Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/voHRK8-7WDGR_Xe3dM1ckL5YHFQ.roa
File:                     voHRK8-7WDGR_Xe3dM1ckL5YHFQ.roa (raw, json)
Hash identifier:          UC+MMxPBBxMGWvz/B498RjW0k2b6TlYticVeLyiYe+o=
Subject key identifier:   BE:81:D1:2B:CF:BB:58:31:91:FD:77:B7:74:CD:5C:90:BE:58:1C:54
Certificate issuer:       /CN=095e38af11b1fb83ed2f331e09df72ab471794e3
Certificate serial:       01856FD4E7213711FDA30D8624E019B8FCF0
Authority key identifier: 09:5E:38:AF:11:B1:FB:83:ED:2F:33:1E:09:DF:72:AB:47:17:94:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CV44rxGx-4PtLzMeCd9yq0cXlOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/voHRK8-7WDGR_Xe3dM1ckL5YHFQ.roa
Signing time:             Mon 02 Jan 2023 00:15:01 +0000
ROA not before:           Mon 02 Jan 2023 00:15:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24951
IP address blocks:        193.0.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d4:e7:21:37:11:fd:a3:0d:86:24:e0:19:b8:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095e38af11b1fb83ed2f331e09df72ab471794e3
        Validity
            Not Before: Jan  2 00:15:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be81d12bcfbb583191fd77b774cd5c90be581c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8b:59:49:58:2d:e4:8d:95:21:80:67:73:3b:
                    81:51:4b:c8:c7:31:3b:bd:50:79:98:b0:02:14:1f:
                    9c:13:6f:35:cf:e1:27:d9:9d:a4:15:fa:d4:78:5f:
                    66:33:02:6a:9e:1d:57:49:8a:70:48:80:31:c5:16:
                    19:dc:ed:5b:20:eb:ed:17:21:68:40:ed:fd:e4:ce:
                    8b:d2:85:ab:57:69:e1:08:57:22:5e:fb:1b:7d:c4:
                    d0:bc:83:17:de:8d:90:5e:25:19:86:af:57:3b:47:
                    ab:a6:73:80:8b:9c:a6:7a:f5:80:5c:b6:e9:de:59:
                    92:b0:b3:fd:22:7c:7b:2e:99:14:03:9b:65:fe:bd:
                    90:48:b4:37:79:43:76:e4:6f:50:a3:5e:c9:9c:82:
                    4f:35:bb:e9:e2:e9:57:29:62:57:12:6c:48:5a:44:
                    7f:73:f6:6b:8c:c7:12:13:e4:d5:64:bf:4f:b7:e4:
                    85:70:9d:94:ed:e3:d2:fd:cf:34:08:52:d1:e1:11:
                    ba:fa:51:a4:d3:8c:53:74:92:cc:4e:a4:32:86:9d:
                    9a:06:dd:1b:94:5f:77:cf:c0:8d:39:22:ea:d5:3f:
                    ec:73:81:32:65:53:fa:27:22:96:f1:ca:90:99:cd:
                    1c:bf:50:c8:63:5d:16:d0:4a:f2:87:ac:27:dc:f4:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:81:D1:2B:CF:BB:58:31:91:FD:77:B7:74:CD:5C:90:BE:58:1C:54
            X509v3 Authority Key Identifier:
                keyid:09:5E:38:AF:11:B1:FB:83:ED:2F:33:1E:09:DF:72:AB:47:17:94:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV44rxGx-4PtLzMeCd9yq0cXlOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/voHRK8-7WDGR_Xe3dM1ckL5YHFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ea1aa8-1cfc-488f-a4c4-fe95a3288395/1/CV44rxGx-4PtLzMeCd9yq0cXlOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:37:5d:fe:a0:30:a2:ba:66:6d:60:d4:2f:c3:e9:78:38:e5:
         2e:bc:9b:d4:4c:f3:ae:a8:aa:21:b0:3a:9a:ab:40:05:ab:91:
         3d:72:87:9d:98:d6:2e:2a:86:52:b0:47:dc:a0:25:46:f0:f1:
         fe:8f:70:02:a4:a3:65:ef:c7:ed:a7:75:33:e5:2b:25:bf:58:
         0a:36:57:fb:9d:97:e6:76:ef:d2:35:eb:64:86:bb:e2:49:e5:
         9d:a7:9c:3b:5a:66:63:47:35:b4:c2:cf:ec:9f:db:96:d0:bc:
         a1:6d:01:dc:79:f5:5c:2b:01:5a:d3:96:d4:ca:54:78:e1:03:
         72:53:de:e3:a9:91:7e:52:ef:e0:67:05:bf:2f:f4:27:f6:d4:
         f0:90:5e:84:28:1d:30:80:40:3c:f7:d6:b1:1a:b2:06:f1:a3:
         b0:0a:49:41:f1:62:8e:76:e7:d2:bd:c7:b7:7e:05:e1:d9:61:
         cc:8e:9f:dd:ba:0c:21:9d:06:6f:af:c2:1e:7f:1b:d7:6b:e9:
         02:9c:b1:20:1f:f6:7b:6c:4e:d4:82:1e:6b:5f:cc:f3:b2:44:
         1f:ec:9c:1c:e4:fa:4b:87:6e:4e:83:e7:ac:cc:97:2f:57:f3:
         b1:08:1e:72:13:d6:76:f3:26:77:98:0f:d2:f0:6d:f0:80:d4:
         95:6f:e4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:51 2024 by rpki-client on console-fra.rpki-client.org