Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/6Enj3KL88H9Xz1sf_SKEQLNBJZQ.roa
File:                     6Enj3KL88H9Xz1sf_SKEQLNBJZQ.roa (raw, json)
Hash identifier:          Z6f0uHr8fXdvmBoWYbOgK/6m7Xrx557hOYbpkVJsQfs=
Subject key identifier:   E8:49:E3:DC:A2:FC:F0:7F:57:CF:5B:1F:FD:22:84:40:B3:41:25:94
Certificate issuer:       /CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
Certificate serial:       018571552DBE90955716F4EE97A40ED21FFC
Authority key identifier: 12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/6Enj3KL88H9Xz1sf_SKEQLNBJZQ.roa
Signing time:             Mon 02 Jan 2023 07:14:45 +0000
ROA not before:           Mon 02 Jan 2023 07:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        188.93.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:55:2d:be:90:95:57:16:f4:ee:97:a4:0e:d2:1f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1212f3d60b208cff09d05e49c6be4b16e8acd768
        Validity
            Not Before: Jan  2 07:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e849e3dca2fcf07f57cf5b1ffd228440b3412594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3f:71:99:cc:e2:cf:19:7e:b4:04:1d:41:51:
                    a0:9d:2f:1a:4c:e9:a9:58:df:ee:a6:a7:85:56:f0:
                    4f:32:0d:d9:36:c8:10:22:da:03:6d:91:80:57:41:
                    6d:86:6f:42:c6:7c:b2:17:fb:da:d6:6c:48:e1:d1:
                    95:15:7a:87:a3:35:4a:06:3f:ae:4e:22:41:38:31:
                    b0:0c:cb:ea:56:66:27:ba:93:52:2b:24:ec:60:64:
                    8f:40:2b:b3:63:bb:84:f1:35:ad:10:9a:65:bb:0e:
                    2b:8a:ed:db:55:25:79:e0:60:7a:7a:d8:bf:4f:9e:
                    2a:3f:1f:cf:1d:dd:70:05:3f:e3:3c:59:53:57:61:
                    1a:03:3d:2e:67:5a:dd:6f:e5:d7:58:a6:09:a0:2a:
                    7c:cb:fd:48:b4:94:81:a2:d9:f7:8c:02:17:71:84:
                    55:cc:45:9a:53:53:8e:1b:f9:6d:a8:4c:ec:2b:30:
                    cb:3b:79:24:0f:b4:42:10:10:72:8c:36:a4:7f:33:
                    67:cc:0e:8d:c7:3b:4d:8f:c5:55:e6:ab:43:9b:b0:
                    eb:9b:99:ef:af:83:5d:32:4b:30:cc:f0:11:f7:b0:
                    ea:7b:63:37:ac:58:98:c8:23:11:c5:84:3f:3f:ed:
                    3f:52:86:31:31:c6:4b:b6:9d:ff:25:3f:29:b1:9f:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:49:E3:DC:A2:FC:F0:7F:57:CF:5B:1F:FD:22:84:40:B3:41:25:94
            X509v3 Authority Key Identifier:
                keyid:12:12:F3:D6:0B:20:8C:FF:09:D0:5E:49:C6:BE:4B:16:E8:AC:D7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhLz1gsgjP8J0F5Jxr5LFuis12g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/6Enj3KL88H9Xz1sf_SKEQLNBJZQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/58bc3b-7f2e-422b-b3a0-ab6fe6868a45/1/EhLz1gsgjP8J0F5Jxr5LFuis12g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:56:a3:52:ae:99:1d:85:56:72:8e:6d:ce:af:85:2e:57:0a:
         73:ea:5f:9e:7b:9f:8d:e3:b7:b4:c1:f0:f2:e5:0a:b6:60:40:
         a6:6a:5a:43:85:70:98:42:89:d7:61:c8:90:7e:c0:3f:49:46:
         14:96:e4:24:26:ed:20:0e:41:5c:c8:81:0f:25:54:be:6d:77:
         74:cd:5c:c6:be:fc:17:ef:7e:95:f0:9c:59:c4:a7:e5:7b:c7:
         86:5d:df:5a:71:be:94:a4:f7:8e:4b:40:1e:7d:d3:b6:b0:bb:
         6f:94:14:e5:24:4e:d0:7c:11:de:2d:b4:af:51:0f:0b:a4:fb:
         3a:6c:ed:8f:3b:00:02:57:c4:fe:96:cc:80:51:5a:96:d1:e0:
         71:8a:77:c7:3a:a4:69:a9:70:78:32:94:78:48:0f:d6:9b:61:
         cd:dd:c8:10:e1:9a:38:bb:0d:9e:62:38:fa:c7:b2:b5:91:41:
         29:58:4b:71:89:3f:83:b4:01:00:30:89:21:05:a1:92:36:94:
         28:fb:c9:04:80:df:71:2f:a2:31:86:71:3f:b4:af:d4:58:14:
         f5:7d:1b:af:0f:5b:9f:27:70:25:b7:2c:e6:1b:9d:3b:5e:5d:
         52:69:79:09:97:fe:50:96:a8:06:2d:8c:18:96:a8:db:49:fc:
         ae:c9:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 13 09:49:20 2023 by rpki-client on console-ams.rpki-client.org