Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/EnOuYKO6rwGCf6UwziprAGZQLP0.roa
File:                     EnOuYKO6rwGCf6UwziprAGZQLP0.roa (raw, json)
Hash identifier:          CAswxOw9t5kA20YAMxSYd8aZE6An6n0IdrCzCDgscs8=
Subject key identifier:   12:73:AE:60:A3:BA:AF:01:82:7F:A5:30:CE:2A:6B:00:66:50:2C:FD
Certificate issuer:       /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial:       093C3F5B
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/EnOuYKO6rwGCf6UwziprAGZQLP0.roa
Signing time:             Sat 01 Jan 2022 09:53:04 +0000
ROA not before:           Sat 01 Jan 2022 09:53:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        91.188.253.0/24 maxlen: 24
                          91.188.252.0/24 maxlen: 24
                          91.188.254.0/24 maxlen: 24
                          91.188.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154943323 (0x93c3f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
        Validity
            Not Before: Jan  1 09:53:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1273ae60a3baaf01827fa530ce2a6b0066502cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:d9:db:36:14:ad:50:02:51:d0:87:97:e6:
                    31:09:e6:c4:b2:dc:ac:06:40:18:7f:4f:de:91:8c:
                    f7:6d:66:fb:de:d9:3b:6a:d3:5d:93:81:67:1e:74:
                    49:c1:35:52:aa:a1:78:9a:9d:33:6e:34:0f:a3:92:
                    63:ae:bb:ff:88:c8:0d:73:f7:b3:42:5f:57:cb:df:
                    f6:81:af:0a:2b:1a:49:62:8b:85:74:1b:55:00:2f:
                    69:e9:23:64:a4:b3:06:b1:2d:e9:b0:73:73:7b:d8:
                    ed:df:42:aa:db:48:cc:b8:09:21:1d:17:29:d5:11:
                    77:63:9d:53:96:d7:71:8a:75:7a:f6:1d:b8:56:2c:
                    d5:64:49:b1:da:c8:b3:75:07:d4:cf:80:cc:9b:0e:
                    57:55:10:79:3e:86:9b:60:c2:15:2b:41:ff:9d:09:
                    f7:d8:37:ac:72:4d:fb:e0:c5:40:b3:b2:c8:33:64:
                    a6:f6:6a:4b:43:f3:63:7b:f3:de:5f:22:a2:fa:c9:
                    5a:8e:65:5c:50:8d:a0:1e:58:21:96:d7:71:d2:4a:
                    e4:bf:37:74:ba:ca:1c:b9:3d:81:3e:c9:fd:27:c2:
                    d1:7b:52:6e:5c:64:6b:a6:ca:ec:e8:38:44:77:e8:
                    45:48:90:ea:6d:70:e7:54:2a:45:b4:03:b0:84:20:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:73:AE:60:A3:BA:AF:01:82:7F:A5:30:CE:2A:6B:00:66:50:2C:FD
            X509v3 Authority Key Identifier:
                keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/EnOuYKO6rwGCf6UwziprAGZQLP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.188.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:41:35:25:42:ff:50:93:35:a1:3e:e8:7c:b3:2d:8c:62:42:
         6e:49:c3:91:94:4f:8e:97:be:9a:0e:06:d3:f0:bd:b0:c5:f3:
         92:61:7b:1b:77:4a:2d:86:02:de:e8:9b:a0:9e:71:2f:5a:63:
         a1:7e:c9:61:3f:08:34:1e:1b:a6:38:23:ad:ee:72:a1:51:ee:
         ae:e7:66:70:39:06:23:e9:4d:c9:59:7b:e0:45:6f:03:d5:c0:
         a0:5b:c3:90:ed:58:2f:7d:5b:91:34:76:1a:6c:ee:fd:94:19:
         08:6d:12:48:2d:20:d8:79:8e:ce:1f:8c:dd:47:28:ed:0a:ec:
         c3:ac:6f:d5:58:0d:4c:d1:3e:d5:72:7b:30:e4:d9:36:02:a8:
         bd:42:e4:97:5e:9a:84:64:3c:e3:3a:3b:60:20:e3:54:48:a5:
         c4:91:0c:2f:e4:fa:4d:dc:ce:e5:d3:ba:49:11:60:08:e7:04:
         9d:37:79:47:e4:3b:da:91:20:11:99:eb:75:c7:87:4e:4e:8a:
         50:c5:56:1b:e1:27:5c:9d:3b:7d:36:14:c9:25:c9:d1:96:83:
         27:73:1a:d0:c2:22:e0:44:53:79:02:9c:86:87:80:24:cc:37:
         75:77:cb:dc:31:59:66:02:43:c7:b5:40:56:a8:20:00:25:4c:
         22:45:ab:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:25 2023 by rpki-client on console-ams.rpki-client.org