Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/7J5UUTIuQyzP2n7BTRGodDx683I.roa
File:                     7J5UUTIuQyzP2n7BTRGodDx683I.roa (raw, json)
Hash identifier:          XVoN/Wxo1SgGuXEY6O9guwtTh6XrsVx0B5cpKSibYKI=
Subject key identifier:   EC:9E:54:51:32:2E:43:2C:CF:DA:7E:C1:4D:11:A8:74:3C:7A:F3:72
Certificate issuer:       /CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
Certificate serial:       01856FC27EE217A1D7D399D64CFD3CDF24FC
Authority key identifier: E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/7J5UUTIuQyzP2n7BTRGodDx683I.roa
Signing time:             Sun 01 Jan 2023 23:54:55 +0000
ROA not before:           Sun 01 Jan 2023 23:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207192
IP address blocks:        185.161.48.0/22 maxlen: 24
                          185.161.51.0/24 maxlen: 24
                          185.161.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:7e:e2:17:a1:d7:d3:99:d6:4c:fd:3c:df:24:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02abe2612d67a43d6828d5b34418f5f34b6a824
        Validity
            Not Before: Jan  1 23:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec9e5451322e432ccfda7ec14d11a8743c7af372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:86:8f:9e:06:7f:0e:71:c3:42:54:a8:a6:
                    48:25:aa:a7:54:0f:31:ad:f8:41:5f:ee:5e:c6:95:
                    ba:c5:12:de:5a:69:cf:5d:41:02:23:f1:ab:cf:51:
                    d1:5d:01:db:f7:d5:ce:56:cc:cc:ba:27:7e:b6:60:
                    39:ca:28:92:dd:95:1c:92:3d:55:f4:a8:1c:05:70:
                    44:9d:4e:29:04:db:c7:88:95:c7:68:1c:54:80:79:
                    bd:a3:ac:2e:21:f6:01:58:36:49:15:77:18:a3:7e:
                    98:56:13:d8:8d:44:cf:76:42:7b:01:c3:91:1a:36:
                    0b:eb:11:ab:53:17:dc:70:90:98:1b:00:9c:c7:b3:
                    dd:f6:ba:64:5a:26:81:e2:ce:61:e8:a0:13:c3:bd:
                    80:ec:f9:e7:b9:5c:f6:67:ae:6d:93:f6:e7:03:76:
                    02:e7:d7:a5:fa:21:f9:c5:9b:5a:ed:a7:00:be:1a:
                    f4:3c:12:b1:10:80:b6:db:a9:19:b5:4c:c2:02:03:
                    a7:5c:a6:0a:ca:2d:18:04:05:06:ff:43:ac:24:1a:
                    a9:45:96:ae:13:00:96:b3:da:42:4d:66:0b:ef:8c:
                    b9:88:63:1a:7f:4b:48:17:9d:b8:49:47:5f:1d:af:
                    42:72:af:1a:da:d9:b8:53:20:1c:31:6e:16:63:a6:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9E:54:51:32:2E:43:2C:CF:DA:7E:C1:4D:11:A8:74:3C:7A:F3:72
            X509v3 Authority Key Identifier:
                keyid:E0:2A:BE:26:12:D6:7A:43:D6:82:8D:5B:34:41:8F:5F:34:B6:A8:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/7J5UUTIuQyzP2n7BTRGodDx683I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/5d6885-39fd-465f-93b4-3170fd5c3e17/1/4Cq-JhLWekPWgo1bNEGPXzS2qCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:a3:a6:60:de:d3:5f:85:9a:9d:63:3d:00:cc:97:2d:50:32:
