Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/n8ZdCnVjm8XBc1v-vmi9ydXiIWI.roa
File:                     n8ZdCnVjm8XBc1v-vmi9ydXiIWI.roa (raw, json)
Hash identifier:          9odUarJXoBboQe+AEAIl//wmHEL893DyAUs1gdox88Y=
Subject key identifier:   9F:C6:5D:0A:75:63:9B:C5:C1:73:5B:FE:BE:68:BD:C9:D5:E2:21:62
Certificate issuer:       /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial:       0524E2E7
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/n8ZdCnVjm8XBc1v-vmi9ydXiIWI.roa
Signing time:             Mon 21 Mar 2022 09:03:41 +0000
ROA not before:           Mon 21 Mar 2022 09:03:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140885
IP address blocks:        194.50.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86303463 (0x524e2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
        Validity
            Not Before: Mar 21 09:03:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fc65d0a75639bc5c1735bfebe68bdc9d5e22162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:d5:01:54:bc:c5:e7:40:e0:3c:0a:89:54:
                    be:b1:7c:b3:7f:40:ad:76:a3:11:ad:04:37:06:f5:
                    6c:3b:26:1a:9e:c9:58:15:af:5c:37:f1:04:ac:53:
                    4c:07:31:a3:cf:cc:9b:ba:6c:bb:12:9e:1a:9e:15:
                    75:91:4f:68:cd:f3:3d:b7:51:da:bb:89:b0:1e:e8:
                    68:f4:7f:3c:41:ad:b4:0b:c7:04:4c:97:ae:94:79:
                    3a:43:dd:97:24:2b:35:10:47:f8:64:22:98:68:10:
                    59:50:01:6b:a1:b7:7c:c8:89:6c:86:41:42:cf:9e:
                    0b:de:d1:28:8e:e7:81:d1:3b:a4:6a:fc:b0:af:5a:
                    ed:51:ae:05:45:16:c4:f3:14:51:b2:e3:e8:35:92:
                    cc:58:c3:08:d2:4a:f5:d5:f2:fb:db:5a:44:55:5e:
                    9f:bf:1d:8b:09:e2:54:6a:5a:7d:b7:07:9c:b1:b3:
                    67:23:ad:b0:8d:75:3d:58:01:65:0d:83:18:76:d4:
                    60:4f:8b:ad:0b:88:aa:d4:c6:fe:7e:cf:0c:a4:d2:
                    14:ca:be:4f:68:a1:df:1d:dd:af:2f:4d:73:30:83:
                    71:24:ec:40:98:a1:1c:9c:4d:d0:ee:c8:74:0a:e5:
                    8f:bd:f2:3e:43:2a:e9:72:0f:31:00:f4:5f:da:0b:
                    4f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:5D:0A:75:63:9B:C5:C1:73:5B:FE:BE:68:BD:C9:D5:E2:21:62
            X509v3 Authority Key Identifier:
                keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/n8ZdCnVjm8XBc1v-vmi9ydXiIWI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:ed:95:9a:f2:21:30:cc:05:66:55:91:49:a0:ed:82:d7:
         77:1a:b7:c4:4d:9a:8b:80:90:a8:f6:6f:5a:b2:75:81:ef:b9:
         49:cb:ad:4d:5d:18:14:25:a3:4b:45:1f:28:ac:b2:c0:52:64:
         96:23:de:4e:5e:d2:57:5f:ff:b8:ee:53:3c:3b:ac:18:ee:cb:
         78:1f:2b:6e:11:3a:d5:2c:58:e4:58:0d:1f:71:b9:22:57:5e:
         71:63:71:33:9c:e1:7a:87:5f:e9:41:81:7e:65:97:6c:dd:1b:
         68:ca:94:11:4d:7d:5c:e6:d8:dd:87:0c:b5:c3:48:df:74:7e:
         8b:9f:5f:b2:f8:b0:d1:6a:5f:06:b5:4b:be:e7:d4:0c:60:00:
         8b:5f:d0:6f:5b:57:a2:79:f5:06:10:b8:57:9f:df:b1:17:92:
         9f:e2:07:bf:c8:89:42:68:aa:16:28:bb:be:18:be:e4:d2:30:
         9c:81:5a:36:30:fb:bf:49:32:3b:b2:e8:9a:46:43:b3:66:48:
         1b:00:a0:76:af:22:2e:9f:20:71:ec:31:e9:61:97:fe:2f:51:
         29:3f:13:dc:74:94:90:f9:c0:9e:df:42:06:7f:df:20:9e:ad:
         a4:00:6a:c2:81:35:1c:c7:1b:62:03:06:8c:d4:85:83:30:5a:
         56:91:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:04 2023 by rpki-client on console-ams.rpki-client.org