Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGI0hXQ89LKoSK8AnUDvy2qSYOs.roa
File:                     CGI0hXQ89LKoSK8AnUDvy2qSYOs.roa (raw, json)
Hash identifier:          VWjp7UrYjs5FMz2QoD453uMIl2ErzSxmcPi0A+16Ppg=
Subject key identifier:   08:62:34:85:74:3C:F4:B2:A8:48:AF:00:9D:40:EF:CB:6A:92:60:EB
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       048EEA37
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGI0hXQ89LKoSK8AnUDvy2qSYOs.roa
Signing time:             Wed 11 May 2022 15:00:08 +0000
ROA not before:           Wed 11 May 2022 15:00:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207152
IP address blocks:        141.11.230.0/23 maxlen: 24
                          141.11.228.0/23 maxlen: 24
                          141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76474935 (0x48eea37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 11 15:00:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08623485743cf4b2a848af009d40efcb6a9260eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:8d:fa:e5:05:12:00:b1:0c:4c:48:47:18:
                    27:d3:14:9f:44:c8:9e:1e:8d:4c:c1:fc:47:a7:99:
                    3c:e9:42:ac:3f:07:e8:1a:1a:7c:55:80:d2:a8:b8:
                    4c:8e:7b:7a:ad:33:83:5a:bb:d5:c4:26:cd:80:66:
                    8a:f0:e1:26:08:c1:68:3b:6a:a0:02:49:65:9a:56:
                    33:a1:f9:f0:19:dc:b7:df:0b:43:5e:d9:51:ff:f9:
                    93:08:b0:50:fb:ef:d3:24:1a:40:9e:1f:da:4f:d0:
                    01:e0:49:ae:5b:45:67:40:dc:eb:c2:ff:d5:28:b7:
                    b6:97:ae:47:06:76:f5:e8:0e:93:48:b9:0d:de:9e:
                    3c:96:0b:d9:13:8a:d9:b0:fa:cf:58:f8:6c:0b:d4:
                    05:03:dd:1a:32:3d:8a:49:1c:fb:e0:61:cf:63:78:
                    ac:41:0e:4d:f7:ef:70:a9:78:a4:46:e9:4b:f9:d8:
                    e5:8b:73:00:78:fe:25:cd:83:24:ee:9f:28:26:85:
                    7c:7c:5b:43:9d:b4:a5:a9:c2:d2:d6:b4:2b:88:48:
                    fd:b1:91:40:93:7a:3e:56:70:e6:10:38:67:9e:51:
                    c8:0b:9e:c6:3b:e9:84:c7:c0:ee:55:f1:ce:b8:04:
                    f0:e3:6b:55:94:82:2c:7e:32:87:1e:a2:56:a4:3e:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:62:34:85:74:3C:F4:B2:A8:48:AF:00:9D:40:EF:CB:6A:92:60:EB
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/CGI0hXQ89LKoSK8AnUDvy2qSYOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.228.0/22
                  141.11.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:9d:45:09:f8:ea:3c:5d:66:d6:8d:46:1e:a4:be:3f:df:30:
         1f:80:99:48:51:df:ce:af:1e:7d:f2:3f:a0:f2:5a:1c:48:a5:
         2a:ec:fa:3b:e1:d5:74:63:e7:6c:d9:1c:07:b4:61:7f:70:ed:
         9a:31:aa:ee:dc:ca:a9:cb:1a:30:10:fa:96:12:80:b1:b3:35:
         2a:43:06:10:37:32:d2:d1:02:ea:d3:7f:b2:9c:e2:ec:68:45:
         96:17:2e:ea:1f:16:2c:f2:7e:87:cf:18:37:0a:e8:5b:be:e1:
         8e:66:35:d6:a5:8f:08:42:23:77:87:0b:65:a7:04:9f:38:d2:
         b2:35:53:a2:bb:b8:8a:3f:21:90:b9:6c:b6:7e:98:7b:cb:ec:
         bf:3a:45:bc:35:3c:15:15:8c:33:a6:ea:5e:cb:80:70:4e:b0:
         ac:4f:0c:f2:8c:66:db:0c:74:7e:cc:47:83:9e:35:b8:69:5b:
         69:a9:60:f5:b6:d4:23:34:ac:14:d2:f2:f7:24:c0:a8:d9:41:
         d9:4e:93:7d:a6:24:1d:63:7c:d7:c5:f7:50:2d:69:65:1a:85:
         9c:9f:1b:9c:47:34:d0:2b:e2:bc:f4:10:ff:43:40:cf:94:83:
         62:58:c9:e2:2b:a3:9a:10:e8:4e:64:eb:3b:4b:8e:07:bc:4f:
         bc:b3:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org