Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/CJ1sYxPdp1S0AMMu4qVLt4lJ3gA.roa
File:                     CJ1sYxPdp1S0AMMu4qVLt4lJ3gA.roa (raw, json)
Hash identifier:          5Zd6CawZ8SJFy3LrFvuBZo2wk4H1TZGaTfbrVBqIc44=
Subject key identifier:   08:9D:6C:63:13:DD:A7:54:B4:00:C3:2E:E2:A5:4B:B7:89:49:DE:00
Certificate issuer:       /CN=014318684fcad9f86a21c45d0c7b88166590a8b9
Certificate serial:       01856E26524FAD5228B8013A5BE533CA784B
Authority key identifier: 01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/CJ1sYxPdp1S0AMMu4qVLt4lJ3gA.roa
Signing time:             Sun 01 Jan 2023 16:24:43 +0000
ROA not before:           Sun 01 Jan 2023 16:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42720
IP address blocks:        194.110.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:52:4f:ad:52:28:b8:01:3a:5b:e5:33:ca:78:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014318684fcad9f86a21c45d0c7b88166590a8b9
        Validity
            Not Before: Jan  1 16:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=089d6c6313dda754b400c32ee2a54bb78949de00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:05:02:5b:54:38:73:83:bf:0f:20:20:1d:
                    f3:3a:d4:45:20:1c:eb:76:ad:53:51:27:fb:0b:eb:
                    6d:f2:17:3c:f8:8e:97:fc:fe:a0:16:e4:0a:ba:86:
                    28:8f:89:13:06:87:39:2e:6f:9c:55:1b:cb:e9:8a:
                    61:d4:21:56:3a:33:d3:eb:3f:d6:8f:c8:56:79:ab:
                    ef:7a:e4:8d:c3:fb:9b:81:c4:cd:1c:ed:06:92:99:
                    28:44:03:4e:1c:7d:cd:95:e5:75:56:f4:cd:23:34:
                    bd:2b:63:13:28:e1:1b:00:09:bd:5e:50:81:e4:fb:
                    6a:76:01:7a:df:aa:ea:16:bc:c6:97:73:6e:57:00:
                    79:12:fb:ac:1e:6d:fa:ef:fa:ea:31:c1:55:71:f9:
                    64:8c:92:1b:c7:1a:4c:cd:7b:fc:4d:18:7a:f8:a1:
                    d6:a0:08:03:20:bc:64:a7:36:07:11:d1:f0:2b:70:
                    27:60:69:36:08:e9:90:08:ee:0d:5a:6e:34:ff:d3:
                    54:ce:86:75:ec:ec:60:30:a4:ce:f4:81:43:3c:64:
                    f5:fd:f4:99:c5:7f:1f:47:87:09:1d:82:a8:54:7a:
                    ff:93:13:e3:e9:68:e9:b0:14:bc:49:e4:8a:d4:73:
                    90:ef:6c:f4:14:54:aa:50:91:6e:25:2d:97:2f:52:
                    0d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9D:6C:63:13:DD:A7:54:B4:00:C3:2E:E2:A5:4B:B7:89:49:DE:00
            X509v3 Authority Key Identifier:
                keyid:01:43:18:68:4F:CA:D9:F8:6A:21:C4:5D:0C:7B:88:16:65:90:A8:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUMYaE_K2fhqIcRdDHuIFmWQqLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/CJ1sYxPdp1S0AMMu4qVLt4lJ3gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/549312-22ea-42ee-9812-ebc4c2976e45/1/AUMYaE_K2fhqIcRdDHuIFmWQqLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:5a:ce:2a:d2:d6:ab:00:33:1d:c4:c4:97:18:a1:12:ee:
         0b:ca:d7:c1:95:59:8c:87:81:b3:c5:fc:b2:18:6a:56:c5:07:
         5d:5e:f9:45:35:f9:c0:4d:dc:bf:6b:b8:7a:86:0e:f5:29:d3:
         7c:6a:02:4b:5b:45:57:66:fa:15:7a:70:35:62:af:6e:b3:2c:
         cb:e8:78:f1:a5:14:0a:39:3a:47:da:6a:b4:1b:99:27:25:2a:
         bb:30:e3:ae:6e:26:af:05:5b:3c:ca:46:0e:b1:ba:36:06:4c:
         db:1b:0e:a3:82:54:de:35:72:4f:54:55:73:f2:da:4b:d5:75:
         ff:0a:56:c3:48:1d:86:65:8b:db:b9:ad:70:c7:a2:2b:e3:66:
         d8:06:84:6c:c5:ab:e6:f8:c9:f5:74:63:40:00:24:8c:8a:3b:
         8e:66:ca:b8:e5:4f:ec:25:20:8b:52:82:b4:f5:6b:52:4c:73:
         1b:d3:d9:25:82:d4:87:b3:e5:0f:34:d9:02:4e:50:6a:01:3b:
         6e:57:6a:b0:82:13:02:d2:e7:1e:17:e6:ea:3c:4e:2d:30:6a:
         b1:85:11:30:e3:82:b8:76:28:c9:5a:09:2d:f7:67:fa:a3:37:
         1b:88:63:1e:aa:20:ab:90:81:00:43:df:ef:16:3e:3f:b6:fb:
         af:25:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:43 2023 by rpki-client on console-ams.rpki-client.org