Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/xT6iGOFF4MzV2iiQSol1fyp6xiw.roa
File:                     xT6iGOFF4MzV2iiQSol1fyp6xiw.roa (raw, json)
Hash identifier:          EIADR1ivf9QUbGsbI/n9Zy2reamK0S2NybegEAQ/Mfw=
Subject key identifier:   C5:3E:A2:18:E1:45:E0:CC:D5:DA:28:90:4A:89:75:7F:2A:7A:C6:2C
Certificate issuer:       /CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
Certificate serial:       29295A0D
Authority key identifier: 3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/xT6iGOFF4MzV2iiQSol1fyp6xiw.roa
Signing time:             Sat 01 Jan 2022 09:58:17 +0000
ROA not before:           Sat 01 Jan 2022 09:58:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61364
IP address blocks:        185.9.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690575885 (0x29295a0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3daa5d24dcbe5862e82e4f5cd5134f9e5c23c258
        Validity
            Not Before: Jan  1 09:58:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c53ea218e145e0ccd5da28904a89757f2a7ac62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:67:71:0f:f9:b3:44:4e:d5:52:de:a2:52:
                    4f:5c:fc:0a:6a:26:1b:4c:1c:99:30:c1:5e:90:fd:
                    21:13:01:45:17:9b:ed:f7:3a:4d:fa:0c:44:74:fd:
                    98:a5:f1:bc:b4:02:12:5f:22:cb:e3:8b:f0:58:88:
                    a5:1b:a9:eb:51:45:57:2f:42:b3:37:65:ed:b0:16:
                    fc:c2:39:59:ac:8b:ee:79:44:2c:8c:33:79:d5:3e:
                    a7:9e:da:18:f9:cd:55:de:9e:8f:20:6d:a9:d1:29:
                    08:aa:94:e3:7c:02:3c:aa:5a:84:c6:79:4c:ee:d6:
                    8d:f8:a5:b3:b0:22:6b:10:5a:74:20:13:77:ab:8e:
                    4a:86:b6:b7:be:ef:4e:aa:2d:fa:e5:8e:90:2a:a7:
                    21:16:5d:b8:f5:c2:ab:5e:bc:f0:cf:6c:d3:7f:86:
                    cc:d8:40:e7:5d:4a:b9:b5:62:91:1c:b0:58:04:f5:
                    d0:0c:dc:6f:c5:aa:e5:b3:d0:8d:ac:ea:8f:be:89:
                    cd:9c:c2:46:21:e7:0f:a5:31:12:20:b8:87:61:79:
                    c5:94:e9:2f:de:68:d2:87:fc:42:59:94:33:06:a3:
                    1c:19:2a:34:21:e9:33:70:c6:bf:b8:06:4e:cb:84:
                    53:98:1c:d8:44:d4:95:61:6e:ee:85:59:c0:14:a8:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3E:A2:18:E1:45:E0:CC:D5:DA:28:90:4A:89:75:7F:2A:7A:C6:2C
            X509v3 Authority Key Identifier:
                keyid:3D:AA:5D:24:DC:BE:58:62:E8:2E:4F:5C:D5:13:4F:9E:5C:23:C2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PapdJNy-WGLoLk9c1RNPnlwjwlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/xT6iGOFF4MzV2iiQSol1fyp6xiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/07ac9f-7b4c-44fd-964e-c3409ec161b7/1/PapdJNy-WGLoLk9c1RNPnlwjwlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.9.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:ce:7b:c8:a6:14:94:76:40:07:26:1e:7f:d6:7a:0c:e5:45:
