Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/D0WI4_-thODyZDMIq3lDpaNJ7JM.roa
File:                     D0WI4_-thODyZDMIq3lDpaNJ7JM.roa (raw, json)
Hash identifier:          +utIAafbiTlcHTrpyTEv177LYGuVbZEkNbSPdd0ZPYY=
Subject key identifier:   0F:45:88:E3:FF:AD:84:E0:F2:64:33:08:AB:79:43:A5:A3:49:EC:93
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       018460FDEC4B31C67C2C13EF4A0FA52ED3E6
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/D0WI4_-thODyZDMIq3lDpaNJ7JM.roa
Signing time:             Thu 10 Nov 2022 10:02:44 +0000
ROA not before:           Thu 10 Nov 2022 10:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62068
IP address blocks:        109.122.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:60:fd:ec:4b:31:c6:7c:2c:13:ef:4a:0f:a5:2e:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Nov 10 10:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0f4588e3ffad84e0f2643308ab7943a5a349ec93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:b8:af:9f:61:cf:8e:14:59:9a:f9:f8:24:
                    d6:08:be:2d:b7:6c:73:44:fa:32:80:28:69:aa:2f:
                    77:ea:4e:54:e3:73:f3:fe:d1:b6:04:e7:8d:85:b9:
                    ab:54:14:d9:21:87:73:eb:a4:2b:6b:d4:e5:c7:cc:
                    85:79:b1:53:f3:58:6f:35:ee:ca:e3:57:c2:cd:92:
                    47:ca:87:ca:24:4b:c7:c5:b2:0a:2f:25:af:ac:20:
                    bf:8c:9c:78:0a:85:8c:3e:8d:c2:25:0b:c6:9d:7c:
                    d3:42:87:23:20:56:93:82:60:6b:a9:ce:fa:91:75:
                    a1:40:ec:f6:05:5e:83:cb:26:7f:98:21:99:61:f2:
                    32:b8:31:2b:42:db:ed:0e:74:e5:88:c0:18:b8:36:
                    50:9f:47:00:f1:e5:0e:78:9f:59:37:d6:88:ba:44:
                    9e:09:7a:b6:c5:f1:2f:44:40:7a:e7:36:af:8c:a4:
                    35:0f:c4:ef:02:9f:28:e8:d0:12:93:6d:dd:0d:c0:
                    15:3c:bf:c6:37:2a:e2:25:31:f6:1a:98:50:f8:4c:
                    93:99:70:05:bf:21:06:07:7e:14:f9:dc:7b:20:8e:
                    96:a0:38:b7:66:ab:af:c0:2e:dd:e4:4e:38:68:60:
                    69:48:60:0a:8a:d4:3c:49:36:15:6c:49:21:8a:9c:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:45:88:E3:FF:AD:84:E0:F2:64:33:08:AB:79:43:A5:A3:49:EC:93
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/D0WI4_-thODyZDMIq3lDpaNJ7JM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:a8:24:00:95:39:34:d2:46:3a:4a:18:80:b8:d4:f4:08:
         de:73:b4:8e:4a:81:13:ea:a4:23:94:41:66:74:b4:03:6d:e8:
         da:0a:0a:c0:c4:20:45:65:8c:38:9f:e6:76:97:26:c9:81:90:
         53:f5:5e:b9:ca:96:e2:c3:99:ca:5d:a4:56:50:06:74:a1:36:
         36:b4:26:94:8e:6d:af:eb:cb:29:51:f8:ab:5b:56:a7:2d:b5:
         30:bf:a0:05:12:a3:ea:8a:8f:a2:ce:5a:1d:3e:5e:9a:de:23:
         c3:2b:a2:da:a7:87:e0:a7:11:15:fb:b9:f2:c2:02:6b:e0:04:
         8f:ef:eb:db:2f:6c:1a:83:96:d1:7e:d2:e2:cf:62:cc:c8:1f:
         87:91:8b:2d:43:e2:fb:aa:11:ce:51:99:27:a4:27:d8:8e:7f:
         5a:9a:f0:ef:44:15:89:7e:bb:1f:29:7b:e6:b4:da:a0:4f:0f:
         45:31:4c:3b:a4:11:04:a2:16:cc:01:c1:93:a7:a5:45:51:e3:
         6c:d2:b5:66:76:a6:64:04:01:19:ab:fa:1e:b5:95:1f:27:72:
         b9:6e:0d:49:27:d3:38:12:aa:ba:e2:7a:32:cb:20:14:51:76:
         d0:50:e9:71:f9:bb:a1:cd:24:49:a0:d5:36:6f:c7:18:17:cc:
         31:db:81:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org