Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/ZmUVh3r-bJ0J_wA9se0aQMfBdLs.roa
File:                     ZmUVh3r-bJ0J_wA9se0aQMfBdLs.roa (raw, json)
Hash identifier:          6GBmn2fcqgRg7Ar1z0Dy6vcRDW/y2PSIDH0guIJkS3M=
Subject key identifier:   66:65:15:87:7A:FE:6C:9D:09:FF:00:3D:B1:ED:1A:40:C7:C1:74:BB
Certificate issuer:       /CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Certificate serial:       01856CB85274BE96E1027E72D4681DF05257
Authority key identifier: 4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/ZmUVh3r-bJ0J_wA9se0aQMfBdLs.roa
Signing time:             Sun 01 Jan 2023 09:44:57 +0000
ROA not before:           Sun 01 Jan 2023 09:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43754
IP address blocks:        31.216.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:52:74:be:96:e1:02:7e:72:d4:68:1d:f0:52:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f51f8c5d5086854b6cbffac01a2647068421e81
        Validity
            Not Before: Jan  1 09:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=666515877afe6c9d09ff003db1ed1a40c7c174bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:e5:68:a4:84:1f:5f:fd:31:6f:58:da:91:
                    6d:69:7c:d6:1c:49:17:3f:d8:49:09:81:aa:bc:22:
                    dc:93:2e:ad:86:9b:95:8c:6e:72:16:ad:f4:f4:1a:
                    7a:1a:99:a3:49:38:c6:1d:96:a4:50:83:40:5d:a2:
                    74:ed:7d:b3:47:75:a5:6b:f5:47:29:56:5f:fe:73:
                    1d:8d:44:4b:cd:20:b8:ea:ed:23:a6:00:d4:98:8d:
                    b7:42:8d:3c:10:5a:33:4a:f5:52:50:76:50:f6:da:
                    fc:5b:67:c8:44:6a:7b:9b:7f:fb:dc:da:25:b7:3b:
                    70:ac:bb:1f:e9:ee:2b:e2:7a:98:1b:4f:e9:7d:ec:
                    7e:07:54:0b:eb:86:dc:00:1e:d9:ac:25:7d:25:7c:
                    0d:fd:04:be:bc:e0:48:f0:2f:58:c7:c4:af:4b:6d:
                    01:0c:6b:f5:19:06:46:09:60:9e:47:91:18:56:da:
                    62:6b:6e:b0:3c:4c:bc:1e:8d:17:f4:3c:a6:11:b5:
                    7c:48:4c:a9:a5:41:fd:18:54:cf:4b:0a:ce:44:20:
                    ce:1e:c3:0b:e2:11:35:65:2a:f9:fc:3f:f2:ab:d5:
                    c8:38:22:0e:bb:cc:b4:2c:6b:b9:58:66:c9:6e:a0:
                    cb:b0:06:13:d7:96:d5:8d:54:94:38:86:55:54:94:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:65:15:87:7A:FE:6C:9D:09:FF:00:3D:B1:ED:1A:40:C7:C1:74:BB
            X509v3 Authority Key Identifier:
                keyid:4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/ZmUVh3r-bJ0J_wA9se0aQMfBdLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/T1H4xdUIaFS2y_-sAaJkcGhCHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.216.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:fc:bd:65:52:c5:0f:0a:e9:e7:32:e2:3a:ea:15:e4:0c:5c:
         bb:e4:af:cb:6d:8c:23:24:0f:a6:0d:9e:c3:1f:6c:99:40:a2:
         ca:e4:73:08:77:b5:cb:4b:7a:b1:15:dc:bb:b9:80:00:00:bb:
         48:0f:cb:1e:61:14:82:74:7f:82:71:42:21:b6:9e:8a:44:f6:
         c3:ec:e3:65:42:2b:69:c8:e6:f5:d3:e5:85:a1:bd:87:c7:41:
         10:4f:4b:6f:71:dc:ff:78:41:65:2a:a8:11:31:5c:4d:97:10:
         06:6c:dd:b6:93:dd:87:13:be:e2:34:59:ce:99:96:ce:3e:a0:
         5f:04:21:2c:d9:55:9f:6a:10:59:46:52:be:4d:e7:60:24:f0:
         98:db:39:76:5f:f9:f7:41:94:2a:af:34:38:75:e3:07:e8:85:
         57:15:5d:0f:74:7d:21:df:80:f3:e0:16:68:60:33:6a:d6:b9:
         3c:22:2c:cc:24:ce:7a:57:e7:91:03:a9:02:32:2b:2b:1e:1f:
         26:0e:f3:b0:5b:4d:2f:08:22:55:4b:65:e0:2f:92:d1:10:e7:
         6e:5b:b5:d4:ec:a4:7b:3d:c0:76:e6:cf:5b:af:0e:dc:20:7d:
         51:8a:80:e1:19:78:17:a6:0c:79:a2:84:aa:c4:f0:7a:0a:df:
         e2:6f:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:50 2024 by rpki-client on console-fra.rpki-client.org