Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/KU30IP3J84RJMjwiNP6eb98xA_o.roa
File:                     KU30IP3J84RJMjwiNP6eb98xA_o.roa (raw, json)
Hash identifier:          DwlqMtukDcC8MAqORTzdlTWJBiMUONomYVMlqFDlnGc=
Subject key identifier:   29:4D:F4:20:FD:C9:F3:84:49:32:3C:22:34:FE:9E:6F:DF:31:03:FA
Certificate issuer:       /CN=530a80cf6dbd0748ed117d56de533cc37fd1719f
Certificate serial:       4813
Authority key identifier: 53:0A:80:CF:6D:BD:07:48:ED:11:7D:56:DE:53:3C:C3:7F:D1:71:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UwqAz229B0jtEX1W3lM8w3_RcZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/KU30IP3J84RJMjwiNP6eb98xA_o.roa
Signing time:             Sat 12 Feb 2022 13:39:40 +0000
ROA not before:           Sat 12 Feb 2022 13:39:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206766
IP address blocks:        146.19.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18451 (0x4813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530a80cf6dbd0748ed117d56de533cc37fd1719f
        Validity
            Not Before: Feb 12 13:39:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=294df420fdc9f38449323c2234fe9e6fdf3103fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:df:09:ff:df:7e:6d:83:30:df:6c:fe:09:30:
                    91:a3:ff:05:8a:a9:6b:e9:62:47:22:b8:66:a6:d1:
                    4a:32:3e:5b:9d:bb:04:38:3f:e1:21:49:9c:79:fe:
                    7c:4c:69:03:df:56:58:27:2d:1f:5c:92:eb:4a:93:
                    0e:b5:7b:5b:07:d8:72:60:c5:01:c6:e8:0f:06:2b:
                    07:55:20:3a:96:13:51:f0:1f:93:8f:28:ab:0a:d8:
                    16:4e:30:f4:95:25:09:87:3d:70:11:3b:60:36:6f:
                    5f:77:1c:a1:71:ea:23:c5:5a:66:4b:b3:f0:05:3a:
                    45:94:9e:27:79:32:c9:ff:38:00:d6:04:9c:33:4f:
                    dd:d9:30:70:89:b9:95:6f:21:10:6b:88:27:35:97:
                    ca:4c:34:05:59:34:82:d7:16:0c:7d:a8:39:f5:b8:
                    39:bd:77:11:dc:36:a3:6a:8d:c2:a4:35:2e:7b:3e:
                    55:fa:86:4e:e1:b3:72:db:f6:24:85:0b:c9:d0:1f:
                    56:33:88:7a:80:6c:09:1f:58:66:44:9e:84:b9:ca:
                    5a:19:99:1a:9d:44:39:16:20:27:fb:a9:bb:13:e7:
                    91:52:be:b4:0d:34:0c:60:3a:56:6c:c7:5c:e8:8e:
                    cb:05:61:e9:53:81:f8:54:0b:50:80:ac:e0:c5:44:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:F4:20:FD:C9:F3:84:49:32:3C:22:34:FE:9E:6F:DF:31:03:FA
            X509v3 Authority Key Identifier:
                keyid:53:0A:80:CF:6D:BD:07:48:ED:11:7D:56:DE:53:3C:C3:7F:D1:71:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwqAz229B0jtEX1W3lM8w3_RcZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/KU30IP3J84RJMjwiNP6eb98xA_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d096ee-cb19-47af-b0fe-08cae50f0060/1/UwqAz229B0jtEX1W3lM8w3_RcZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:80:e7:79:95:a0:0c:40:f8:e5:d4:61:a8:a5:88:bd:fa:c6:
         2f:e6:b1:ff:3a:75:1c:89:b1:06:55:7d:07:e6:b9:75:a9:37:
         58:8c:a5:63:76:b5:67:2b:37:57:f5:e2:01:49:4e:eb:c1:b6:
         d1:6a:72:18:f5:b2:51:74:a4:96:ba:b7:30:34:bf:5d:bd:fe:
         fa:80:1c:be:b8:d3:dc:37:0d:85:f6:44:3d:cf:31:9f:1d:b1:
         5a:d8:f1:12:57:56:bb:6d:b9:5f:a7:af:5a:ab:f6:28:5f:10:
         fc:be:2f:5a:cb:87:0c:df:81:4f:f3:11:a2:82:c4:8f:bc:df:
         74:60:e3:a4:9e:cc:72:ce:3e:a3:fd:f5:ef:aa:8d:5e:29:94:
         d0:d5:3c:fd:f0:69:c6:d1:a7:86:de:5d:0d:00:1a:a8:fb:ca:
         4e:dc:73:da:30:8b:e2:2c:33:d3:dd:74:46:d9:4e:5c:73:be:
         5e:40:24:aa:fa:b4:00:bf:87:75:7c:04:fc:c7:4b:c3:8a:0e:
         8b:99:53:1e:f6:22:b9:a2:90:79:07:66:f3:d6:00:69:91:01:
         d9:8d:7d:3b:d5:9b:c5:c9:ad:42:7c:3f:76:4e:fc:ab:d0:09:
         95:99:d1:85:20:f7:0a:00:07:2b:ca:42:29:45:71:31:8c:0d:
         b7:d7:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:37 2024 by rpki-client on console-ams.rpki-client.org