Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/memN-vByEXNebdEDqOk-ri67fLc.roa
File:                     memN-vByEXNebdEDqOk-ri67fLc.roa (raw, json)
Hash identifier:          +xRYq4zjfhI9bObQgW+XHVaI1Ikr81KIksFUXtkvi8E=
Subject key identifier:   99:E9:8D:FA:F0:72:11:73:5E:6D:D1:03:A8:E9:3E:AE:2E:BB:7C:B7
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       01937262AF0B4B8A3F9B63978F27A279BCCC
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/memN-vByEXNebdEDqOk-ri67fLc.roa
Signing time:             Thu 28 Nov 2024 10:48:10 +0000
ROA not before:           Thu 28 Nov 2024 10:48:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     28716
IP address blocks:        193.219.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:72:62:af:0b:4b:8a:3f:9b:63:97:8f:27:a2:79:bc:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Nov 28 10:48:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=99e98dfaf07211735e6dd103a8e93eae2ebb7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:28:ec:d1:5e:7c:ca:97:0f:96:15:ba:ed:a5:
                    4e:a7:41:6f:b2:fc:78:5f:aa:35:49:72:38:70:f3:
                    a1:2e:6d:1f:38:ac:5a:fb:87:e4:e5:58:de:39:4c:
                    1c:3b:27:fa:b8:e5:f6:39:65:f5:bd:c9:49:82:19:
                    77:27:80:b7:66:9d:77:7e:f6:e5:42:2a:c3:b3:88:
                    6c:81:eb:12:c1:4b:09:68:5f:c5:34:36:6c:57:1e:
                    f3:58:0a:cf:0d:81:cd:e1:09:3b:91:63:ab:ff:de:
                    b5:24:d4:e7:ea:96:4c:c9:81:8d:84:e2:67:0c:87:
                    5c:da:50:83:7e:9a:97:a7:36:4b:0f:b3:cf:f2:e3:
                    89:24:f8:77:be:9b:b5:7a:12:fc:72:3c:92:0e:0c:
                    df:30:88:95:f1:36:bb:95:7d:06:b8:41:72:2e:1b:
                    b2:fd:1b:f8:ad:8f:7a:6f:b1:24:0d:0b:ec:72:f5:
                    ff:ed:e6:b2:ff:dc:05:8f:55:cc:55:d5:e3:6e:e2:
                    25:88:92:e9:ae:16:28:71:86:03:ac:64:fa:78:b4:
                    fd:9e:7f:e1:6f:d4:b5:e7:46:47:56:06:08:e8:89:
                    1e:c7:8c:e3:d9:a6:53:6b:37:58:4e:0c:53:d0:15:
                    d0:54:73:47:12:19:b6:0c:d0:89:65:bd:52:c4:a1:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E9:8D:FA:F0:72:11:73:5E:6D:D1:03:A8:E9:3E:AE:2E:BB:7C:B7
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/memN-vByEXNebdEDqOk-ri67fLc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:63:b8:b2:be:5b:80:24:0b:16:6b:84:53:1b:f2:5f:03:02:
         1c:fb:f6:34:a5:7c:a6:40:a0:48:22:9e:07:18:d2:03:51:b9:
         77:c3:96:62:29:fd:61:70:9a:30:21:17:56:04:32:8b:19:74:
         08:d8:40:9b:c5:47:80:65:44:64:14:e9:73:78:71:00:95:c6:
         81:b7:1f:c6:7e:3d:ef:ed:16:07:15:09:37:e8:be:be:f9:48:
         8f:ae:ef:3a:af:63:4b:b3:27:d2:20:82:8d:fe:cb:0f:9b:ee:
         55:93:ad:e7:e5:94:b0:50:bc:33:1a:11:ac:eb:7c:6a:f3:3b:
         28:80:3f:f8:4b:de:02:9c:38:c0:80:cc:c8:e1:2c:48:85:ae:
         78:84:32:12:ae:ab:af:d4:e9:24:76:ce:ec:57:b4:b3:00:ee:
         c4:d0:a7:22:74:77:00:7b:77:90:56:50:45:a6:88:a3:d8:30:
         eb:e6:90:ea:c5:e9:1b:67:8e:37:96:53:ff:9e:10:d5:e5:7f:
         04:b3:96:e8:33:21:df:0c:1f:40:4d:3d:2a:33:17:d8:ff:b1:
         de:4d:f3:d2:7d:c2:06:51:05:19:24:39:73:95:5d:57:47:37:
         11:38:ca:ba:d5:a4:04:b0:6f:f4:96:fe:ae:f0:cb:1a:1d:1d:
         21:93:28:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNyYq8LS4o/m2OXjyeiebzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi
MGNhMDkwHhcNMjQxMTI4MTA0ODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWU5OGRmYWYwNzIxMTczNWU2ZGQxMDNhOGU5M2VhZTJlYmI3Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCjs0V58ypcPlhW67aVOp0Fvsvx4
X6o1SXI4cPOhLm0fOKxa+4fk5VjeOUwcOyf6uOX2OWX1vclJghl3J4C3Zp13fvbl
QirDs4hsgesSwUsJaF/FNDZsVx7zWArPDYHN4Qk7kWOr/961JNTn6pZMyYGNhOJn
DIdc2lCDfpqXpzZLD7PP8uOJJPh3vpu1ehL8cjySDgzfMIiV8Ta7lX0GuEFyLhuy
/Rv4rY96b7EkDQvscvX/7eay/9wFj1XMVdXjbuIliJLprhYocYYDrGT6eLT9nn/h
b9S150ZHVgYI6Ikex4zj2aZTazdYTgxT0BXQVHNHEhm2DNCJZb1SxKHWKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJnpjfrwchFzXm3RA6jpPq4uu3y3MB8GA1UdIwQY
MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct
NWI1ZTMzY2U3MGFkLzEvbWVtTi12QnlFWE5lYmRFRHFPay1yaTY3ZkxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk
LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdseMA0G
CSqGSIb3DQEBCwUAA4IBAQBMY7iyvluAJAsWa4RTG/JfAwIc+/Y0pXymQKBIIp4H
GNIDUbl3w5ZiKf1hcJowIRdWBDKLGXQI2ECbxUeAZURkFOlzeHEAlcaBtx/Gfj3v
7RYHFQk36L6++UiPru86r2NLsyfSIIKN/ssPm+5Vk63n5ZSwULwzGhGs63xq8zso
gD/4S94CnDjAgMzI4SxIha54hDISrquv1Okkds7sV7SzAO7E0KcidHcAe3eQVlBF
poij2DDr5pDqxekbZ443llP/nhDV5X8Es5boMyHfDB9ATT0qMxfY/7HeTfPSfcIG
UQUZJDlzlV1XRzcROMq61aQEsG/0lv6u8MsaHR0hkyiM
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:00 2024 by rpki-client on console.sobornost.net