Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/JSZCmrh6n5VLsiHWn_eRbVuGhhY.roa
File:                     JSZCmrh6n5VLsiHWn_eRbVuGhhY.roa (raw, json)
Hash identifier:          cHb4H8iN/eqFnAxdeBfg4c9wzW+I6FjQkDVtmwPvYwk=
Subject key identifier:   25:26:42:9A:B8:7A:9F:95:4B:B2:21:D6:9F:F7:91:6D:5B:86:86:16
Certificate issuer:       /CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
Certificate serial:       01EC7BB9
Authority key identifier: 5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/JSZCmrh6n5VLsiHWn_eRbVuGhhY.roa
Signing time:             Sun 06 Feb 2022 20:43:13 +0000
ROA not before:           Sun 06 Feb 2022 20:43:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212667
IP address blocks:        185.218.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32275385 (0x1ec7bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c95d5a364e30df4061abf3ee4e772237ac8ca3f
        Validity
            Not Before: Feb  6 20:43:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2526429ab87a9f954bb221d69ff7916d5b868616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9e:07:fc:3c:53:1f:bf:e1:3d:eb:48:35:ce:
                    6f:e8:89:13:d1:25:a8:5e:a5:59:67:83:25:8e:91:
                    cc:2b:97:21:b4:f5:88:77:66:94:c5:8c:7d:1f:e6:
                    c5:f9:ae:4f:d0:d0:75:49:27:db:92:53:1d:ef:47:
                    1d:3a:39:2d:24:8f:68:75:e1:c8:2a:4f:13:21:31:
                    71:17:bf:b2:fa:4b:6d:87:2b:73:3a:5e:66:40:16:
                    2f:a7:f6:9b:19:4c:99:a2:07:a1:c0:13:28:63:0d:
                    e4:7e:8c:c0:75:a1:f8:75:fb:10:ce:0c:65:49:2f:
                    36:17:11:b0:c7:ef:81:47:d0:38:fb:07:6d:81:e4:
                    5d:5a:7c:f0:2c:de:8d:ad:a4:65:81:ac:36:86:1a:
                    c7:2f:16:d0:32:dc:e6:ee:6f:6d:7a:a4:36:76:de:
                    89:84:8b:15:2b:4f:0c:ca:e9:26:01:87:ab:02:3e:
                    c5:1d:a6:79:f0:3b:7e:3b:00:7c:b9:33:fd:85:f0:
                    85:97:b3:24:46:e8:ba:c7:3e:c6:9c:df:c5:e9:df:
                    f0:70:0c:50:49:eb:bd:c1:39:da:e9:9e:5d:9d:c5:
                    81:33:b6:18:ba:60:cc:65:1e:8f:c1:bf:11:36:14:
                    31:1d:ba:b8:5f:9f:9d:b2:a5:68:ec:45:16:9a:99:
                    6b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:26:42:9A:B8:7A:9F:95:4B:B2:21:D6:9F:F7:91:6D:5B:86:86:16
            X509v3 Authority Key Identifier:
                keyid:5C:95:D5:A3:64:E3:0D:F4:06:1A:BF:3E:E4:E7:72:23:7A:C8:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJXVo2TjDfQGGr8-5OdyI3rIyj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/JSZCmrh6n5VLsiHWn_eRbVuGhhY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/075712-beca-41bd-adb6-ab2bae1a2567/1/XJXVo2TjDfQGGr8-5OdyI3rIyj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:a7:b9:40:20:9b:44:be:85:c8:be:65:aa:24:74:ae:ae:
         c3:15:87:ed:76:26:20:fd:aa:59:03:1d:c7:97:51:4f:ae:a8:
         da:e9:13:e9:ca:80:92:81:5f:00:e8:79:60:0c:7c:91:4d:b6:
         67:f5:1e:1f:33:58:9e:a2:33:bb:6b:04:fd:37:fe:7b:71:f3:
         2c:0f:2a:b4:7a:ec:c1:60:9e:25:19:59:45:17:38:52:cb:0b:
         2e:b1:b7:f5:a5:f0:99:01:4a:49:f0:25:83:22:87:61:cd:39:
         0f:7b:65:47:44:a7:74:02:2b:a5:9e:f8:12:0d:52:99:ac:52:
         8e:22:41:bc:d5:1c:5e:b2:de:f5:bd:5c:2b:d9:67:b1:b4:11:
         3b:62:6f:d9:71:9f:c9:3c:1a:81:a2:2c:cc:90:a1:0a:ef:6e:
         6f:56:4f:9d:ac:4c:a9:d6:c0:2a:7c:62:36:c6:f1:c1:70:4b:
         3a:03:b5:fa:63:c6:2b:25:71:77:4b:cb:ba:50:8e:a1:1e:98:
         6f:9f:04:19:c5:5b:69:cc:79:2f:34:9c:fa:c4:49:37:9b:f7:
         10:50:dd:2e:12:75:84:51:42:48:18:99:69:70:04:b7:62:16:
         f4:6c:3f:35:56:b5:a9:85:7c:e5:fe:99:3b:49:c3:d4:1b:ca:
         97:64:df:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net