6c:
         72:41:1c:7c:65:1b:20:41:14:62:aa:98:83:d2:71:61:dd:42:
         9f:dd:e6:25:a5:24:38:ed:e3:97:d2:56:8d:ad:cb:b7:00:50:
         5c:2a:c1:5d:70:92:d1:2d:55:29:38:4c:ae:04:59:76:0d:45:
         49:de:75:fa:6a:f9:9d:43:e3:60:f1:ad:49:04:9d:71:67:e8:
         d4:a5:4a:58:b7:24:9f:f0:a8:47:89:34:33:75:db:73:84:ec:
         6f:95:26:05:db:66:aa:bd:72:af:29:ce:ef:78:c3:e0:cb:5c:
         ae:55:75:66:28:ff:78:03:1e:98:95:8b:68:8c:81:6a:4e:72:
         ac:c1:b3:6b:1e:43:d8:33:cb:a3:3c:ad:f7:6b:c6:f4:7a:0e:
         08:af:f2:4d:87:ce:92:e6:ac:65:38:91:e9:e3:d2:c9:a2:e2:
         9c:b9:89:7d:1b:47:49:18:99:ec:ef:2e:23:08:57:8d:03:34:
         db:fd:09:7c:75:43:62:45:76:86:f3:14:6d:c9:d5:ed:3e:b6:
         b8:53:c1:3a:34:50:7d:d8:ca:d8:3f:0f:f7:94:16:05:d8:95:
         0d:5f:a0:97:16:ad:b0:2c:81:a6:7a:a4:5b:f3:eb:55:7c:d6:
         16:59:17:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org