         18:0f:8f:2d:85:ee:46:95:20:99:d3:1e:ba:6a:d2:87:c1:24:
         32:e1:6b:a3:c7:67:a3:27:9a:60:4e:9d:d1:d1:69:10:d6:65:
         a8:6f:3d:96:81:b2:7d:f2:bd:b2:8a:a9:a5:b3:2c:6d:65:e8:
         6a:2c:f7:c7:91:68:18:cb:3a:04:de:a9:d5:ff:85:a0:63:d5:
         da:71:95:10:e7:6a:93:2e:43:15:d6:7a:29:a7:12:b2:34:9d:
         3f:d7:98:28:da:b1:0b:cb:51:eb:f9:4e:f2:28:72:a9:20:5b:
         c5:54:8c:95:b7:22:8a:9a:0b:34:41:94:22:ee:33:5e:32:8d:
         e0:31:16:67:a5:29:f9:1d:16:e6:24:1e:85:8d:68:d7:81:c7:
         03:e7:68:e0:90:fb:83:43:28:3d:26:e6:a6:a7:ad:f7:2a:63:
         d9:a2:aa:20:e6:f1:e7:9f:6b:2f:34:9a:07:b6:9a:cc:8c:55:
         46:7f:47:0e:41:2f:4a:be:2b:cb:8c:ef:22:0c:62:50:2f:c8:
         b9:d8:d5:39:55:aa:1b:e0:3b:0a:40:47:6b:9e:5f:08:10:68:
         9b:81:70:7f:aa:f3:3a:fc:25:b6:05:fb:6e:62:5e:03:e6:4c:
         be:91:e0:21
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKSlaDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZGFhNWQyNGRjYmU1ODYyZTgyZTRmNWNkNTEzNGY5ZTVjMjNjMjU4MB4XDTIyMDEw
MTA5NTgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzUzZWEyMThlMTQ1
ZTBjY2Q1ZGEyODkwNGE4OTc1N2YyYTdhYzYyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOGUZ3EP+bNETtVS3qJST1z8CmomG0wcmTDBXpD9IRMBRReb
7fc6TfoMRHT9mKXxvLQCEl8iy+OL8FiIpRup61FFVy9Cszdl7bAW/MI5WayL7nlE
LIwzedU+p57aGPnNVd6ejyBtqdEpCKqU43wCPKpahMZ5TO7Wjfils7AiaxBadCAT
d6uOSoa2t77vTqot+uWOkCqnIRZduPXCq1688M9s03+GzNhA511KubVikRywWAT1
0Azcb8Wq5bPQjazqj76JzZzCRiHnD6UxEiC4h2F5xZTpL95o0of8QlmUMwajHBkq
NCHpM3DGv7gGTsuEU5gc2ETUlWFu7oVZwBSoFRsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTFPqIY4UXgzNXaKJBKiXV/KnrGLDAfBgNVHSMEGDAWgBQ9ql0k3L5YYugu
T1zVE0+eXCPCWDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BhcGRKTnktV0dMb0xrOWMxUk5Qbmx3andsZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvMDdhYzlmLTdiNGMtNDRmZC05NjRlLWMzNDA5ZWMxNjFiNy8x
L3hUNmlHT0ZGNE16VjJpaVFTb2wxZnlwNnhpdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
MDdhYzlmLTdiNGMtNDRmZC05NjRlLWMzNDA5ZWMxNjFiNy8xL1BhcGRKTnktV0dM
b0xrOWMxUk5Qbmx3andsZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkJLDANBgkqhkiG9w0BAQsFAAOC
AQEAVc57yKYUlHZAByYef9Z6DOVFGA+PLYXuRpUgmdMeumrSh8EkMuFro8dnoyea
YE6d0dFpENZlqG89loGyffK9soqppbMsbWXoaiz3x5FoGMs6BN6p1f+FoGPV2nGV
EOdqky5DFdZ6KacSsjSdP9eYKNqxC8tR6/lO8ihyqSBbxVSMlbciipoLNEGUIu4z
XjKN4DEWZ6Up+R0W5iQehY1o14HHA+do4JD7g0MoPSbmpqet9ypj2aKqIObx559r
LzSaB7aazIxVRn9HDkEvSr4ry4zvIgxiUC/IudjVOVWqG+A7CkBHa55fCBBom4Fw
f6rzOvwltgX7bmJeA+ZMvpHgIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:43 2024 by rpki-client on console-ams.rpki-client.org