Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/iSnsQyR_1_SadSPZh6qh4OejHMU.roa
File:                     iSnsQyR_1_SadSPZh6qh4OejHMU.roa (raw, json)
Hash identifier:          DwF8jk8wU/7erpR06a9/WemXAcXxONV2uE8MUGO5jFg=
Subject key identifier:   89:29:EC:43:24:7F:D7:F4:9A:75:23:D9:87:AA:A1:E0:E7:A3:1C:C5
Certificate issuer:       /CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
Certificate serial:       01856D2F538E42EA4AF60B8939C2253CC2BE
Authority key identifier: C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/iSnsQyR_1_SadSPZh6qh4OejHMU.roa
Signing time:             Sun 01 Jan 2023 11:54:56 +0000
ROA not before:           Sun 01 Jan 2023 11:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50340
IP address blocks:        185.81.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:2f:53:8e:42:ea:4a:f6:0b:89:39:c2:25:3c:c2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66048e9d22d671ee72eb373ae356bd5ad7d664f
        Validity
            Not Before: Jan  1 11:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8929ec43247fd7f49a7523d987aaa1e0e7a31cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:ed:57:e0:b3:c3:8b:f4:ed:7e:ea:8e:7f:
                    8e:85:3e:1b:70:74:14:57:9a:08:cd:b5:04:73:b2:
                    31:f7:f8:68:7d:03:46:f7:56:ad:7a:bc:a3:af:81:
                    03:98:bf:5d:be:2a:23:9a:5b:2b:e8:03:d7:c9:72:
                    63:b5:af:c7:63:cf:9c:76:80:fd:74:4e:e6:ea:7b:
                    c0:da:80:dd:c4:a1:8f:39:b3:1c:58:d8:e5:b2:72:
                    7d:f7:ca:c6:29:2f:73:db:e7:1c:7c:b8:00:ab:62:
                    4f:3c:73:79:68:3c:cc:27:64:60:fc:e6:8c:92:5b:
                    7f:e9:03:4c:2f:16:b2:99:94:60:b5:9e:bc:7a:e1:
                    20:ca:74:d0:ac:fc:9d:de:bf:b9:0b:09:18:6b:74:
                    bd:08:e4:2f:28:ab:94:b9:a5:a9:78:7c:9e:d6:67:
                    04:bb:8b:8e:52:a8:c5:00:7b:53:d9:ab:4d:49:14:
                    0f:0f:8e:9b:5d:cc:9e:c3:89:f8:eb:e4:f2:08:93:
                    8c:26:71:d0:1b:45:03:6c:ac:a9:8f:2a:38:37:71:
                    23:26:7d:7f:3c:bc:08:1a:25:b5:a3:aa:b8:8d:59:
                    fd:63:29:69:ed:e3:b0:18:30:ad:a3:68:4d:9a:a4:
                    a0:35:12:7c:0c:ef:9e:2a:9a:51:c1:48:c3:4f:91:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:29:EC:43:24:7F:D7:F4:9A:75:23:D9:87:AA:A1:E0:E7:A3:1C:C5
            X509v3 Authority Key Identifier:
                keyid:C6:60:48:E9:D2:2D:67:1E:E7:2E:B3:73:AE:35:6B:D5:AD:7D:66:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmBI6dItZx7nLrNzrjVr1a19Zk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/iSnsQyR_1_SadSPZh6qh4OejHMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8b6817-9b04-4fa2-88ae-4eb89ee02f33/1/xmBI6dItZx7nLrNzrjVr1a19Zk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:75:3c:c6:59:3e:f6:0c:12:8c:92:dc:34:32:30:17:48:2b:
