Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa
File:                     CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa (raw, json)
Hash identifier:          U5DI1R6fAHFBodCSAZJSl3+ZFxS+wcWJv6ywvvGFE7A=
Subject key identifier:   0B:20:12:D9:72:2F:78:7A:71:59:40:50:51:00:E4:2D:0E:69:0C:76
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       06889C0A
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa
Signing time:             Sat 01 Jan 2022 12:56:30 +0000
ROA not before:           Sat 01 Jan 2022 12:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210718
IP address blocks:        193.105.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109616138 (0x6889c0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Jan  1 12:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b2012d9722f787a715940505100e42d0e690c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:5c:f6:42:29:36:a3:98:d2:81:69:ac:7b:
                    8f:38:99:9b:df:62:92:b9:50:79:49:a0:1b:1f:70:
                    63:72:15:a0:5c:52:c1:aa:8a:ed:26:31:70:d9:17:
                    5e:b8:80:c0:02:eb:5c:16:df:eb:e9:b4:d6:a0:ad:
                    97:e3:27:87:2d:80:20:ed:f8:17:b9:55:bd:9a:ef:
                    ce:49:ce:ab:31:a7:d9:f0:e5:62:db:66:b7:31:66:
                    dc:d1:9a:e1:ec:0f:23:95:ae:5b:1a:f3:83:07:7e:
                    03:41:69:46:60:84:ff:11:10:01:8f:49:d3:27:66:
                    eb:d9:08:f4:c4:a8:26:2b:96:bf:4c:af:55:03:54:
                    47:89:d6:9e:76:76:35:51:c4:52:98:a8:fb:24:7c:
                    33:0e:a5:39:de:cb:cb:38:28:15:78:8d:bb:e3:06:
                    d6:da:b6:d4:52:3e:24:65:18:c7:21:5d:cf:d5:a0:
                    9c:24:15:cb:b2:3b:a4:7e:ae:be:5c:37:06:a2:b0:
                    ee:c9:64:40:14:a0:d6:df:07:b8:2c:5c:b9:45:78:
                    f1:27:43:e7:64:a1:6d:50:89:2b:80:9a:97:bc:89:
                    8e:cc:01:ef:9b:19:d6:3c:d3:f1:4c:8e:de:2c:e1:
                    49:04:58:a2:2c:70:02:be:b4:f5:3b:34:ed:ae:a6:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:12:D9:72:2F:78:7A:71:59:40:50:51:00:E4:2D:0E:69:0C:76
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/CyAS2XIveHpxWUBQUQDkLQ5pDHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:f4:fb:d6:cf:65:29:0a:06:04:e7:5b:3f:fc:eb:e3:72:
         50:be:1c:77:c0:fd:a0:e9:ff:f7:54:8f:56:bc:74:91:07:26:
         ee:93:41:82:e9:10:8b:10:a2:40:d9:ab:1c:6a:1a:79:70:c0:
         d9:85:9c:93:7a:3e:7f:6d:f1:af:1e:f8:6a:43:72:fe:1f:4a:
         d6:3c:97:17:d2:a8:c3:d2:54:27:29:7e:6f:6a:2b:63:60:34:
         d8:92:7b:4b:0c:16:a0:0a:b5:4a:5a:da:51:f4:03:6e:f7:c9:
         5b:ba:da:40:c0:2e:23:f1:e2:f0:8a:b4:8e:ad:6a:58:a3:9b:
         d0:1e:cb:ca:c3:35:3c:f9:91:5a:5e:c8:1d:17:f7:f6:34:39:
         4b:d1:a1:44:2b:a6:58:27:34:fc:91:7c:83:6d:f1:54:e6:3e:
         6f:b7:78:bc:9f:c8:35:50:2c:0a:ff:78:d2:70:66:a0:42:f8:
         23:59:5d:99:74:2c:a8:88:16:62:11:ae:53:2f:9d:26:22:c9:
         f3:5c:78:50:62:77:28:23:c3:22:41:58:32:ef:96:f1:df:1f:
         39:7b:20:3a:04:7c:f4:d7:6a:30:24:4c:d5:57:5d:45:35:bc:
         b4:23:35:29:0c:1e:71:65:20:11:75:e7:b2:74:80:3d:22:32:
         d2:83:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org