Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/fjY_4pnRZVJR5ZwhArhLD1PKtQ8.roa
File:                     fjY_4pnRZVJR5ZwhArhLD1PKtQ8.roa (raw, json)
Hash identifier:          Y39aLTYEWtn3k1hCQ6ABiw9+x0wLGCPFvddO4pfxFfc=
Subject key identifier:   7E:36:3F:E2:99:D1:65:52:51:E5:9C:21:02:B8:4B:0F:53:CA:B5:0F
Certificate issuer:       /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial:       0182112D2EF31356F4705A3E8D230571F9C0
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/fjY_4pnRZVJR5ZwhArhLD1PKtQ8.roa
Signing time:             Mon 18 Jul 2022 11:59:09 +0000
ROA not before:           Mon 18 Jul 2022 11:59:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        194.50.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:11:2d:2e:f3:13:56:f4:70:5a:3e:8d:23:05:71:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
        Validity
            Not Before: Jul 18 11:59:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e363fe299d1655251e59c2102b84b0f53cab50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9a:5e:79:b4:a0:37:89:bb:a9:63:1a:56:6d:
                    bc:61:fd:c9:85:f5:18:43:96:62:fc:20:ea:77:c3:
                    9f:50:b6:df:57:15:01:1b:bf:e8:24:80:ed:91:ca:
                    aa:41:69:96:18:02:ac:25:97:71:82:fe:52:d9:2f:
                    55:34:f7:c3:79:92:fd:d0:5a:24:37:82:ca:96:70:
                    b5:a9:40:ac:5e:f3:b7:7b:41:a5:de:55:ab:60:10:
                    35:0f:4a:4e:7b:97:c3:89:e1:b4:ae:42:0c:6a:ac:
                    4a:12:73:b1:ba:c4:db:e8:5a:b0:49:53:26:57:e1:
                    c1:8b:92:1c:38:d0:9f:c3:37:d6:85:2d:c8:d5:a1:
                    7d:50:45:7f:6f:71:7f:28:c2:15:b9:2e:b5:0c:da:
                    87:a1:f1:cb:82:07:d1:eb:20:bb:01:bf:16:47:84:
                    10:b0:1a:bf:53:b7:55:2d:01:da:74:eb:2a:24:a9:
                    55:17:49:9f:69:84:ec:47:0e:bc:25:b3:a9:05:4a:
                    16:75:68:c4:e7:a2:66:23:80:03:e5:40:6e:3c:37:
                    2b:d7:6e:05:bf:90:eb:84:d0:bd:b7:07:4d:a5:81:
                    a3:9b:02:fb:53:79:a3:98:1d:03:f3:bb:b1:dd:56:
                    7a:87:27:1f:74:68:68:30:93:c9:9a:ce:9d:51:09:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:36:3F:E2:99:D1:65:52:51:E5:9C:21:02:B8:4B:0F:53:CA:B5:0F
            X509v3 Authority Key Identifier:
                keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/fjY_4pnRZVJR5ZwhArhLD1PKtQ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:3a:5f:c2:bc:56:f7:b0:04:79:20:66:38:03:76:74:ee:
         f4:f4:d3:56:b0:57:16:b3:16:53:9a:be:f2:e6:84:48:ad:5b:
         7a:6e:a6:04:74:b6:02:17:36:1d:84:0c:24:f7:6f:e5:da:82:
         3c:39:b3:9e:a4:4b:66:00:80:e9:61:0d:f3:d9:8c:6c:69:4c:
         e3:d8:3d:4a:5b:3b:6d:1b:8b:cd:cc:e5:cf:29:3b:6e:05:47:
         7f:a2:06:f2:ad:74:bd:34:27:13:9a:cc:ee:ff:50:50:4d:05:
         17:fc:2c:76:37:9e:03:8e:54:b8:bf:a9:1d:44:43:25:dd:dd:
         c8:dd:a4:b6:84:2e:d4:ed:8c:0d:6c:c7:67:14:92:cb:0a:ca:
         c2:fa:5b:ef:5d:23:28:fd:fb:34:5c:d9:73:f0:7f:5c:0b:47:
         78:99:3c:73:4a:76:b5:0d:9d:77:67:71:46:c1:9e:7e:68:59:
         69:c3:ca:48:26:ba:b5:38:5c:6b:86:db:89:d8:2e:32:1d:79:
         4a:29:f2:7a:1c:b5:22:e9:e9:7c:2e:d8:80:27:b6:3d:fd:69:
         74:a5:8e:7b:b4:87:59:ba:55:d8:e2:77:a4:f5:7f:a5:45:a8:
         a1:75:8a:fc:66:68:b7:e0:03:9f:04:97:c6:bf:e9:f1:a7:b9:
         7e:e9:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org