Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/9JePhEqljOKRurhTUw8mjNlDyjw.roa
File:                     9JePhEqljOKRurhTUw8mjNlDyjw.roa (raw, json)
Hash identifier:          l44NytCocaXvpuS8QqWr0x31xPMatjqd06k4J35+J5A=
Subject key identifier:   F4:97:8F:84:4A:A5:8C:E2:91:BA:B8:53:53:0F:26:8C:D9:43:CA:3C
Certificate issuer:       /CN=ff748f1b9b4bd0cb60049e83c6552667756cb775
Certificate serial:       0181F299FA428FD1727994CB9A5CD18A8A5D
Authority key identifier: FF:74:8F:1B:9B:4B:D0:CB:60:04:9E:83:C6:55:26:67:75:6C:B7:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/9JePhEqljOKRurhTUw8mjNlDyjw.roa
Signing time:             Tue 12 Jul 2022 13:29:46 +0000
ROA not before:           Tue 12 Jul 2022 13:29:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197883
IP address blocks:        94.154.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f2:99:fa:42:8f:d1:72:79:94:cb:9a:5c:d1:8a:8a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff748f1b9b4bd0cb60049e83c6552667756cb775
        Validity
            Not Before: Jul 12 13:29:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4978f844aa58ce291bab853530f268cd943ca3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:b8:93:3c:c7:3a:89:44:46:c0:17:0d:7e:
                    6d:33:04:00:49:98:73:0d:d7:a7:88:9b:85:e5:7b:
                    86:9d:31:71:6c:24:1f:28:2e:dd:b8:97:19:04:79:
                    6d:64:3d:3d:f5:6e:c9:78:64:1d:ea:ca:ca:e0:ee:
                    65:c2:4a:c8:1e:86:85:6e:08:39:b8:df:7e:9e:26:
                    8a:64:c8:70:28:b9:5a:6f:9b:9f:3f:bd:77:56:e0:
                    ff:bd:40:19:71:12:60:25:04:ef:13:b9:c2:8a:a9:
                    4a:ca:50:60:d3:e4:7a:65:54:5d:23:dc:9b:09:82:
                    e8:a0:cc:5c:70:08:a2:92:57:50:1d:25:91:c2:67:
                    5f:25:35:e2:35:55:92:0f:c3:f5:20:d9:70:d7:bb:
                    cb:c0:d8:ca:99:31:fa:70:8f:ca:04:b8:ae:e8:6b:
                    3b:38:86:4a:35:71:90:79:9c:f1:59:e3:73:d2:fc:
                    32:00:62:51:23:d7:ce:8d:74:4c:35:a1:29:49:14:
                    4d:80:39:09:08:76:7c:a3:ac:c6:58:bc:2e:9f:16:
                    31:e7:0b:eb:a0:1b:88:ad:64:83:1e:05:17:6a:0e:
                    64:a7:16:3b:1c:92:cf:f1:8b:d3:fc:9b:eb:c2:49:
                    08:9b:1e:0f:29:3f:b3:cf:44:ed:b7:56:da:03:20:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:97:8F:84:4A:A5:8C:E2:91:BA:B8:53:53:0F:26:8C:D9:43:CA:3C
            X509v3 Authority Key Identifier:
                keyid:FF:74:8F:1B:9B:4B:D0:CB:60:04:9E:83:C6:55:26:67:75:6C:B7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/9JePhEqljOKRurhTUw8mjNlDyjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a5d3a4-b1b8-4ed7-b27f-7349d293ac1a/1/_3SPG5tL0MtgBJ6DxlUmZ3Vst3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:51:f1:1c:60:4d:a1:83:13:94:da:f1:81:7c:90:14:a3:5e:
