Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/1-X8GV002DMPVIcMYSQH7AAvyhGY.roa
File:                     1-X8GV002DMPVIcMYSQH7AAvyhGY.roa (raw, json)
Hash identifier:          zp/67VDG3O+jhpfq0mrz4f2rEf+kGw1GPzVibP3/OUw=
Subject key identifier:   F9:7F:06:57:4D:36:0C:C3:D5:21:C3:18:49:01:FB:00:0B:F2:84:66
Certificate issuer:       /CN=296016ad64c22600acf3049f8758f53ebb1e57c4
Certificate serial:       01912781D0DA6FAEFBA0D17DFE5D6B83A0BA
Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/1-X8GV002DMPVIcMYSQH7AAvyhGY.roa
Signing time:             Tue 06 Aug 2024 11:45:04 +0000
ROA not before:           Tue 06 Aug 2024 11:45:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215435
IP address blocks:        216.87.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:27:81:d0:da:6f:ae:fb:a0:d1:7d:fe:5d:6b:83:a0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4
        Validity
            Not Before: Aug  6 11:45:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f97f06574d360cc3d521c3184901fb000bf28466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:77:80:a9:64:08:6b:e9:76:bf:6d:de:55:
                    d0:1f:f8:2b:7c:33:1b:cb:41:0f:05:65:91:6c:e5:
                    88:97:ad:0a:5a:ea:38:ff:2f:ce:ee:fb:2d:10:86:
                    83:78:a2:ec:f6:de:80:f9:25:1c:62:c8:d5:23:ea:
                    49:b5:15:2e:ee:e9:ce:4e:ee:6c:97:e6:3f:ef:d7:
                    da:98:48:81:6e:95:7d:f2:c1:77:e8:dd:b8:0d:97:
                    4c:2c:84:4f:9b:40:be:05:64:9a:08:d8:91:bf:65:
                    d9:76:d4:ea:c4:2b:4b:bf:98:d5:ce:5f:b7:d1:17:
                    6c:d1:4b:a6:63:25:18:6c:d6:5a:47:7e:99:ae:6b:
                    5c:71:df:d2:77:20:79:a1:41:4b:67:7c:5e:0b:d5:
                    1d:c4:48:01:52:f4:81:39:b8:5b:ed:21:dc:4e:bf:
                    8c:1e:cc:47:be:de:bc:73:5f:d6:a2:3b:fc:e4:bc:
                    66:f7:a9:7a:a5:76:34:c0:20:4e:7d:10:50:3a:83:
                    81:79:e5:d3:dd:e4:52:d2:6e:3e:16:ba:39:61:c1:
                    bd:5e:cc:0e:92:b1:f4:e3:b7:37:d2:f1:ac:a6:75:
                    b9:3e:18:71:8a:20:c9:13:8b:4c:c9:05:8e:54:2a:
                    03:17:5f:b4:23:9e:57:a7:64:02:6c:5a:8b:7a:27:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7F:06:57:4D:36:0C:C3:D5:21:C3:18:49:01:FB:00:0B:F2:84:66
            X509v3 Authority Key Identifier:
                keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/1-X8GV002DMPVIcMYSQH7AAvyhGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:96:5e:b0:b4:1a:b1:1b:ba:ec:77:2f:2e:85:c8:a9:27:21:
         e5:2e:47:3e:9d:28:f7:68:c4:91:c5:5b:52:92:f0:25:0b:33:
         f6:6d:2d:f4:02:a5:54:cf:b1:26:80:db:cc:c4:01:80:ab:72:
         d3:10:cb:79:d6:4e:d8:fa:96:95:66:15:87:44:50:7d:1e:67:
         76:10:9a:4e:94:ca:2d:3d:f4:dd:0f:ed:37:c5:65:44:bd:95:
         1f:93:22:d1:26:71:40:84:e8:5e:bb:5b:21:cf:0b:9e:47:46:
         a2:2a:27:56:85:69:16:3b:44:18:89:3b:4b:bc:70:22:af:cb:
         eb:41:ea:33:32:9e:3a:b5:47:ab:7d:da:00:a5:6f:be:9d:50:
         e5:8f:5c:6d:8b:e5:65:2a:8a:84:25:74:ca:3d:48:24:7e:8b:
         49:7c:2b:83:a9:29:15:24:67:d1:7f:fa:22:57:cd:5c:f6:49:
         2b:45:13:e0:3b:90:a4:8c:a9:93:ef:b4:ac:6c:81:25:ee:14:
         2e:c9:2d:dd:de:3f:c6:65:bc:4f:45:45:ad:98:40:6f:4d:4e:
         bd:59:c8:81:e4:0c:48:ee:28:14:b7:bc:50:7d:c5:2d:8a:d9:
         df:49:1e:84:c1:d8:7e:3b:c8:18:b7:4f:f7:92:14:8c:f4:f6:
         ad:e0:0a:c2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZEngdDab677oNF9/l1rg6C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx
ZTU3YzQwHhcNMjQwODA2MTE0NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTdmMDY1NzRkMzYwY2MzZDUyMWMzMTg0OTAxZmIwMDBiZjI4NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSd3gKlkCGvpdr9t3lXQH/grfDMb
y0EPBWWRbOWIl60KWuo4/y/O7vstEIaDeKLs9t6A+SUcYsjVI+pJtRUu7unOTu5s
l+Y/79famEiBbpV98sF36N24DZdMLIRPm0C+BWSaCNiRv2XZdtTqxCtLv5jVzl+3
0Rds0UumYyUYbNZaR36Zrmtccd/SdyB5oUFLZ3xeC9UdxEgBUvSBObhb7SHcTr+M
HsxHvt68c1/Wojv85Lxm96l6pXY0wCBOfRBQOoOBeeXT3eRS0m4+Fro5YcG9XswO
krH047c30vGspnW5PhhxiiDJE4tMyQWOVCoDF1+0I55Xp2QCbFqLeidlCQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPl/BldNNgzD1SHDGEkB+wAL8oRmMB8GA1UdIwQY
MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt
YWI3ZjE0ZGFhZTRmLzEvMS1YOEdWMDAyRE1QVkljTVlTUUg3QUF2eWhHWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjgvYjMzNDgxLTY2MzQtNGQwOS1iZjEyLWFiN2YxNGRhYWU0
Zi8xL0tXQVdyV1RDSmdDczh3U2ZoMWoxUHJzZVY4US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhXNjAN
BgkqhkiG9w0BAQsFAAOCAQEASJZesLQasRu67HcvLoXIqSch5S5HPp0o92jEkcVb
UpLwJQsz9m0t9AKlVM+xJoDbzMQBgKty0xDLedZO2PqWlWYVh0RQfR5ndhCaTpTK
LT303Q/tN8VlRL2VH5Mi0SZxQIToXrtbIc8LnkdGoionVoVpFjtEGIk7S7xwIq/L
60HqMzKeOrVHq33aAKVvvp1Q5Y9cbYvlZSqKhCV0yj1IJH6LSXwrg6kpFSRn0X/6
IlfNXPZJK0UT4DuQpIypk++0rGyBJe4ULskt3d4/xmW8T0VFrZhAb01OvVnIgeQM
SO4oFLe8UH3FLYrZ30kehMHYfjvIGLdP95IUjPT2reAKwg==
-----END CERTIFICATE-----
Generated at Thu Aug 8 07:51:21 2024 by rpki-client on console.sobornost.net