Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/raHh_tGdhDzy1_IqxrYegdPBu7A.roa
File:                     raHh_tGdhDzy1_IqxrYegdPBu7A.roa (raw, json)
Hash identifier:          S5lS2eSTVQNUnjxcKMONyknzivDsIwYO3a6Y10XYxwk=
Subject key identifier:   AD:A1:E1:FE:D1:9D:84:3C:F2:D7:F2:2A:C6:B6:1E:81:D3:C1:BB:B0
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       018369B9843AD916543665D574D4D5A29221
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/raHh_tGdhDzy1_IqxrYegdPBu7A.roa
Signing time:             Fri 23 Sep 2022 09:41:49 +0000
ROA not before:           Fri 23 Sep 2022 09:41:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400799
IP address blocks:        89.116.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:69:b9:84:3a:d9:16:54:36:65:d5:74:d4:d5:a2:92:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Sep 23 09:41:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ada1e1fed19d843cf2d7f22ac6b61e81d3c1bbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:d6:76:5f:df:b0:f0:b1:62:1b:89:78:b1:
                    42:e7:5e:84:69:da:5e:42:8c:0d:a9:ee:69:27:32:
                    ee:f1:91:b5:74:34:19:90:a8:46:ac:f8:1b:4e:3d:
                    1f:b5:22:ed:2d:60:04:cf:df:5f:af:a2:e7:85:16:
                    71:b7:57:0f:79:63:78:cc:3c:76:bf:e2:9c:df:71:
                    6a:1f:4c:b5:32:d3:73:08:e5:b5:ac:48:58:e3:1a:
                    e3:46:48:f0:86:a8:f8:61:07:90:71:6b:41:f1:12:
                    42:02:79:dc:65:8e:92:84:13:4c:d1:9f:00:35:de:
                    cd:99:25:36:d4:10:f8:19:b3:72:85:4f:c6:41:44:
                    53:cf:d6:e9:9f:8d:e0:17:68:0f:be:30:07:d3:bb:
                    dc:4c:ca:46:86:a8:a7:1f:94:66:75:1e:39:7d:75:
                    90:06:db:57:e6:e8:d8:0b:00:63:6b:fa:ce:d8:a0:
                    69:81:22:f3:d9:fe:fa:03:e6:ea:a6:42:b1:84:58:
                    4a:c5:79:d1:87:ad:06:be:00:d7:9e:ec:ee:e4:15:
                    39:62:23:45:6b:e2:2c:26:4c:9a:84:ba:79:89:4d:
                    6c:3c:80:3b:8e:51:0c:62:88:d2:ca:2b:3c:4b:09:
                    ad:ea:65:f1:85:4c:51:32:65:92:f9:4e:7a:20:e2:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A1:E1:FE:D1:9D:84:3C:F2:D7:F2:2A:C6:B6:1E:81:D3:C1:BB:B0
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/raHh_tGdhDzy1_IqxrYegdPBu7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:70:8b:62:41:5e:38:b6:8d:10:90:e6:b2:98:ab:20:f7:0e:
         f0:f3:56:92:06:43:2c:85:cc:49:d9:3a:49:9e:dc:63:b7:d3:
         6d:16:12:a6:ef:fc:92:0d:f4:9b:cb:d3:28:0f:de:16:05:94:
         ee:87:6d:94:88:9b:4e:7c:95:60:50:f9:2b:53:7c:28:ef:f0:
         be:5e:8b:dd:1c:6e:d8:3d:36:9e:fc:10:22:7d:04:9b:4e:89:
         11:bd:bb:e7:34:96:9b:e3:21:f0:1a:99:ed:c4:20:b7:c2:56:
         82:37:8c:b1:8d:1e:80:30:6b:ee:38:a4:87:72:f8:40:5b:24:
         ed:4c:0c:63:65:5f:6c:b2:c2:c5:06:bd:a6:00:fb:f6:5b:06:
         e2:5f:2a:86:1c:f9:aa:7b:26:f2:a9:ca:dc:df:5e:6c:bc:74:
         23:a5:f4:37:08:86:24:7b:4e:58:10:97:9e:bd:fa:9d:ca:4b:
         09:34:6e:40:d0:b3:bd:45:c0:42:d6:5b:2e:f8:56:33:bb:ea:
         3c:90:35:27:cb:37:64:c4:3a:ca:29:2c:c6:d1:94:48:86:59:
         9c:5e:0f:91:a4:64:ee:ef:15:eb:49:53:eb:1f:bc:65:b0:fd:
         8b:b8:c9:59:ab:3a:48:a4:ad:6c:60:c7:58:23:65:ca:5b:c9:
         93:64:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org