Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/fU5nW_Uly9lhKFGZLa0MQwQ1KZ8.roa
File:                     fU5nW_Uly9lhKFGZLa0MQwQ1KZ8.roa (raw, json)
Hash identifier:          0HTuuIgUAawNiVGTTAgiQYuO0v5wE0JeNPC0TMWtAO8=
Subject key identifier:   7D:4E:67:5B:F5:25:CB:D9:61:28:51:99:2D:AD:0C:43:04:35:29:9F
Certificate issuer:       /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial:       0188542E10186FFB1FD6A35B7D46F77471AE
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/fU5nW_Uly9lhKFGZLa0MQwQ1KZ8.roa
Signing time:             Thu 25 May 2023 18:31:24 +0000
ROA not before:           Thu 25 May 2023 18:31:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202656
IP address blocks:        194.34.249.0/24 maxlen: 24
                          176.53.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:54:2e:10:18:6f:fb:1f:d6:a3:5b:7d:46:f7:74:71:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
        Validity
            Not Before: May 25 18:31:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7d4e675bf525cbd9612851992dad0c430435299f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:12:3f:4a:04:d7:3a:cc:77:38:f4:68:0b:ad:
                    71:11:46:89:98:45:bf:18:0f:fc:66:95:bb:06:35:
                    af:f1:1c:20:ad:46:2e:75:d3:4d:58:44:1d:c6:1c:
                    d4:87:37:27:62:78:93:62:fd:df:56:78:57:36:71:
                    11:1e:91:82:35:e6:57:90:1b:a5:10:ce:da:71:21:
                    d6:7f:6e:b5:0b:b4:04:52:93:ab:e1:44:96:1a:8e:
                    a6:ed:33:1d:72:63:05:17:3b:77:92:b7:8c:dd:fb:
                    0f:00:d6:8b:c4:7f:c4:ea:17:92:04:62:6c:d2:e2:
                    ec:f0:23:2f:ac:f1:92:1f:8f:d5:ea:26:bb:dd:f9:
                    47:dc:14:f1:55:30:2a:20:d9:8e:69:ed:da:67:69:
                    51:98:b5:5a:6d:69:a7:31:a0:3d:0e:a3:18:1d:97:
                    01:96:8e:e7:35:82:eb:91:a0:f0:d8:bd:b2:08:9c:
                    cb:a3:9f:02:09:43:81:dc:9d:94:d3:b5:2a:84:78:
                    16:33:3e:d8:a8:04:8b:05:1d:dc:d8:a5:a8:f4:c3:
                    78:92:21:18:64:a6:ee:3e:a9:b5:f4:fd:1f:2c:aa:
                    a7:3e:76:ad:37:e5:7a:e2:58:16:66:22:51:bf:b3:
                    f6:e9:20:98:ad:3d:3e:20:3e:21:66:09:7d:6a:db:
                    db:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4E:67:5B:F5:25:CB:D9:61:28:51:99:2D:AD:0C:43:04:35:29:9F
            X509v3 Authority Key Identifier:
                keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/fU5nW_Uly9lhKFGZLa0MQwQ1KZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.53.135.0/24
                  194.34.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:b4:cd:5f:75:44:6b:bd:36:53:35:3d:4f:d9:d3:8d:02:
         75:7c:66:95:e2:bb:8a:89:09:ac:35:be:2c:ad:70:b6:8e:28:
         04:cb:0c:57:68:46:63:2d:58:11:8f:2d:18:c6:71:89:78:c6:
         5a:51:b3:3a:18:7c:2c:18:33:99:2b:59:fd:b5:47:84:ec:cd:
         11:c2:ee:6b:34:67:2a:eb:8e:02:4e:ef:70:ad:ec:de:01:c3:
         39:7f:88:10:59:73:15:d3:18:a8:fb:ae:a3:7c:58:60:34:01:
         72:bc:23:1c:2d:48:b1:bf:95:df:33:b5:16:da:23:6a:f4:e7:
         6a:a7:56:80:4f:23:71:bc:2c:7e:63:d3:b9:8b:dd:60:3e:73:
         ba:cc:23:75:e0:de:7e:4e:68:c9:9d:b6:58:91:da:d5:a0:fb:
         7c:d1:c5:c8:48:62:c4:06:bc:57:78:69:e5:8e:4f:c6:7d:07:
         55:c1:d2:d8:f4:42:8d:58:61:a0:c5:85:b6:1a:16:59:7f:e2:
         18:83:b4:ea:88:9b:b3:37:d2:a7:a9:ee:6f:bf:97:d3:35:04:
         44:3c:c0:6f:2a:4b:9d:28:95:16:4c:24:e7:c5:1e:c9:bf:a7:
         9d:58:4c:64:88:20:f6:67:9f:fd:e9:fd:10:1e:88:1e:ac:d4:
         62:74:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org