Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/wSmsfBOFRrBc8b7XJoKA3MfYS0E.roa
File:                     wSmsfBOFRrBc8b7XJoKA3MfYS0E.roa (raw, json)
Hash identifier:          5rpCDeAUNqLvD/uGNGNQX/XGw8fWGgilzxrcJu/SHFI=
Subject key identifier:   C1:29:AC:7C:13:85:46:B0:5C:F1:BE:D7:26:82:80:DC:C7:D8:4B:41
Certificate issuer:       /CN=73dfeea9c7de246e6d7d1a507406285b226f9286
Certificate serial:       01856D8AF27B7A95EF0BDC54EF9B4AA36515
Authority key identifier: 73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/wSmsfBOFRrBc8b7XJoKA3MfYS0E.roa
Signing time:             Sun 01 Jan 2023 13:35:00 +0000
ROA not before:           Sun 01 Jan 2023 13:35:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61101
IP address blocks:        185.41.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:f2:7b:7a:95:ef:0b:dc:54:ef:9b:4a:a3:65:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dfeea9c7de246e6d7d1a507406285b226f9286
        Validity
            Not Before: Jan  1 13:35:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c129ac7c138546b05cf1bed7268280dcc7d84b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:84:8b:d3:27:db:5c:4f:c9:55:fe:c2:eb:
                    95:ed:f1:c5:f6:98:d2:3f:dd:29:fc:3d:48:8b:6b:
                    21:f7:95:35:00:53:8e:cf:55:19:6d:a0:6f:31:88:
                    cc:04:b3:f6:22:50:9f:bb:7c:c9:63:76:e2:82:0e:
                    02:f8:09:e9:7f:c6:76:36:ce:79:59:c8:48:b4:eb:
                    d7:6f:53:51:d0:a1:fb:a4:de:0c:07:bd:1c:9d:a4:
                    cb:c0:af:d4:85:e8:f0:85:f5:d7:5f:cc:45:e0:7d:
                    5f:ff:c0:13:75:54:d8:2f:24:2d:39:07:6f:6b:66:
                    9a:90:5c:85:99:d4:b5:85:fc:84:65:f7:bd:71:49:
                    80:16:a1:18:a7:bf:74:50:d2:03:a2:d5:aa:a7:49:
                    3f:e5:d1:7b:99:89:78:3f:e5:e4:b9:91:3c:d4:c8:
                    db:b4:7e:74:8a:7b:dd:76:fd:c6:62:19:14:c4:7b:
                    03:6e:66:04:52:c6:cd:5e:97:ee:ce:a3:56:af:7d:
                    6f:01:98:36:44:75:bb:b9:3e:d3:95:1c:f5:e3:2f:
                    0a:92:ee:eb:42:c6:6d:7c:0a:3a:b5:8b:cc:ea:41:
                    5d:11:28:02:b8:18:33:7b:4f:77:ed:e7:6a:30:b8:
                    1f:61:bb:b6:87:7e:9e:90:37:6a:4e:3c:61:86:bf:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:AC:7C:13:85:46:B0:5C:F1:BE:D7:26:82:80:DC:C7:D8:4B:41
            X509v3 Authority Key Identifier:
                keyid:73:DF:EE:A9:C7:DE:24:6E:6D:7D:1A:50:74:06:28:5B:22:6F:92:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9_uqcfeJG5tfRpQdAYoWyJvkoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/wSmsfBOFRrBc8b7XJoKA3MfYS0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/9c0a7e-9963-4c0d-94ac-446d0a7e9404/1/c9_uqcfeJG5tfRpQdAYoWyJvkoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.41.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ae:20:9a:ee:56:34:76:ec:1d:2e:d7:12:79:bc:63:9d:47:
         72:1d:cf:e1:cb:36:52:d1:9d:24:7b:66:ec:55:59:b2:3d:ac:
         3a:2a:c1:db:b9:17:69:31:48:88:43:32:80:bb:bb:2d:59:4e:
         44:e3:64:06:0d:e9:e8:fc:d7:f0:d3:6c:98:69:fa:dc:0f:c0:
         8f:10:6d:10:72:64:82:aa:f3:1b:a5:14:19:0a:ab:fc:08:97:
         76:b4:42:5c:64:2b:33:21:87:75:9f:f2:2c:37:5e:9f:62:15:
         52:13:8b:3e:63:83:d0:db:9e:bc:a3:da:18:d4:07:13:bc:be:
         a0:e8:62:79:44:84:fb:f8:62:f7:e0:10:0e:73:9f:08:06:c0:
         7d:72:1c:97:bd:ba:b4:c1:6b:0e:c0:03:ac:72:f0:c2:53:cb:
         63:64:2c:7d:51:65:28:6c:bb:23:75:06:bb:7a:0f:3a:6c:c9:
         01:22:dd:1f:5b:51:fc:fb:ab:b2:e4:a7:50:67:8e:c9:01:76:
         6d:d2:98:03:4f:09:86:eb:c0:66:52:87:e3:4d:b5:d4:57:7d:
         a8:f6:bc:b7:84:0d:d2:d2:40:7f:bb:7d:53:e9:7d:98:a6:81:
         41:58:7a:4f:85:25:42:cd:ce:49:99:fa:4f:d6:f3:b4:58:f4:
         5a:8d:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:46 2024 by rpki-client on console-ams.rpki-client.org