Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa
File:                     IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa (raw, json)
Hash identifier:          wYtJweT8ES22qzHxJ/Z5AeaKkzex/pB1XO96XryvQr8=
Subject key identifier:   21:2F:DA:12:2E:EB:D8:92:41:24:F8:C0:6B:13:B3:0B:4C:B6:64:E4
Certificate issuer:       /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial:       0181D39BBFDD19A61AD0EFC75EC6CE644C4E
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa
Signing time:             Wed 06 Jul 2022 13:03:28 +0000
ROA not before:           Wed 06 Jul 2022 13:03:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204471
IP address blocks:        77.37.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d3:9b:bf:dd:19:a6:1a:d0:ef:c7:5e:c6:ce:64:4c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
        Validity
            Not Before: Jul  6 13:03:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=212fda122eebd8924124f8c06b13b30b4cb664e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:60:37:de:80:70:3f:9e:75:b6:c6:24:d2:
                    6e:55:c9:e8:f5:d3:bd:9d:37:9e:6b:48:5c:2f:f3:
                    8f:2a:70:e5:58:01:77:4a:92:59:07:2f:39:9c:66:
                    69:a4:2f:75:32:14:c6:2c:dd:4b:86:df:a3:0d:e3:
                    e0:fc:9f:57:45:a6:0b:7c:20:91:12:84:4e:53:bb:
                    11:83:12:78:be:ef:99:0c:df:33:29:8a:9d:8e:ab:
                    32:95:e2:ae:02:27:c2:b4:d8:32:3a:2c:92:c8:fd:
                    ed:c0:93:2c:fa:fd:ac:62:31:44:9a:9a:5a:96:16:
                    ae:fc:41:f4:e2:07:9b:e6:69:be:5a:6d:53:b1:ba:
                    ee:5d:0c:f6:b3:39:68:fd:a4:7a:f5:ed:95:c6:51:
                    48:19:c1:22:2f:9c:b9:f8:33:d0:da:b3:fe:ce:f7:
                    06:20:e4:3d:a1:0a:84:5e:e9:a4:ff:c9:cf:c3:79:
                    e6:28:af:50:2e:5c:6c:12:64:f7:e3:2a:d4:13:88:
                    55:bf:bf:ca:51:18:23:15:39:6d:72:e1:fd:0f:c9:
                    26:73:14:65:0f:a2:0e:a7:a2:cf:ed:3e:7b:ab:71:
                    45:36:b8:77:19:50:51:4b:3e:79:56:b1:db:19:57:
                    cb:da:36:d6:65:0e:db:45:b6:65:d4:87:bb:0f:3b:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2F:DA:12:2E:EB:D8:92:41:24:F8:C0:6B:13:B3:0B:4C:B6:64:E4
            X509v3 Authority Key Identifier:
                keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a4:23:62:18:ae:13:02:c7:71:44:20:35:83:f2:7d:ab:80:
         30:94:e7:47:f6:65:fc:c3:82:29:31:c9:17:5a:ad:50:91:fc:
         51:70:33:3d:22:dd:97:b1:b0:11:79:9e:96:01:86:b5:be:b4:
         a8:8b:a3:f0:1c:36:c8:cc:2d:41:62:5b:e1:56:37:4c:77:09:
         c6:15:84:52:6a:3d:38:fc:f3:e8:05:fb:06:8a:8e:77:34:1d:
         40:6d:b1:2c:0c:dc:4a:6a:65:ff:ad:64:3b:e4:ba:18:3e:17:
         77:02:d3:8a:35:99:b2:c7:12:11:5c:51:8a:18:73:27:ba:ef:
         b4:40:ba:08:e0:b9:09:de:eb:51:0f:83:b1:d7:cb:c4:9a:42:
         48:f7:68:f1:49:52:a1:16:fd:cb:d0:95:d5:05:55:71:43:f4:
         35:d6:40:ea:47:b9:17:26:c5:c7:6c:39:d2:aa:f5:76:ba:52:
         9e:26:f0:1e:e5:d1:d0:0b:d4:75:06:3a:dd:b0:7f:1b:05:9d:
         45:f6:ed:d4:a8:96:80:46:bd:39:8d:d7:74:19:92:7e:b7:85:
         87:bc:7e:9c:b2:0e:6f:71:05:25:ef:b7:18:fa:d7:3a:e7:36:
         f5:f4:95:62:82:8b:30:c0:75:6c:01:a7:9b:a7:a4:e5:2b:0a:
         b9:7b:a2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net