Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/UEuZXTfjFMyLYUrS0ptU6moLpUo.roa
File:                     UEuZXTfjFMyLYUrS0ptU6moLpUo.roa (raw, json)
Hash identifier:          l6jIZfm9kcmZmfpYLmo0xYAfV6TDQMdfbkwkZ4GRJ0s=
Subject key identifier:   50:4B:99:5D:37:E3:14:CC:8B:61:4A:D2:D2:9B:54:EA:6A:0B:A5:4A
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       08E5D967
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/UEuZXTfjFMyLYUrS0ptU6moLpUo.roa
Signing time:             Sat 01 Jan 2022 07:52:59 +0000
ROA not before:           Sat 01 Jan 2022 07:52:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        5.104.74.0/24 maxlen: 24
                          5.104.72.0/23 maxlen: 24
                          95.214.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149281127 (0x8e5d967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Jan  1 07:52:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=504b995d37e314cc8b614ad2d29b54ea6a0ba54a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:13:c1:ee:38:e3:c3:a6:72:ea:50:55:99:
                    17:f2:30:d6:37:77:a8:96:41:9e:f1:c8:29:ad:15:
                    14:55:e1:ce:c6:bf:2b:d8:71:7f:de:90:1e:86:03:
                    60:33:58:0c:d5:84:bb:8a:5e:9d:ee:5e:75:40:73:
                    44:c4:08:38:c0:e1:af:5c:16:af:69:76:bf:44:0a:
                    f5:4e:e2:6c:40:f7:f6:cb:fb:69:14:66:df:84:9a:
                    98:35:28:8c:f7:65:a7:00:31:f2:f3:cb:1c:66:69:
                    06:3b:79:3e:8f:4e:61:89:2a:a2:e6:a7:d8:7b:08:
                    c9:5a:24:f4:9b:40:ac:56:c1:16:7d:8a:4f:37:ed:
                    f3:56:f4:1d:f4:e8:81:ee:89:9e:a6:e2:13:2d:b4:
                    31:1f:bd:ad:d8:7f:29:61:c6:ac:96:41:c8:74:41:
                    34:da:00:fe:fb:d1:20:32:bf:f6:b0:ef:7a:12:d2:
                    31:a5:5c:47:b7:e2:40:ec:80:5f:7b:11:d7:ef:6e:
                    51:48:a8:92:b4:2c:0b:dc:ea:56:7e:81:cb:f3:4a:
                    ce:6c:1c:e8:d4:27:ad:99:ac:0a:5f:85:6a:f1:fc:
                    9a:75:c1:32:05:fb:47:21:f0:d6:58:e4:5b:bd:18:
                    d5:ff:55:e7:26:5a:b3:8b:cd:62:d4:cf:e4:e3:1e:
                    07:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:99:5D:37:E3:14:CC:8B:61:4A:D2:D2:9B:54:EA:6A:0B:A5:4A
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/UEuZXTfjFMyLYUrS0ptU6moLpUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.72.0-5.104.74.255
                  95.214.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:4d:eb:9e:dd:d9:10:70:77:25:84:15:ec:b0:7f:14:68:
         5c:2c:85:51:79:ba:02:f7:30:92:5b:b4:9d:04:55:7f:83:6f:
         95:38:c0:d4:fb:92:19:c7:7c:25:f9:da:fd:b5:37:1e:72:3c:
         fd:d7:66:af:9f:07:11:89:cf:4b:44:f8:78:da:c4:c5:93:d5:
         3b:e4:71:9f:fb:57:42:32:50:4b:42:8e:76:3b:41:78:d2:ba:
         41:f9:2b:47:02:d7:69:e3:ee:88:70:32:fb:14:f3:fb:52:32:
         20:15:60:b4:a1:eb:c5:54:14:35:be:f3:67:0a:2c:a4:2a:24:
         9e:9a:a4:4b:5e:b2:45:26:4a:25:bc:e9:c2:8b:0f:49:00:e9:
         7b:1c:71:39:ca:d9:fc:b8:41:7d:9e:96:b9:33:cd:0c:66:c6:
         dd:2a:b2:57:aa:1b:5a:ae:fc:44:f2:75:f0:02:ec:eb:1c:3b:
         26:96:b8:99:02:55:d5:51:c9:ab:99:87:df:52:ba:6f:a0:a9:
         30:ba:3f:23:9b:ba:b2:50:35:22:56:a0:49:1a:49:7e:bc:b8:
         22:1d:f0:33:c0:ca:86:1b:ca:7d:7a:10:54:5b:56:0e:04:0c:
         c8:64:08:7a:8a:80:89:b0:4c:11:1c:90:7f:e0:9c:fc:b2:5b:
         40:3c:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org