Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Gn5EA4dV_Clu3PUuGbHmSuZj4Ak.roa
File:                     Gn5EA4dV_Clu3PUuGbHmSuZj4Ak.roa (raw, json)
Hash identifier:          CW3TjXMjbIn8egxsqmw1mcGgiSZP+4IDxgjg3jDWQlE=
Subject key identifier:   1A:7E:44:03:87:55:FC:29:6E:DC:F5:2E:19:B1:E6:4A:E6:63:E0:09
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       0185E94E2F14806194DF5F55AE5E242008A6
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Gn5EA4dV_Clu3PUuGbHmSuZj4Ak.roa
Signing time:             Wed 25 Jan 2023 14:21:33 +0000
ROA not before:           Wed 25 Jan 2023 14:21:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200406
IP address blocks:        185.231.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e9:4e:2f:14:80:61:94:df:5f:55:ae:5e:24:20:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Jan 25 14:21:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a7e44038755fc296edcf52e19b1e64ae663e009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:c7:0d:cf:f8:b5:48:1c:ba:40:ac:fe:a9:
                    3a:ae:43:bb:59:48:d8:0a:e8:50:cd:4b:f3:dc:49:
                    08:eb:61:89:5f:b2:b3:bb:72:66:94:ca:4a:93:e3:
                    81:fd:98:a1:b4:5a:46:3f:15:87:16:7f:7a:77:27:
                    0f:b7:0e:d9:70:1c:70:f1:da:14:c3:11:42:19:b9:
                    06:1e:80:df:34:53:a3:e4:c7:68:c8:3a:ce:18:1d:
                    64:7a:41:bf:3f:92:59:b6:2b:dc:89:e2:f6:1c:3c:
                    33:ef:e1:6c:3f:3d:d2:f0:b5:ca:68:54:59:7a:da:
                    66:a0:f6:6a:c8:79:f9:98:07:91:55:9b:d0:e8:26:
                    e6:b5:64:0b:02:85:47:d1:a0:56:ab:bb:9d:16:f3:
                    25:8b:6a:87:d1:1a:35:37:46:e2:4e:0f:fd:27:27:
                    18:e7:ba:1a:bf:91:ae:6b:b6:4f:f6:79:8c:3e:d1:
                    33:e2:0f:80:62:09:fd:85:71:1a:fd:73:34:f7:f3:
                    ed:d6:a2:60:82:c7:a9:00:67:1a:6a:54:18:1c:37:
                    70:d2:f7:04:cb:4e:db:7c:a3:b8:96:db:3c:7d:85:
                    2f:68:b1:85:2f:69:a7:53:e5:11:c4:7c:1b:19:b5:
                    86:01:80:14:b0:d4:62:03:d7:77:7e:65:42:83:1c:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7E:44:03:87:55:FC:29:6E:DC:F5:2E:19:B1:E6:4A:E6:63:E0:09
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Gn5EA4dV_Clu3PUuGbHmSuZj4Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:7f:e7:cc:76:12:62:c0:78:5f:bc:69:2f:6e:ed:50:98:
         2f:58:88:0b:a2:df:c4:92:62:70:66:20:46:e9:a6:2c:aa:7c:
         d3:22:bc:8f:18:41:46:6c:7e:77:32:1c:7a:aa:a6:0a:ea:a2:
         96:0a:d7:6e:cb:b8:a1:23:3d:cc:74:1f:20:f2:7b:08:08:28:
         8a:50:d1:9e:d9:53:6f:61:d0:39:e0:e8:b6:6b:e2:aa:58:87:
         52:7c:2b:5c:02:97:61:3d:24:12:a4:61:3d:35:56:6a:15:a3:
         74:f0:68:05:91:7f:79:b2:08:06:30:25:27:00:07:16:07:c6:
         4d:c9:5b:13:ae:b0:d4:a5:31:81:d4:4f:ce:05:c1:b5:02:60:
         8d:f0:3b:68:69:bb:21:8c:f3:10:2c:84:5d:c1:f5:45:44:6d:
         a1:63:c4:9d:dd:f6:94:e2:ed:78:57:12:25:db:1e:e8:5f:0b:
         93:94:fa:b3:c7:83:52:af:53:d9:41:1a:d6:b3:ea:ca:0b:e6:
         6e:2f:48:20:db:48:3a:cd:7f:dc:0f:65:7e:a6:20:13:ec:24:
         7f:c7:71:0e:fe:59:cf:34:ad:53:d7:fb:e3:0a:15:b8:b3:28:
         29:15:ad:80:1d:14:e2:00:4d:06:27:6e:53:f0:bc:c5:14:b2:
         f1:2e:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 21 12:40:57 2023 by rpki-client on console-fra.rpki-client.org