Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/61CY9JDG5ZVCLQDcNRFdqqzimbU.roa
File:                     61CY9JDG5ZVCLQDcNRFdqqzimbU.roa (raw, json)
Hash identifier:          dKoh7oeuaGnUPLKLGay+mBbOeW0/h4oUvVd72jwVOek=
Subject key identifier:   EB:50:98:F4:90:C6:E5:95:42:2D:00:DC:35:11:5D:AA:AC:E2:99:B5
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0477D25C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/61CY9JDG5ZVCLQDcNRFdqqzimbU.roa
Signing time:             Mon 09 May 2022 10:33:16 +0000
ROA not before:           Mon 09 May 2022 10:33:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        141.11.44.0/22 maxlen: 24
                          141.11.43.0/24 maxlen: 24
                          141.11.40.0/22 maxlen: 24
                          141.11.39.0/24 maxlen: 24
                          141.11.42.0/24 maxlen: 24
                          141.11.41.0/24 maxlen: 24
                          141.11.45.0/24 maxlen: 24
                          141.11.47.0/24 maxlen: 24
                          141.11.46.0/24 maxlen: 24
                          141.11.80.0/20 maxlen: 24
                          141.11.2.0/24 maxlen: 24
                          141.11.1.0/24 maxlen: 24
                          141.11.0.0/24 maxlen: 24
                          141.11.10.0/23 maxlen: 24
                          141.11.17.0/24 maxlen: 24
                          141.11.22.0/24 maxlen: 24
                          141.11.21.0/24 maxlen: 24
                          141.11.18.0/24 maxlen: 24
                          141.11.25.0/24 maxlen: 24
                          141.11.31.0/24 maxlen: 24
                          141.11.28.0/24 maxlen: 24
                          141.11.37.0/24 maxlen: 24
                          141.11.33.0/24 maxlen: 24
                          141.11.32.0/22 maxlen: 24
                          141.11.35.0/24 maxlen: 24
                          141.11.160.0/24 maxlen: 24
                          141.11.176.0/24 maxlen: 24
                          141.11.182.0/23 maxlen: 24
                          141.11.192.0/19 maxlen: 24
                          141.11.92.0/22 maxlen: 24
                          141.11.128.0/19 maxlen: 24
                          141.11.240.0/21 maxlen: 24
                          141.11.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74961500 (0x477d25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  9 10:33:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb5098f490c6e595422d00dc35115daaace299b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:03:ad:6c:c6:52:96:e0:de:ef:7e:d2:6e:
                    a3:28:49:9c:36:9a:4f:bc:1b:a1:8e:a4:a1:f5:32:
                    45:5c:2b:45:d8:7f:4c:d4:3c:7a:f4:f0:c0:83:34:
                    87:48:14:46:08:e2:46:34:e4:48:5e:4b:fe:97:2f:
                    96:a6:f8:f7:c7:27:fc:d5:2f:ab:a1:8e:46:1f:ac:
                    2d:2e:d8:c9:c3:fa:3c:08:09:8b:33:65:f5:77:39:
                    c5:18:50:be:20:2f:64:af:0c:d6:44:29:0d:8c:72:
                    c2:19:5b:5c:87:03:bb:23:39:a0:bc:ff:c0:e5:07:
                    7d:f5:53:b1:d4:fa:21:9f:a5:d1:8d:df:c2:0b:4d:
                    e3:27:77:f8:10:8f:1b:17:4b:75:2d:24:02:72:28:
                    52:a7:32:41:8d:e7:25:88:c7:e8:a4:96:ad:c6:5e:
                    75:be:92:ac:fc:d7:74:45:2d:89:ea:87:a0:80:8d:
                    27:a3:0c:52:99:6d:63:98:dd:86:7e:da:05:80:fe:
                    3b:3f:da:49:69:84:a8:95:66:12:29:7f:96:ba:46:
                    7b:69:b1:61:22:c4:c6:1f:94:20:05:10:f7:df:3a:
                    c2:55:5a:fa:e6:81:ef:38:57:de:4b:bb:21:3f:44:
                    73:34:05:56:d9:80:c6:48:30:da:41:5a:1b:30:c5:
                    16:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:50:98:F4:90:C6:E5:95:42:2D:00:DC:35:11:5D:AA:AC:E2:99:B5
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/61CY9JDG5ZVCLQDcNRFdqqzimbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.0.0-141.11.2.255
                  141.11.10.0/23
                  141.11.17.0-141.11.18.255
                  141.11.21.0-141.11.22.255
                  141.11.25.0/24
                  141.11.28.0/24
                  141.11.31.0-141.11.35.255
                  141.11.37.0/24
                  141.11.39.0-141.11.47.255
                  141.11.80.0/20
                  141.11.128.0-141.11.160.255
                  141.11.176.0/24
                  141.11.182.0/23
                  141.11.192.0/19
                  141.11.240.0-141.11.251.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:d8:f2:30:aa:bb:c0:c5:12:8c:bd:7c:6d:91:b7:a0:2d:
         97:73:05:1b:97:4b:7d:33:f2:c9:8e:48:1a:43:10:9e:e2:b1:
         65:3c:a0:85:ff:df:fa:bb:fb:a6:9f:4a:04:72:3f:f3:a9:41:
         ad:a0:f5:ef:1c:2d:31:1e:67:36:45:70:25:ff:d6:7a:e0:86:
         76:d5:d6:21:27:fa:87:99:9e:b5:95:1c:b8:57:aa:5f:5d:cb:
         f2:02:f3:4f:34:b5:16:a1:67:80:40:43:4d:0d:3b:ed:dd:32:
         05:52:d1:de:27:32:dd:d3:12:6c:b2:8c:81:82:d1:ab:62:59:
         b4:f4:5e:a3:dd:66:ee:80:8c:fe:e4:44:0b:2d:4f:66:9d:28:
         46:ba:ce:44:a1:d0:ee:f1:4a:e1:24:11:e9:81:97:2e:3d:d7:
         57:96:ba:22:80:2c:3d:dc:89:f4:ea:19:5c:01:12:56:05:5c:
         d9:22:1c:9d:fb:bc:b2:39:24:49:00:14:9a:c9:8f:56:51:21:
         41:2f:de:2d:27:22:67:0e:64:8e:9b:06:2e:0d:81:07:cd:16:
         47:3d:4d:2a:66:7d:78:cc:3e:22:0d:d1:2a:6d:95:7c:33:b1:
         62:00:8f:21:90:77:8b:7a:6f:8d:dc:40:a0:c3:8f:be:87:7b:
         54:51:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:14 2023 by rpki-client on console-fra.rpki-client.org