Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/cG4wfqL_MraWGi4FNSTZM8xT-0c.roa
File:                     cG4wfqL_MraWGi4FNSTZM8xT-0c.roa (raw, json)
Hash identifier:          b8/23Mn+BSwBC0LvHzmVLyf78N6v4NOaG9FmFKgzjrA=
Subject key identifier:   70:6E:30:7E:A2:FF:32:B6:96:1A:2E:05:35:24:D9:33:CC:53:FB:47
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       0688ED1D
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/cG4wfqL_MraWGi4FNSTZM8xT-0c.roa
Signing time:             Sat 01 Jan 2022 12:56:30 +0000
ROA not before:           Sat 01 Jan 2022 12:56:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212912
IP address blocks:        193.105.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109636893 (0x688ed1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Jan  1 12:56:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=706e307ea2ff32b6961a2e053524d933cc53fb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:71:73:08:66:9d:ff:12:06:d4:7f:a6:32:
                    57:50:fb:3f:d2:2d:9e:76:cf:17:44:c1:bd:e6:45:
                    e8:17:22:f6:f0:e3:e6:43:c3:df:df:84:af:ed:a6:
                    97:88:3a:71:86:1a:65:43:d7:4b:43:7c:c9:32:76:
                    14:6a:3e:92:de:81:7c:dd:28:6c:61:b3:31:ee:9f:
                    4b:a8:32:fb:88:7a:b3:2c:76:32:e9:4c:6a:54:e7:
                    cf:e3:da:32:50:da:0b:a3:4a:65:2e:f2:96:b4:61:
                    94:95:39:ae:6f:a2:f7:4f:8d:7c:6d:c1:fd:30:bb:
                    59:16:7a:ce:ab:e8:2a:be:de:15:91:91:46:7c:a6:
                    70:6f:fc:45:b7:46:d7:8e:c2:7a:52:cc:68:7b:22:
                    cb:e9:d0:d3:b5:a4:2f:57:38:8a:d5:a6:b2:45:07:
                    62:c7:8f:b3:00:c6:f3:d9:8f:18:29:ad:ec:91:ef:
                    0d:37:03:1a:6c:dc:92:85:37:3e:92:c3:1a:cd:20:
                    c1:e4:2a:d4:14:fc:b3:ed:42:41:ce:a4:f2:75:0f:
                    95:0c:a9:3f:f9:ee:53:f1:04:e7:fe:86:45:e3:67:
                    ee:a5:2c:1a:c0:b4:8b:67:86:9d:fa:31:c4:af:e4:
                    36:b1:72:99:a0:87:78:b2:2f:a0:14:80:51:3a:32:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6E:30:7E:A2:FF:32:B6:96:1A:2E:05:35:24:D9:33:CC:53:FB:47
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/cG4wfqL_MraWGi4FNSTZM8xT-0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f4:60:6c:da:3d:33:22:6f:66:32:66:b5:c6:31:15:20:e2:
         9a:c9:7e:63:46:81:ec:84:ec:10:e0:31:f5:c8:7f:3c:dc:9a:
         36:fb:e6:d0:6d:65:a4:b3:81:04:9f:75:df:8c:63:da:05:5a:
         3f:c5:c2:2e:43:a5:51:65:56:16:66:84:29:83:ab:32:3d:8d:
         2e:64:85:a5:b6:2f:8b:eb:d7:01:cc:0c:05:ad:0a:c8:b7:81:
         df:96:3f:49:e5:a0:a0:be:2d:a9:42:31:dd:31:7e:0e:f0:66:
         94:9c:40:45:ba:00:f9:bd:69:7d:c8:51:24:75:9d:9d:cb:e3:
         24:e6:f7:11:b0:c3:ea:6b:56:92:77:3f:c5:12:34:a8:d1:6b:
         92:7f:90:cd:2c:45:7b:7b:fa:a0:a4:3e:8d:6e:9e:4a:42:07:
         53:18:42:cf:62:dd:eb:d4:0a:5a:ae:aa:b2:46:e7:4e:cf:46:
         cb:74:f7:cc:03:52:36:1a:19:50:ed:19:d1:77:5c:15:79:da:
         4a:07:3b:c4:59:ff:f5:0c:b5:99:d5:1f:8d:43:7a:0b:d1:0d:
         ed:fb:b2:e2:72:7f:13:fa:86:77:a3:d7:71:98:87:e5:5c:ff:
         2b:cc:d6:a2:64:a7:b8:51:3c:10:bb:9f:d0:65:15:5e:a9:d1:
         e1:6c:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org