Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/y9BTmN-Sj00e_Txa7ivOGhSA6ug.roa
File:                     y9BTmN-Sj00e_Txa7ivOGhSA6ug.roa (raw, json)
Hash identifier:          MuJw3ka5QEYX3MjasR8Th5yKRRHGGhhFSmZm6/t99ls=
Subject key identifier:   CB:D0:53:98:DF:92:8F:4D:1E:FD:3C:5A:EE:2B:CE:1A:14:80:EA:E8
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       0AA190B5
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/y9BTmN-Sj00e_Txa7ivOGhSA6ug.roa
Signing time:             Mon 04 Jul 2022 19:59:18 +0000
ROA not before:           Mon 04 Jul 2022 19:59:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        95.214.92.0/24 maxlen: 24
                          95.214.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178360501 (0xaa190b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Jul  4 19:59:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbd05398df928f4d1efd3c5aee2bce1a1480eae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:88:54:ee:b5:98:f1:db:d8:6f:50:28:f3:
                    a9:af:c8:44:f3:71:30:86:b6:11:72:6a:73:96:61:
                    31:e5:3e:ee:2b:97:3b:bb:44:40:68:38:72:64:f0:
                    80:e7:cd:9f:97:87:7e:e4:1b:6f:98:7f:c8:ed:c1:
                    e6:81:ea:a2:f6:7a:db:ac:aa:dc:b8:62:07:cf:dc:
                    9b:f7:1d:5a:c7:f3:24:2d:3f:7b:84:11:76:e5:a4:
                    19:4c:a6:3b:5e:8c:7e:3f:f2:5d:43:e4:9b:ba:ef:
                    59:66:81:07:6f:fd:fa:03:cf:d2:54:a9:17:6a:85:
                    be:ea:34:dc:bc:3a:49:28:fa:b3:24:b4:d1:ea:07:
                    ce:e7:33:67:dd:24:75:0e:58:8c:64:e5:78:3d:b1:
                    f0:ff:2c:1b:83:37:0f:5a:09:bb:97:f8:8d:03:49:
                    49:ae:15:57:7d:eb:1b:5e:5a:69:9e:e8:2a:04:43:
                    45:76:78:5b:b3:78:53:9b:47:00:8c:3e:b0:13:6e:
                    45:0b:4a:38:fc:be:5f:7c:c2:6f:b2:12:c2:8d:c3:
                    51:10:5e:91:bf:18:2a:e8:9c:90:36:1f:18:11:de:
                    07:bf:d5:d6:3a:fc:c4:db:e5:93:e2:85:ad:60:2b:
                    ad:39:66:8e:82:b7:5e:3d:5b:45:bb:12:23:55:4c:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D0:53:98:DF:92:8F:4D:1E:FD:3C:5A:EE:2B:CE:1A:14:80:EA:E8
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/y9BTmN-Sj00e_Txa7ivOGhSA6ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.214.92.0/24
                  95.214.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:cd:7a:08:62:e3:52:d7:27:4f:8a:a3:e1:fd:b8:57:ec:
         27:5f:98:77:08:55:e6:db:c1:d1:94:f0:ed:3e:53:87:c3:38:
         fc:92:36:68:b6:b9:93:67:c9:70:f4:04:82:56:09:06:07:77:
         0f:1a:c2:3e:de:30:18:91:66:71:d3:0f:e8:2b:2f:6a:ef:3d:
         7c:a7:19:c1:32:5d:49:38:4b:19:fc:84:f2:ad:51:b3:54:22:
         60:8c:80:1a:e8:91:23:c3:62:ee:46:bb:e5:9c:c6:60:4b:ea:
         0e:6f:11:77:c0:2a:5a:83:fa:b4:cc:39:c4:3f:a0:7a:27:e6:
         95:5a:d5:b5:0b:9a:d2:71:e9:34:2c:f6:91:bd:ed:88:1c:9d:
         11:0c:cb:00:a6:3d:b0:9f:65:a8:b3:ed:22:8e:4f:35:3e:82:
         40:d5:0b:98:40:56:6b:f8:3b:a5:33:d4:14:af:12:f9:b4:1f:
         7d:40:65:51:71:19:e7:dd:78:75:19:bb:13:b3:f4:be:ac:72:
         05:61:81:84:d0:9e:02:bb:0b:be:11:09:68:15:e4:b4:4c:73:
         41:3b:e2:01:55:9f:5c:33:c9:d1:bf:a1:b5:48:d5:e7:7a:3c:
         e1:d3:aa:6b:95:68:da:ff:06:59:83:fb:e4:dd:e5:f2:1f:c1:
         b7:e5:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:31 2023 by rpki-client on console-ams.rpki-client.org