Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa
File:                     cUVtfwqVquwHXe5I4JNbQrYcgVo.roa (raw, json)
Hash identifier:          ZmxylQruETwLENAliG0u8KxPCeGHw/j08XgSWsYOkt0=
Subject key identifier:   71:45:6D:7F:0A:95:AA:EC:07:5D:EE:48:E0:93:5B:42:B6:1C:81:5A
Certificate issuer:       /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial:       018722A6E8177CD0397C15241E876EECE931
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa
Signing time:             Mon 27 Mar 2023 10:39:36 +0000
ROA not before:           Mon 27 Mar 2023 10:39:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        89.42.110.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:22:a6:e8:17:7c:d0:39:7c:15:24:1e:87:6e:ec:e9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
        Validity
            Not Before: Mar 27 10:39:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71456d7f0a95aaec075dee48e0935b42b61c815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2b:bb:44:63:b6:0b:d2:b3:c4:53:bd:e4:fb:
                    7c:ab:7c:8f:51:50:5c:1b:a5:01:1a:6a:85:36:60:
                    41:c7:89:ab:54:49:4c:fd:9b:2c:80:a8:a3:00:41:
                    de:67:7d:37:ad:9f:7c:58:49:96:83:0f:87:57:34:
                    83:4d:05:da:46:ff:bc:98:28:57:c9:fd:5f:3a:ed:
                    59:c5:bd:8b:26:a4:55:42:07:93:bb:84:7c:fa:d4:
                    ee:55:a6:d3:22:89:e7:f7:69:44:6d:62:81:1c:83:
                    6a:f2:ff:17:89:0e:a7:fb:fe:1d:42:dc:e2:e9:d9:
                    bc:55:82:de:03:1d:70:92:e1:02:6f:1c:2d:87:7a:
                    64:c9:18:2f:28:c5:d3:1f:15:f4:d3:ec:16:31:ab:
                    79:50:91:cf:13:1a:57:6c:a2:a0:3e:b6:cd:c5:c0:
                    7d:32:7a:7c:50:08:ca:d2:15:52:8d:64:23:02:fe:
                    4a:c9:a1:8a:90:48:96:f0:64:80:d0:75:44:e6:8b:
                    81:cc:0f:8b:a5:4a:4f:fc:96:db:bb:bc:bd:ac:5f:
                    d1:2e:b5:71:80:d6:1a:1a:35:2c:51:3f:1b:3e:b5:
                    0f:d5:f3:ec:6a:ca:e1:d0:e6:71:ab:3d:29:a1:6c:
                    4f:f8:a6:04:ea:c2:be:94:58:45:ab:2a:63:6d:43:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:45:6D:7F:0A:95:AA:EC:07:5D:EE:48:E0:93:5B:42:B6:1C:81:5A
            X509v3 Authority Key Identifier:
                keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/cUVtfwqVquwHXe5I4JNbQrYcgVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.42.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:fd:89:e6:36:27:2f:fc:3d:73:98:35:52:b6:48:47:ef:03:
         07:96:b9:ea:71:70:00:a2:4f:01:a7:e9:13:14:d6:77:0e:d1:
         6c:dc:b9:b2:bb:a7:59:a2:6a:bd:7a:3a:f2:5d:54:6e:44:9d:
         ab:36:77:da:8c:c2:bb:e0:30:cf:ad:1b:15:85:f8:82:78:dd:
         3d:e5:2a:03:35:fa:a6:7e:7a:92:8e:97:31:68:e3:6c:57:08:
         63:2a:3c:4b:20:6f:f9:a8:82:32:81:5d:15:7a:c2:f0:1a:db:
         2d:97:4f:40:20:4e:c6:7f:9f:3a:5a:fe:d0:71:3b:98:52:64:
         5f:82:dd:2f:88:57:9c:e3:63:61:fb:44:f5:b2:e5:30:ae:3e:
         33:89:10:dd:cd:ec:fc:e2:0f:24:39:75:5f:a7:87:67:0b:69:
         83:fa:20:40:44:80:14:c9:6b:e7:0a:47:48:1e:70:aa:85:82:
         cf:e8:52:e3:f6:a3:72:ef:4b:95:75:bd:c5:a6:dd:1b:97:60:
         be:af:27:57:0a:bb:26:6a:95:22:79:2e:4f:d9:fa:c6:13:07:
         d1:24:bb:bb:09:ef:0a:1b:42:7a:49:e4:ce:1f:a6:88:5f:60:
         9a:cf:1d:43:05:38:92:3c:aa:a8:4d:38:d9:f2:fd:3b:d6:ad:
         45:4e:c4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org