Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/JH8YbEBdu31v3dkaOPp_rojZPoc.roa
File:                     JH8YbEBdu31v3dkaOPp_rojZPoc.roa (raw, json)
Hash identifier:          h+AdZ077GgSm6RRzotD6XDw7uvfQYSFxImpNkE26Jeo=
Subject key identifier:   24:7F:18:6C:40:5D:BB:7D:6F:DD:D9:1A:38:FA:7F:AE:88:D9:3E:87
Certificate issuer:       /CN=a37dae80fde9de517d67c07fd2c329fb5607f6ff
Certificate serial:       0745E6B3
Authority key identifier: A3:7D:AE:80:FD:E9:DE:51:7D:67:C0:7F:D2:C3:29:FB:56:07:F6:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o32ugP3p3lF9Z8B_0sMp-1YH9v8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/JH8YbEBdu31v3dkaOPp_rojZPoc.roa
Signing time:             Sat 01 Jan 2022 02:57:55 +0000
ROA not before:           Sat 01 Jan 2022 02:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211895
IP address blocks:        188.239.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122021555 (0x745e6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a37dae80fde9de517d67c07fd2c329fb5607f6ff
        Validity
            Not Before: Jan  1 02:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=247f186c405dbb7d6fddd91a38fa7fae88d93e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:da:58:93:ad:f9:a7:2e:d6:45:13:01:00:7a:
                    2a:d4:a2:04:f9:d6:08:4f:57:30:14:ab:0a:46:ee:
                    36:b5:36:49:fb:12:e3:e7:d6:82:38:6b:80:09:9f:
                    b8:68:8c:49:60:c5:2c:8d:8f:4d:d0:4f:2b:f7:a7:
                    4f:6c:63:53:ca:48:43:2a:c3:14:0d:cc:8a:b9:19:
                    06:da:d6:a5:7c:33:14:a0:90:b6:3b:9a:c9:4e:9f:
                    95:a0:22:4b:5c:c6:68:d3:45:a7:c1:3a:42:9b:fa:
                    7a:b3:d5:6c:4f:17:72:d8:2c:7c:5d:03:2a:3f:cc:
                    d5:84:e6:1d:e8:4c:1c:64:2b:06:54:bd:ca:aa:19:
                    13:7e:20:82:0b:8e:bc:51:8b:da:0a:44:eb:fc:f8:
                    b1:18:2d:90:97:04:d4:83:59:8f:a7:de:42:f7:e6:
                    3f:d5:0c:4d:bc:96:6a:02:de:f3:c7:59:5a:02:92:
                    71:7f:48:ce:f9:58:13:86:20:b7:fe:fe:ac:1f:47:
                    88:3c:56:dd:9c:d5:5b:ea:9e:9c:77:09:2e:ac:f0:
                    dc:98:8b:dd:c1:1f:24:ce:04:ab:da:cd:5e:b3:35:
                    65:f6:8b:eb:3e:06:98:26:76:df:52:2b:13:aa:46:
                    5a:af:a7:99:0b:b5:3f:51:7f:e8:79:6e:b9:9b:80:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7F:18:6C:40:5D:BB:7D:6F:DD:D9:1A:38:FA:7F:AE:88:D9:3E:87
            X509v3 Authority Key Identifier:
                keyid:A3:7D:AE:80:FD:E9:DE:51:7D:67:C0:7F:D2:C3:29:FB:56:07:F6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o32ugP3p3lF9Z8B_0sMp-1YH9v8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/JH8YbEBdu31v3dkaOPp_rojZPoc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d364ae-edab-4c78-acc2-ba4b237e2867/1/o32ugP3p3lF9Z8B_0sMp-1YH9v8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.239.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:c5:01:40:cd:4b:e3:5f:13:61:99:bb:25:b6:91:6f:96:24:
         77:91:07:ec:ea:d2:81:48:68:98:13:cb:3f:ad:a7:d0:67:20:
         05:aa:24:88:90:86:ac:45:ae:e4:d0:c3:99:31:6b:40:68:58:
         53:22:51:39:da:49:1d:e1:fa:64:49:fd:74:fa:16:93:66:c3:
         ee:ee:c6:51:fa:34:97:8a:02:9b:f8:07:04:90:14:fc:74:18:
         b8:f3:7f:3f:18:6a:c0:8c:49:4e:ae:9a:5b:1a:9d:d9:6f:d5:
         90:b1:e0:06:8d:36:27:e2:fe:f1:31:5f:b4:6d:7f:d9:4b:fd:
         0b:3c:5a:98:a2:a5:19:47:ca:ef:65:48:ec:07:f3:2a:c0:c3:
         16:32:e6:ba:04:e3:66:92:13:ff:16:3a:4a:2d:d7:ce:c1:03:
         44:4e:8d:71:a0:c1:18:ec:36:1f:2a:62:90:aa:7a:ed:7f:58:
         0e:31:fe:6a:47:a2:44:69:c1:aa:af:bf:4f:f4:4f:f1:63:b0:
         45:fb:31:2d:9e:45:d4:6b:0a:6d:f0:1d:70:d9:bc:1a:45:6a:
         ad:e2:a5:40:3f:e9:f7:b1:11:d4:bd:24:77:93:84:f6:e9:04:
         8a:1b:46:be:76:bc:75:89:a1:89:09:22:52:2f:ae:c6:e0:8e:
         e9:2e:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org