Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/jsV7oxp32gLy3GVMhNPV-tM3Wlo.roa
File:                     jsV7oxp32gLy3GVMhNPV-tM3Wlo.roa (raw, json)
Hash identifier:          cxiYD92EglEZmlU/7Boj+4p3c0TCAMIKenc8ivGl1Uo=
Subject key identifier:   8E:C5:7B:A3:1A:77:DA:02:F2:DC:65:4C:84:D3:D5:FA:D3:37:5A:5A
Certificate issuer:       /CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
Certificate serial:       018805C9787A7AC29EE24A43487FEBDB293B
Authority key identifier: 5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/jsV7oxp32gLy3GVMhNPV-tM3Wlo.roa
Signing time:             Wed 10 May 2023 13:11:09 +0000
ROA not before:           Wed 10 May 2023 13:11:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5511
IP address blocks:        217.119.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:05:c9:78:7a:7a:c2:9e:e2:4a:43:48:7f:eb:db:29:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
        Validity
            Not Before: May 10 13:11:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ec57ba31a77da02f2dc654c84d3d5fad3375a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:c7:e0:3c:81:57:8c:5d:c9:fe:ce:2e:66:
                    44:53:c5:82:67:2e:d8:6e:3f:8f:78:b0:2e:c0:21:
                    28:b2:0c:55:a2:a6:d4:2c:d3:65:99:f4:de:13:be:
                    21:10:9b:3b:d2:6d:ea:bc:b3:8f:6d:2b:c7:62:85:
                    08:01:39:ef:bf:a8:10:6e:89:23:e5:d9:29:1d:ee:
                    d9:46:94:b2:f4:d0:0e:e5:c8:32:2d:69:41:c0:ee:
                    3d:1b:6b:b9:7a:c1:ec:60:0c:e0:44:0e:ac:79:d9:
                    49:12:32:6a:90:1b:30:d3:47:6a:ba:a4:2c:e4:ad:
                    e2:ae:4f:08:c2:4f:a7:ca:37:0b:3c:5e:a9:9e:05:
                    8a:c4:db:4a:17:16:99:5d:03:0c:b0:5f:77:fd:97:
                    ba:f6:5d:6b:8a:9c:81:03:82:73:35:d7:18:92:e3:
                    ff:27:15:8b:03:ee:4b:86:22:aa:a2:34:18:d4:b7:
                    38:65:3a:0b:00:bf:7d:6d:13:60:31:be:32:de:df:
                    b2:de:e3:8a:69:70:cf:0d:01:aa:38:98:10:2d:24:
                    37:9a:02:8d:15:9a:53:42:ed:f2:90:06:80:84:8d:
                    e6:25:a1:af:06:79:09:dd:15:d9:8d:0b:0d:1d:f1:
                    70:d4:c0:86:fb:63:17:04:4d:00:ca:e8:e3:75:7c:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C5:7B:A3:1A:77:DA:02:F2:DC:65:4C:84:D3:D5:FA:D3:37:5A:5A
            X509v3 Authority Key Identifier:
                keyid:5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/jsV7oxp32gLy3GVMhNPV-tM3Wlo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.119.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:e5:74:8c:ec:0c:67:44:be:c9:31:8a:ee:f4:e8:f1:d3:04:
         e5:ba:18:05:21:52:30:59:3d:ca:f5:07:ae:ea:92:28:da:19:
         c8:87:57:7a:0f:11:d0:db:15:70:2b:0b:f8:82:4a:80:b5:b5:
         99:68:25:93:88:6e:20:8a:a7:0a:b7:ca:8d:33:5a:96:7d:0b:
         96:c3:87:8a:44:e2:1f:18:2e:16:d5:f2:9f:3e:6b:cd:97:de:
         73:81:ac:30:b8:69:6c:fd:51:9e:6a:79:dd:1a:59:bd:63:61:
         3e:1f:7d:a0:ec:95:68:37:40:51:8e:d1:d0:d1:11:00:8e:6a:
         ed:bd:b6:a4:ea:a4:82:dc:b9:97:68:a1:96:85:0f:50:47:fc:
         30:6a:e6:22:55:2d:c1:32:94:ed:3e:22:05:4b:17:d8:d6:7c:
         64:58:71:de:1e:d1:fa:6d:4d:e0:01:69:f5:7d:3b:b4:d4:7f:
         22:20:34:65:f4:a3:7e:c5:e0:26:bf:25:b4:4d:9c:84:89:b4:
         19:76:65:19:9e:3b:53:13:4a:a0:11:36:23:90:1e:fa:06:d5:
         7e:ac:2e:df:79:06:8f:ed:97:63:55:de:c9:ef:72:45:46:70:
         dd:e4:36:d0:6c:ab:91:3a:7f:00:56:97:47:a3:ac:c4:66:39:
         24:9f:2d:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgFyXh6esKe4kpDSH/r2yk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjMwZjU0OTA5ZWZmNmQyZGJlMTkwYjc3Y2NkNzhiZWFk
MWU5ZGQwHhcNMjMwNTEwMTMxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWM1N2JhMzFhNzdkYTAyZjJkYzY1NGM4NGQzZDVmYWQzMzc1YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4DH4DyBV4xdyf7OLmZEU8WCZy7Y
bj+PeLAuwCEosgxVoqbULNNlmfTeE74hEJs70m3qvLOPbSvHYoUIATnvv6gQbokj
5dkpHe7ZRpSy9NAO5cgyLWlBwO49G2u5esHsYAzgRA6sedlJEjJqkBsw00dquqQs
5K3irk8Iwk+nyjcLPF6pngWKxNtKFxaZXQMMsF93/Ze69l1ripyBA4JzNdcYkuP/
JxWLA+5LhiKqojQY1Lc4ZToLAL99bRNgMb4y3t+y3uOKaXDPDQGqOJgQLSQ3mgKN
FZpTQu3ykAaAhI3mJaGvBnkJ3RXZjQsNHfFw1MCG+2MXBE0AyujjdXyT1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7Fe6Mad9oC8txlTITT1frTN1paMB8GA1UdIwQY
MBaAFF+zD1SQnv9tLb4ZC3fM14vq0endMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdNUFZKQ2VfMjB0dmhrTGQ4elhpLXJSNmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZTdhYTMtNmFkZC00ZjNlLWE2MTUt
OTQ1YjI2N2JhNTAyLzEvanNWN294cDMyZ0x5M0dWTWhOUFYtdE0zV2xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xZTdhYTMtNmFkZC00ZjNlLWE2MTUtOTQ1YjI2N2JhNTAy
LzEvWDdNUFZKQ2VfMjB0dmhrTGQ4elhpLXJSNmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeOMA0G
CSqGSIb3DQEBCwUAA4IBAQAS5XSM7AxnRL7JMYru9Ojx0wTluhgFIVIwWT3K9Qeu
6pIo2hnIh1d6DxHQ2xVwKwv4gkqAtbWZaCWTiG4giqcKt8qNM1qWfQuWw4eKROIf
GC4W1fKfPmvNl95zgawwuGls/VGeanndGlm9Y2E+H32g7JVoN0BRjtHQ0REAjmrt
vbak6qSC3LmXaKGWhQ9QR/wwauYiVS3BMpTtPiIFSxfY1nxkWHHeHtH6bU3gAWn1
fTu01H8iIDRl9KN+xeAmvyW0TZyEibQZdmUZnjtTE0qgETYjkB76BtV+rC7feQaP
7ZdjVd7J73JFRnDd5DbQbKuROn8AVpdHo6zEZjkkny2T
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:22 2023 by rpki-client on console.sobornost.net