         7d:02:8e:67:b1:4e:98:df:0d:05:94:b2:32:fb:ae:23:c7:00:
         a6:27:c7:a3:5e:31:23:32:71:dc:a7:26:f2:82:13:60:9d:66:
         49:e1:b8:0c:66:81:64:be:7d:5b:0c:58:d0:00:d0:7c:71:6d:
         1b:b9:34:16:38:97:97:f4:60:1b:8e:50:59:cc:e5:a5:ab:d6:
         09:9f:8b:67:17:a2:19:0c:4b:65:09:9b:97:36:69:d3:64:e6:
         ad:ba:40:7e:14:d4:92:00:e5:83:c4:04:8a:51:06:93:3a:df:
         c6:a7:64:1e:d6:61:79:ca:60:eb:db:b3:0b:ae:5c:92:d3:8e:
         ba:46:8b:11:22:45:39:e1:2f:8f:7d:09:7e:f9:b5:ed:db:ab:
         6a:a6:9d:37:bf:ef:b3:b7:08:67:ac:ef:80:67:8c:52:03:89:
         5d:b9:2b:e2:27:fc:b5:77:37:0b:ac:e1:8c:b6:2e:ee:8d:c7:
         fa:a4:4f:1b:38:e3:a2:c1:df:ca:64:64:61:a6:ca:25:3d:62:
         ab:e7:6a:b0:b9:08:8a:94:67:62:f4:c9:b2:ad:ac:48:45:fd:
         69:d5:8e:45:0c:7c:11:f2:c9:c5:d5:c7:dd:5d:ba:88:7a:8f:
         23:ee:8a:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHymfpCj9FyeZTLmlzRiopdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzQ4ZjFiOWI0YmQwY2I2MDA0OWU4M2M2NTUyNjY3NzU2
Y2I3NzUwHhcNMjIwNzEyMTMyOTQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDk3OGY4NDRhYTU4Y2UyOTFiYWI4NTM1MzBmMjY4Y2Q5NDNjYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLu4kzzHOolERsAXDX5tMwQASZhz
DdeniJuF5XuGnTFxbCQfKC7duJcZBHltZD099W7JeGQd6srK4O5lwkrIHoaFbgg5
uN9+niaKZMhwKLlab5ufP713VuD/vUAZcRJgJQTvE7nCiqlKylBg0+R6ZVRdI9yb
CYLooMxccAiikldQHSWRwmdfJTXiNVWSD8P1INlw17vLwNjKmTH6cI/KBLiu6Gs7
OIZKNXGQeZzxWeNz0vwyAGJRI9fOjXRMNaEpSRRNgDkJCHZ8o6zGWLwunxYx5wvr
oBuIrWSDHgUXag5kpxY7HJLP8YvT/JvrwkkImx4PKT+zz0Ttt1baAyBj3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPSXj4RKpYzikbq4U1MPJozZQ8o8MB8GA1UdIwQY
MBaAFP90jxubS9DLYASeg8ZVJmd1bLd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNTUEc1dEwwTXRnQko2RHhsVW1aM1ZzdDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9hNWQzYTQtYjFiOC00ZWQ3LWIyN2Yt
NzM0OWQyOTNhYzFhLzEvOUplUGhFcWxqT0tSdXJoVFV3OG1qTmxEeWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9hNWQzYTQtYjFiOC00ZWQ3LWIyN2YtNzM0OWQyOTNhYzFh
LzEvXzNTUEc1dEwwTXRnQko2RHhsVW1aM1ZzdDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp3MA0G
CSqGSIb3DQEBCwUAA4IBAQBnUfEcYE2hgxOU2vGBfJAUo159Ao5nsU6Y3w0FlLIy
+64jxwCmJ8ejXjEjMnHcpybyghNgnWZJ4bgMZoFkvn1bDFjQANB8cW0buTQWOJeX
9GAbjlBZzOWlq9YJn4tnF6IZDEtlCZuXNmnTZOatukB+FNSSAOWDxASKUQaTOt/G
p2Qe1mF5ymDr27MLrlyS0466RosRIkU54S+PfQl++bXt26tqpp03v++ztwhnrO+A
Z4xSA4lduSviJ/y1dzcLrOGMti7ujcf6pE8bOOOiwd/KZGRhpsolPWKr52qwuQiK
lGdi9MmyraxIRf1p1Y5FDHwR8snF1cfdXbqIeo8j7oq7
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net