         08:45:1a:7a:b0:31:ca:b5:f8:da:73:73:c5:e5:8f:9c:b1:13:
         a5:58:5d:22:88:ea:eb:87:0d:c9:9a:98:d2:65:09:08:c9:75:
         4d:d0:09:42:c8:1d:e1:4d:34:5f:fc:17:dd:cc:4d:f9:42:32:
         bc:93:11:4a:42:51:b8:ad:d6:85:5f:ee:2b:79:37:15:5b:32:
         a3:f3:af:c4:e4:a6:48:28:4b:a1:4f:75:40:20:36:62:40:4f:
         76:24:1d:41:59:7d:a4:d6:6c:27:d4:dd:f0:ca:32:97:13:ea:
         e5:3b:df:67:ab:5c:55:46:56:d0:9c:d4:7d:d0:c2:9c:ae:50:
         43:93:2c:2e:88:af:1d:ae:57:82:67:01:e3:64:40:2f:ba:b3:
         ba:a2:49:7b:33:32:14:52:3c:90:15:93:bd:4e:d3:0d:3a:91:
         ad:0c:b9:9c:49:29:08:ab:0e:01:38:dc:77:27:7b:76:b4:f3:
         60:65:58:19:23:eb:03:89:0a:6d:7f:0b:cd:e3:7b:66:d4:9e:
         68:7e:4c:8e:5e:4d:ae:84:d5:38:b3:f7:d8:65:c5:24:08:87:
         b6:bb:24:18:90:fe:ac:ca:ed:9d:88:39:c1:b4:ac:64:8a:e1:
         13:89:ea:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwn7iF6HX05nWTP083yT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMmFiZTI2MTJkNjdhNDNkNjgyOGQ1YjM0NDE4ZjVmMzRi
NmE4MjQwHhcNMjMwMTAxMjM1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzllNTQ1MTMyMmU0MzJjY2ZkYTdlYzE0ZDExYTg3NDNjN2FmMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl2Gj54Gfw5xw0JUqKZIJaqnVA8x
rfhBX+5expW6xRLeWmnPXUECI/Grz1HRXQHb99XOVszMuid+tmA5yiiS3ZUckj1V
9KgcBXBEnU4pBNvHiJXHaBxUgHm9o6wuIfYBWDZJFXcYo36YVhPYjUTPdkJ7AcOR
GjYL6xGrUxfccJCYGwCcx7Pd9rpkWiaB4s5h6KATw72A7PnnuVz2Z65tk/bnA3YC
59el+iH5xZta7acAvhr0PBKxEIC226kZtUzCAgOnXKYKyi0YBAUG/0OsJBqpRZau
EwCWs9pCTWYL74y5iGMaf0tIF524SUdfHa9Ccq8a2tm4UyAcMW4WY6Y3hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyeVFEyLkMsz9p+wU0RqHQ8evNyMB8GA1UdIwQY
MBaAFOAqviYS1npD1oKNWzRBj180tqgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNENxLUpoTFdla1BXZ28xYk5FR1BYelMycUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81ZDY4ODUtMzlmZC00NjVmLTkzYjQt
MzE3MGZkNWMzZTE3LzEvN0o1VVVUSXVReXpQMm43QlRSR29kRHg2ODNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81ZDY4ODUtMzlmZC00NjVmLTkzYjQtMzE3MGZkNWMzZTE3
LzEvNENxLUpoTFdla1BXZ28xYk5FR1BYelMycUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaEwMA0G
CSqGSIb3DQEBCwUAA4IBAQBto6Zg3tNfhZqdYz0AzJctUDIIRRp6sDHKtfjac3PF
5Y+csROlWF0iiOrrhw3JmpjSZQkIyXVN0AlCyB3hTTRf/BfdzE35QjK8kxFKQlG4
rdaFX+4reTcVWzKj86/E5KZIKEuhT3VAIDZiQE92JB1BWX2k1mwn1N3wyjKXE+rl
O99nq1xVRlbQnNR90MKcrlBDkywuiK8drleCZwHjZEAvurO6okl7MzIUUjyQFZO9
TtMNOpGtDLmcSSkIqw4BONx3J3t2tPNgZVgZI+sDiQptfwvN43tm1J5ofkyOXk2u
hNU4s/fYZcUkCIe2uyQYkP6syu2diDnBtKxkiuETieo+
Generated at Mon Sep 11 10:40:26 2023 by rpki-client on console-ams.rpki-client.org