Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/H1npSX_cDcAMz_8RwtRtqL7rce0.roa
File:                     H1npSX_cDcAMz_8RwtRtqL7rce0.roa (raw, json)
Hash identifier:          gfZDyVnFpFFq9C4gDil9kwz/FHB1DXR8qisEKXfV3p4=
Subject key identifier:   1F:59:E9:49:7F:DC:0D:C0:0C:CF:FF:11:C2:D4:6D:A8:BE:EB:71:ED
Certificate issuer:       /CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Certificate serial:       0118C90B
Authority key identifier: 4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/H1npSX_cDcAMz_8RwtRtqL7rce0.roa
Signing time:             Wed 12 Jan 2022 11:10:44 +0000
ROA not before:           Wed 12 Jan 2022 11:10:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204286
IP address blocks:        109.205.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18401547 (0x118c90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
        Validity
            Not Before: Jan 12 11:10:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f59e9497fdc0dc00ccfff11c2d46da8beeb71ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:95:45:3e:82:10:ef:5d:51:b6:6d:62:ec:
                    b2:99:ea:44:81:f6:e4:79:2b:2b:95:08:a7:33:72:
                    c3:2f:36:a0:9d:43:6d:bf:b9:68:cc:0a:ca:f6:b9:
                    ac:f8:fc:86:d8:87:3e:55:e6:75:18:b3:4e:6b:bf:
                    44:94:af:fb:37:f3:e9:12:d5:99:20:40:3f:66:6b:
                    de:2f:c8:aa:07:3d:c4:65:bf:c2:66:2f:44:95:36:
                    b3:68:d8:8e:7a:28:29:9e:15:b6:4d:8e:a8:ea:fe:
                    55:e4:c1:21:74:84:33:35:f7:e7:3f:5b:35:52:9e:
                    1f:c1:20:57:ba:04:e8:db:6f:02:53:58:51:58:cf:
                    3f:f8:64:84:af:41:3d:3e:c1:e0:3f:ad:7d:22:b9:
                    b6:02:04:1f:81:4a:e5:f3:e0:ab:93:2d:37:6c:8a:
                    4c:3f:0b:0d:14:df:19:2e:d4:49:02:b1:26:21:57:
                    d8:70:7d:17:9d:80:53:16:08:f2:01:50:64:db:e7:
                    c8:b6:e5:5a:24:47:c1:1d:93:9b:9b:d0:7d:7f:1c:
                    22:58:64:02:0d:e4:ae:57:f4:e2:45:f2:f5:10:46:
                    58:8b:ee:a3:f2:9d:35:43:8f:51:cb:47:bc:04:09:
                    37:98:53:a9:37:f9:e0:d3:36:5b:08:74:ac:a3:43:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:59:E9:49:7F:DC:0D:C0:0C:CF:FF:11:C2:D4:6D:A8:BE:EB:71:ED
            X509v3 Authority Key Identifier:
                keyid:4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/H1npSX_cDcAMz_8RwtRtqL7rce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.205.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e9:cb:19:5e:71:2f:db:b1:e9:de:d5:98:8e:2c:71:58:6a:
         9c:fe:5d:fe:45:cf:7d:37:6a:12:b1:d9:a9:fd:ca:6c:dd:21:
         69:de:37:9c:83:1d:92:d1:bd:09:e1:70:29:ac:c3:e8:98:09:
         81:a2:52:94:2d:95:7b:bd:4a:04:d8:95:03:a9:f7:f6:92:82:
         5c:90:b4:17:ac:0f:27:8c:6a:63:ac:12:76:60:75:1a:6b:94:
         b5:ad:29:66:91:a2:cb:92:d3:50:c3:16:78:e3:2b:18:7e:52:
         7d:d6:92:59:be:b6:54:56:cf:2b:6f:30:1b:f6:e3:84:92:b9:
         4b:92:2b:f3:c2:d2:cc:3e:ac:54:9d:da:0c:30:46:85:77:86:
         8f:9e:47:9b:06:14:7a:f0:44:d8:4c:bd:92:f1:46:8b:f8:95:
         3f:d0:8a:86:92:4a:c2:5a:dd:f5:55:e2:84:37:05:b6:36:90:
         1c:a8:a7:93:32:62:9c:fd:1f:e9:0e:58:91:10:a5:96:24:18:
         1f:05:bc:1a:38:5d:10:20:31:d4:20:4a:05:ba:4a:0e:99:61:
         26:4a:eb:ec:53:24:b2:87:3b:9d:b1:ec:c0:c1:79:44:a0:c6:
         ee:22:b1:f4:fc:b5:0d:fe:f4:50:c8:69:32:56:80:af:53:14:
         4e:c4:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:42 2023 by rpki-client on console.sobornost.net