Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa
File:                     Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa (raw, json)
Hash identifier:          LaTPnQzAWxIn+hyuYJPVDZt9IVyEQgcfsgo9KmGIcAM=
Subject key identifier:   4E:6E:31:75:FF:6E:7A:BC:42:DC:16:F0:9A:36:A2:41:D3:27:D4:51
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       03BEACA8
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa
Signing time:             Sat 01 Jan 2022 03:01:27 +0000
ROA not before:           Sat 01 Jan 2022 03:01:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200787
IP address blocks:        193.57.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62827688 (0x3beaca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 03:01:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e6e3175ff6e7abc42dc16f09a36a241d327d451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:2e:16:98:00:4d:df:ee:ca:c2:b8:02:0c:
                    a8:1b:b6:08:76:e1:34:74:08:c9:17:ce:3c:e4:c7:
                    40:b9:a4:ee:75:1f:8f:2a:49:c8:8a:02:bf:ee:ea:
                    45:fb:ee:e6:4e:e7:3a:04:cf:bb:0e:57:3c:98:33:
                    b4:a6:ff:a7:83:c9:1c:ec:6c:99:80:1f:59:71:0c:
                    35:49:31:99:c7:30:d1:43:ee:10:f5:e8:9a:6b:40:
                    be:ca:1b:cd:b5:c3:89:a3:bf:ec:e0:0b:f3:fb:bc:
                    93:55:d0:04:4c:56:91:84:aa:f5:5d:4a:5d:aa:3d:
                    98:3b:ae:cc:25:5d:2a:73:2b:59:f4:df:52:8e:7c:
                    30:fc:38:85:65:03:74:13:e1:12:20:87:2c:93:9d:
                    a6:e6:e4:a5:0a:71:71:e0:3d:e0:73:52:23:6c:aa:
                    3f:97:bb:c8:c7:a7:03:d3:4b:f8:8c:92:51:be:75:
                    94:16:f5:82:db:14:b3:1c:37:09:ce:1f:63:f9:15:
                    37:d9:95:98:e9:e9:8c:e5:02:92:ec:46:94:fa:bb:
                    00:d5:ed:a9:23:c5:55:8a:70:c7:39:ef:1a:d1:08:
                    62:a4:20:e5:2a:17:0b:56:a1:c2:38:40:04:e1:37:
                    23:f9:48:ab:74:70:99:d2:bc:00:be:dc:0c:58:c7:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6E:31:75:FF:6E:7A:BC:42:DC:16:F0:9A:36:A2:41:D3:27:D4:51
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/Tm4xdf9uerxC3BbwmjaiQdMn1FE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:79:2e:70:f7:c5:cf:22:90:80:2e:6a:6a:7a:22:85:e9:4a:
         e4:8c:0a:ff:ff:64:8d:2f:ad:97:13:8d:f4:86:46:f9:0b:af:
         4f:b9:f7:77:ce:c9:24:7d:83:2a:a0:40:4e:aa:cb:60:e1:54:
         ec:03:f7:6f:3f:1d:4a:2f:ff:d5:25:b4:57:c4:87:2e:8f:ab:
         49:19:70:97:8e:65:d4:59:90:2c:3d:f5:76:6e:82:97:69:e9:
         b6:81:0b:c5:00:10:a4:7e:95:5d:44:6c:04:2f:5f:ac:78:d2:
         e7:7b:8a:ed:1f:d7:52:89:55:ab:f4:d1:2f:88:fb:be:bc:48:
         8c:bc:33:ba:48:0e:90:71:07:69:df:ea:ff:b3:9c:81:01:b8:
         78:01:13:f5:b9:09:fb:5c:3e:fa:df:01:cd:44:e4:03:8e:f9:
         59:18:97:55:eb:8e:d6:16:ca:ac:03:30:2b:ec:f6:35:f2:84:
         bb:2a:1f:0f:ce:e7:34:0c:56:f9:9b:fe:97:69:4f:a7:7c:64:
         2b:3c:f9:10:74:54:65:03:99:f9:bd:b1:05:1d:52:9f:0e:65:
         c5:69:31:42:8f:bc:c3:bf:2a:7c:ae:6a:94:23:74:3e:3b:f3:
         80:c3:15:a2:67:e8:ef:f7:2c:d3:2a:f6:85:87:2a:2d:a4:2c:
         db:bf:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org