Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa
File:                     Rl4JoInyc2xj9ScEDlWfh8puisM.roa (raw, json)
Hash identifier:          WUzIjeUs+1sGKiXikRlLiwxkSCKbhuAibScjgEr/vGQ=
Subject key identifier:   46:5E:09:A0:89:F2:73:6C:63:F5:27:04:0E:55:9F:87:CA:6E:8A:C3
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       01856D8AF00CEAB6411BDD24BC9663D22134
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa
Signing time:             Sun 01 Jan 2023 13:34:59 +0000
ROA not before:           Sun 01 Jan 2023 13:34:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42088
IP address blocks:        185.212.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:f0:0c:ea:b6:41:1b:dd:24:bc:96:63:d2:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 13:34:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=465e09a089f2736c63f527040e559f87ca6e8ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d2:fd:9e:37:05:1f:d5:03:6c:eb:ac:6f:8a:
                    4d:a0:77:86:c5:63:e5:3e:e3:75:94:68:e2:3f:e8:
                    e7:d9:ba:06:a3:35:dd:18:e1:a9:df:7b:a2:b0:b7:
                    bc:3a:48:80:d3:a3:c6:1e:4e:55:53:1e:fb:3f:42:
                    f9:1d:32:56:6e:c0:8f:c7:4b:85:d7:24:d3:64:31:
                    d8:b6:72:f7:77:50:aa:2a:11:2d:96:63:53:49:1e:
                    7c:83:a0:8f:34:ff:25:ac:34:f8:56:04:3f:a0:e3:
                    8f:0b:8c:13:ab:0b:12:4f:81:05:8d:9d:a9:c0:4d:
                    f4:60:46:b8:bc:4c:f8:bf:4c:29:21:a4:db:14:62:
                    ce:5d:10:6c:10:e3:b6:7b:60:9d:62:f7:f5:cb:1a:
                    0a:c8:30:71:61:af:7a:c7:d7:f7:79:dc:96:45:79:
                    27:95:86:4f:2b:7e:0a:af:3f:86:a9:a0:da:93:d3:
                    96:2c:08:15:8e:e6:1f:47:40:86:b5:9e:f9:42:9e:
                    85:20:0a:2d:dc:1a:25:a5:54:ec:a6:14:10:3f:e0:
                    70:63:10:9e:bd:3f:ea:56:a9:cc:c7:a2:14:60:01:
                    9b:6b:eb:24:65:cd:8f:88:48:d9:be:9f:d8:b4:4d:
                    ad:6f:3a:e6:d5:bf:c2:af:81:c0:76:01:83:ed:19:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5E:09:A0:89:F2:73:6C:63:F5:27:04:0E:55:9F:87:CA:6E:8A:C3
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Rl4JoInyc2xj9ScEDlWfh8puisM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:31:db:19:df:46:0a:6c:36:7a:b8:fb:91:c1:4e:0c:b9:eb:
         1c:e9:b0:39:57:dc:46:a0:bb:95:37:85:28:88:14:8a:78:8a:
         8e:0d:c0:a7:f6:fd:2c:bc:2d:76:93:5a:07:81:8c:c8:83:42:
         a8:08:ee:06:90:64:dd:54:a5:2e:97:5f:65:a7:4b:71:3e:73:
         71:01:3b:3b:03:b4:b7:8e:e4:22:1d:85:98:15:4b:3d:5c:e3:
         bc:4e:3d:0b:bd:88:53:23:0d:c0:dc:48:1a:0d:6a:2f:f9:ad:
         50:52:f3:cf:f5:67:29:f8:80:24:ff:dd:5c:df:3c:d7:e9:9f:
         42:41:58:e2:02:74:f7:92:bb:f2:e1:fe:a9:96:b8:92:86:be:
         67:62:ab:df:d7:f0:60:d7:b7:16:3a:b7:1d:43:eb:f3:af:21:
         da:00:90:aa:25:6a:b5:49:13:00:45:f9:8a:fa:18:b7:de:40:
         07:72:e1:71:2a:a2:1d:34:c5:f5:2f:b1:04:80:b1:fc:9f:ea:
         1f:3c:ac:d8:e6:8c:67:60:0c:0f:36:de:ce:de:9b:9b:48:40:
         91:e6:60:f3:73:f9:a5:26:b1:dc:7f:e3:60:30:74:85:b9:9c:
         b6:f0:9c:9d:8b:cb:67:36:ff:e9:fd:81:c7:1e:c4:5d:c6:75:
         b0:36:8c:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtivAM6rZBG90kvJZj0iE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZGZlZWE5YzdkZTI0NmU2ZDdkMWE1MDc0MDYyODViMjI2
ZjkyODYwHhcNMjMwMTAxMTMzNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjVlMDlhMDg5ZjI3MzZjNjNmNTI3MDQwZTU1OWY4N2NhNmU4YWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitL9njcFH9UDbOusb4pNoHeGxWPl
PuN1lGjiP+jn2boGozXdGOGp33uisLe8OkiA06PGHk5VUx77P0L5HTJWbsCPx0uF
1yTTZDHYtnL3d1CqKhEtlmNTSR58g6CPNP8lrDT4VgQ/oOOPC4wTqwsST4EFjZ2p
wE30YEa4vEz4v0wpIaTbFGLOXRBsEOO2e2CdYvf1yxoKyDBxYa96x9f3edyWRXkn
lYZPK34Krz+GqaDak9OWLAgVjuYfR0CGtZ75Qp6FIAot3BolpVTsphQQP+BwYxCe
vT/qVqnMx6IUYAGba+skZc2PiEjZvp/YtE2tbzrm1b/Cr4HAdgGD7RnQOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZeCaCJ8nNsY/UnBA5Vn4fKborDMB8GA1UdIwQY
MBaAFHPf7qnH3iRubX0aUHQGKFsib5KGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlfdXFjZmVKRzV0ZlJwUWRBWW9XeUp2a29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85YzBhN2UtOTk2My00YzBkLTk0YWMt
NDQ2ZDBhN2U5NDA0LzEvUmw0Sm9JbnljMnhqOVNjRURsV2ZoOHB1aXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85YzBhN2UtOTk2My00YzBkLTk0YWMtNDQ2ZDBhN2U5NDA0
LzEvYzlfdXFjZmVKRzV0ZlJwUWRBWW9XeUp2a29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudT5MA0G
CSqGSIb3DQEBCwUAA4IBAQARMdsZ30YKbDZ6uPuRwU4Muesc6bA5V9xGoLuVN4Uo
iBSKeIqODcCn9v0svC12k1oHgYzIg0KoCO4GkGTdVKUul19lp0txPnNxATs7A7S3
juQiHYWYFUs9XOO8Tj0LvYhTIw3A3EgaDWov+a1QUvPP9Wcp+IAk/91c3zzX6Z9C
QVjiAnT3krvy4f6plriShr5nYqvf1/Bg17cWOrcdQ+vzryHaAJCqJWq1SRMARfmK
+hi33kAHcuFxKqIdNMX1L7EEgLH8n+ofPKzY5oxnYAwPNt7O3pubSECR5mDzc/ml
JrHcf+NgMHSFuZy28Jydi8tnNv/p/YHHHsRdxnWwNozk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:55 2024 by rpki-client on console-fra.rpki-client.org