         00:01:c1:c9:20:a3:eb:e0:88:09:37:af:d8:0e:4d:c5:b6:46:
         52:01:48:8c:9f:27:10:70:f4:32:99:01:73:5e:31:1c:d6:ca:
         d8:82:7f:d8:74:44:aa:d1:6f:c3:c8:8b:91:45:5c:03:64:01:
         c5:8d:aa:7a:1c:84:31:7a:22:55:0a:53:6a:49:d9:99:12:d6:
         8b:a9:24:06:b1:ed:09:54:80:a0:d9:9b:b5:14:08:50:69:14:
         ac:21:55:ec:07:19:51:36:74:27:1b:ce:e3:24:33:ae:68:dd:
         bd:bb:41:c1:13:35:37:ce:9b:cb:05:ac:8b:9d:45:44:4c:58:
         17:ce:6a:b4:29:3d:81:db:ec:c3:16:0b:85:47:00:55:74:90:
         3d:7e:ee:bf:b8:16:6b:1d:e1:c7:e0:3e:bf:6d:57:44:57:3e:
         3d:b1:87:31:d2:1e:8e:ed:80:e6:41:4c:19:e7:76:89:5c:5f:
         18:15:61:52:df:39:58:22:86:97:27:de:95:a3:c2:2a:58:06:
         ed:f4:a3:7e:c4:0d:af:fa:1b:c1:a8:6b:5d:67:6e:41:64:a5:
         93:46:33:81:eb:5a:5f:74:7d:37:81:7b:07:2b:02:59:a4:b6:
         24:f3:de:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtL1OOQupK9guJOcIlPMK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjA0OGU5ZDIyZDY3MWVlNzJlYjM3M2FlMzU2YmQ1YWQ3
ZDY2NGYwHhcNMjMwMTAxMTE1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTI5ZWM0MzI0N2ZkN2Y0OWE3NTIzZDk4N2FhYTFlMGU3YTMxY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR7tV+Czw4v07X7qjn+OhT4bcHQU
V5oIzbUEc7Ix9/hofQNG91ateryjr4EDmL9dviojmlsr6APXyXJjta/HY8+cdoD9
dE7m6nvA2oDdxKGPObMcWNjlsnJ998rGKS9z2+ccfLgAq2JPPHN5aDzMJ2Rg/OaM
klt/6QNMLxaymZRgtZ68euEgynTQrPyd3r+5CwkYa3S9COQvKKuUuaWpeHye1mcE
u4uOUqjFAHtT2atNSRQPD46bXcyew4n46+TyCJOMJnHQG0UDbKypjyo4N3EjJn1/
PLwIGiW1o6q4jVn9Yylp7eOwGDCto2hNmqSgNRJ8DO+eKppRwUjDT5GYYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIkp7EMkf9f0mnUj2YeqoeDnoxzFMB8GA1UdIwQY
MBaAFMZgSOnSLWce5y6zc641a9WtfWZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1CSTZkSXRaeDduTHJOenJqVnIxYTE5Wms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YjY4MTctOWIwNC00ZmEyLTg4YWUt
NGViODllZTAyZjMzLzEvaVNuc1F5Ul8xX1NhZFNQWmg2cWg0T2VqSE1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YjY4MTctOWIwNC00ZmEyLTg4YWUtNGViODllZTAyZjMz
LzEveG1CSTZkSXRaeDduTHJOenJqVnIxYTE5Wms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVFEMA0G
CSqGSIb3DQEBCwUAA4IBAQAZdTzGWT72DBKMktw0MjAXSCsAAcHJIKPr4IgJN6/Y
Dk3FtkZSAUiMnycQcPQymQFzXjEc1srYgn/YdESq0W/DyIuRRVwDZAHFjap6HIQx
eiJVClNqSdmZEtaLqSQGse0JVICg2Zu1FAhQaRSsIVXsBxlRNnQnG87jJDOuaN29
u0HBEzU3zpvLBayLnUVETFgXzmq0KT2B2+zDFguFRwBVdJA9fu6/uBZrHeHH4D6/
bVdEVz49sYcx0h6O7YDmQUwZ53aJXF8YFWFS3zlYIoaXJ96Vo8IqWAbt9KN+xA2v
+hvBqGtdZ25BZKWTRjOB61pfdH03gXsHKwJZpLYk896U
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:35 2024 by rpki-client on console-ams.rpki-client.org