Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IsEGAdH2OBfKn-tWISeQfYGRAbA.roa
File:                     IsEGAdH2OBfKn-tWISeQfYGRAbA.roa (raw, json)
Hash identifier:          EjKSFtwRpsWO7E2Fai/Zud7Djq3W37CbWj2KwW3CFGQ=
Subject key identifier:   22:C1:06:01:D1:F6:38:17:CA:9F:EB:56:21:27:90:7D:81:91:01:B0
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       043AC0A7
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IsEGAdH2OBfKn-tWISeQfYGRAbA.roa
Signing time:             Wed 27 Apr 2022 17:27:01 +0000
ROA not before:           Wed 27 Apr 2022 17:27:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        141.11.19.0/24 maxlen: 24
                          141.11.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70959271 (0x43ac0a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Apr 27 17:27:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=22c10601d1f63817ca9feb562127907d819101b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:e3:e4:f4:64:f0:b8:3c:85:3a:4e:25:60:
                    ed:b6:55:01:6d:30:69:24:f3:76:3d:52:d0:91:49:
                    f1:39:86:5d:b4:d5:cd:e2:97:f0:fe:16:24:61:7d:
                    d9:f6:85:45:b2:29:96:92:2a:80:df:59:21:c5:39:
                    ee:5d:40:72:fc:73:d0:b7:98:83:98:0c:61:72:b8:
                    74:11:1b:18:08:ed:cc:54:13:8b:58:7f:75:c5:19:
                    9c:d1:ac:71:53:a1:fd:ad:cb:70:96:72:6b:01:b4:
                    60:b6:d5:62:32:d5:75:dc:9b:b3:dc:93:8b:de:12:
                    f0:51:21:ba:47:c7:7c:fb:f4:41:19:4f:8b:ba:74:
                    af:a8:75:bb:9b:6c:ef:62:fd:de:1a:02:ff:28:ce:
                    1e:4d:c1:5b:6e:af:7e:25:f2:ff:ac:43:89:4f:f2:
                    48:ec:41:7c:8c:71:02:79:63:d1:57:a4:30:6f:1c:
                    f1:7f:22:b4:f0:54:ca:71:5c:9d:26:80:cf:2c:96:
                    84:ca:ae:18:25:66:bc:93:0d:16:4d:b5:7c:d3:32:
                    66:56:b1:62:72:06:d6:99:6e:a7:fb:fb:4b:ce:9c:
                    8f:b5:65:95:d2:f6:f1:12:37:0d:d0:88:01:77:0f:
                    0b:4a:95:9d:dc:85:4f:74:ae:e5:36:ec:7a:3f:0f:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C1:06:01:D1:F6:38:17:CA:9F:EB:56:21:27:90:7D:81:91:01:B0
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/IsEGAdH2OBfKn-tWISeQfYGRAbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.19.0/24
                  141.11.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:27:3f:57:6b:9b:40:62:19:e0:88:0f:5f:f8:83:ab:c2:41:
         c9:27:73:e3:51:de:14:c2:66:94:88:c3:81:a2:42:fd:61:00:
         27:7e:c6:e9:0c:09:52:86:af:09:e7:7e:86:4d:49:f6:4a:c9:
         a1:6a:4a:fb:a8:e9:fd:4f:a0:24:12:46:e1:2d:55:7d:da:3f:
         9e:d6:1f:fe:cc:be:ab:5b:dc:0c:f5:ca:f7:0f:bd:15:02:e2:
         b2:f2:2f:d5:6c:a7:f2:65:c5:63:a1:31:fc:dd:5d:19:27:e6:
         02:2e:99:b5:b1:25:ac:46:79:dc:f4:e2:3b:6f:4e:6d:a1:28:
         ee:66:a1:fa:77:5f:3a:cf:53:72:55:a2:ed:83:b9:72:8b:38:
         1c:b7:32:c5:f3:5c:06:8a:f3:e3:6b:ce:78:15:dd:40:86:b7:
         8b:87:28:1c:cb:56:89:87:4f:04:4b:28:70:1f:fc:14:6c:c7:
         b3:67:7f:fb:0e:0e:19:18:e0:26:63:7a:3f:f8:6b:d1:bf:c2:
         3c:a9:35:42:b7:cb:e8:a7:d6:ef:01:db:28:9e:0d:2b:9a:b1:
         82:4b:05:f6:78:79:69:a0:d5:ff:30:fc:fd:ed:7f:d9:c1:eb:
         dd:ae:bc:ee:9a:44:db:1b:f8:f4:f0:f8:44:2b:7e:6c:9f:06:
         d6:03:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:16 2023 by rpki-client on console-fra.rpki-client.org