Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa
File:                     gBoHGGjEhk297jFLrgHDnUPN7lk.roa (raw, json)
Hash identifier:          XKS9+4zMiQhT8I6iRGZg0ojFYqF+NSd3YM3FzaXuVtg=
Subject key identifier:   80:1A:07:18:68:C4:86:4D:BD:EE:31:4B:AE:01:C3:9D:43:CD:EE:59
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       0185431585BB75F077E1361F65EFF6C049B9
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa
Signing time:             Sat 24 Dec 2022 07:42:42 +0000
ROA not before:           Sat 24 Dec 2022 07:42:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14576
IP address blocks:        88.218.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:43:15:85:bb:75:f0:77:e1:36:1f:65:ef:f6:c0:49:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Dec 24 07:42:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=801a071868c4864dbdee314bae01c39d43cdee59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:93:81:57:e3:16:52:bb:3f:38:25:9e:ed:
                    1b:fb:0e:5d:e2:3e:d7:79:52:62:9b:20:0a:ff:cc:
                    29:5e:38:2e:bf:c2:9d:0f:a2:22:b7:28:c6:dd:e6:
                    b8:56:2a:70:94:bc:5a:5d:8d:88:19:bf:05:bd:bb:
                    b6:cf:0d:0d:47:d6:90:04:33:2b:cd:b8:75:37:d1:
                    a0:4b:12:b6:12:39:51:53:3b:cc:1b:79:d6:dc:27:
                    94:9e:a1:68:94:93:70:de:18:6b:81:76:58:44:ab:
                    27:9b:05:78:f2:4b:ac:71:76:ef:f0:9c:6a:1b:22:
                    ae:26:9a:f4:04:73:b8:f4:d1:42:f5:05:60:52:d2:
                    0c:29:42:4b:5d:73:97:08:97:b1:82:e8:e1:b5:52:
                    a8:63:1e:2a:37:20:a2:d8:34:87:07:04:04:98:39:
                    5a:07:a3:75:f5:b0:65:8d:14:06:a7:93:4f:b6:dc:
                    45:5b:50:b6:15:31:08:6b:24:f9:a4:8a:62:15:e0:
                    8a:43:d7:c1:3f:9d:be:47:fd:53:8a:8e:10:68:95:
                    45:b2:03:b9:65:29:76:71:1d:1a:7a:80:5a:73:c5:
                    6f:48:02:f3:ae:4d:2d:27:ab:87:45:27:4a:e8:bc:
                    f9:fa:d2:05:22:14:de:76:cd:24:72:80:be:ff:2c:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1A:07:18:68:C4:86:4D:BD:EE:31:4B:AE:01:C3:9D:43:CD:EE:59
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/gBoHGGjEhk297jFLrgHDnUPN7lk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:1e:61:47:21:a6:e4:37:f0:0b:18:1b:96:41:dd:4b:21:
         d3:3c:9e:77:98:48:d6:16:0a:02:e9:a2:b9:b4:f3:5a:02:08:
         fd:0f:4f:73:e0:ee:ef:57:1e:ab:c5:9e:54:04:73:9b:06:9c:
         cd:72:5b:91:c6:3e:12:1a:12:f2:98:0d:96:ca:7e:f2:a9:64:
         63:2c:4b:1f:bb:bc:c5:bf:dd:2e:48:20:dc:40:4d:ae:aa:05:
         fe:7d:73:bb:f9:b4:fa:0a:61:e6:f8:ad:c7:73:36:b8:18:d4:
         7c:d3:1f:a3:96:a5:23:03:b3:94:8e:72:96:aa:43:40:0f:86:
         5f:13:be:70:9a:30:6c:3b:73:6e:a3:50:64:ee:41:75:63:95:
         42:9d:b6:26:46:7a:ff:b2:1f:72:f3:d9:81:6b:11:bb:f5:8a:
         f7:d5:12:1c:c1:15:fb:81:64:e2:3e:9c:4e:cd:c9:e4:46:fb:
         ac:f6:04:a3:c9:6e:68:f2:f5:8b:51:0c:ea:44:d8:c2:7d:1f:
         a4:82:cb:44:b1:52:60:38:a5:18:f3:8d:35:2d:ff:82:f7:e3:
         18:ac:76:88:12:dd:bf:29:af:3b:41:dd:9a:a5:77:89:42:c8:
         ef:53:b4:f4:ad:42:d4:76:b5:63:d5:6f:b3:e5:8b:37:aa:01:
         62:a3:ad:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org