Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AcbF-3sGWGR01dTpAkVQOrFZgBM.roa
File:                     AcbF-3sGWGR01dTpAkVQOrFZgBM.roa (raw, json)
Hash identifier:          30FHgvSBSOJ9NLvqwYjIFGECEs3ZG90ANwMPw8xl0aM=
Subject key identifier:   01:C6:C5:FB:7B:06:58:64:74:D5:D4:E9:02:45:50:3A:B1:59:80:13
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       040D8A74
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AcbF-3sGWGR01dTpAkVQOrFZgBM.roa
Signing time:             Fri 15 Apr 2022 15:36:58 +0000
ROA not before:           Fri 15 Apr 2022 15:36:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        92.114.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67996276 (0x40d8a74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Apr 15 15:36:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01c6c5fb7b06586474d5d4e90245503ab1598013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:71:4f:7f:b9:c8:ab:e2:01:18:64:22:fe:
                    51:bd:86:81:7b:ca:a6:aa:f9:d0:e0:fa:89:d0:00:
                    be:e6:9c:9e:80:94:cc:e9:38:bf:f7:d0:3a:77:21:
                    5d:fb:56:69:d5:ca:66:d2:25:6f:22:da:a4:b8:9b:
                    c8:11:05:95:46:c1:34:de:43:ab:76:62:f1:80:73:
                    1e:fe:cf:5e:66:08:ad:21:ba:69:66:98:5d:7c:dc:
                    ef:d9:43:17:c1:77:04:58:7c:e7:77:3d:2c:73:74:
                    5b:94:c2:aa:1c:97:68:f7:3b:16:f5:68:94:fc:40:
                    50:0d:1d:dd:f5:74:f0:4d:27:04:c4:51:44:12:e7:
                    6e:e4:0c:41:60:e2:89:2b:40:b2:9e:c0:dd:4e:a5:
                    05:28:92:31:43:42:53:f7:11:c3:3f:ea:0d:6d:d9:
                    54:d0:8e:9f:bc:45:19:83:74:2b:63:bf:b7:29:2c:
                    b9:d8:03:32:24:68:ff:c1:81:c8:f3:0a:64:da:e8:
                    db:2e:4a:1e:ed:8f:50:2f:d4:62:5c:13:b5:1d:d8:
                    6a:aa:6c:26:fc:dc:12:2d:c7:17:1d:13:ad:30:cf:
                    dc:00:63:f8:d1:8f:09:62:44:eb:3a:37:36:5d:a6:
                    90:e5:45:32:63:6d:66:aa:43:e4:f1:9f:b3:24:4e:
                    41:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:C5:FB:7B:06:58:64:74:D5:D4:E9:02:45:50:3A:B1:59:80:13
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AcbF-3sGWGR01dTpAkVQOrFZgBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.114.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:f2:5f:4e:c4:7c:01:2b:92:7e:52:0a:7d:09:c9:e8:ef:95:
         f1:2f:c4:3b:85:f2:3a:82:2b:40:29:26:7e:99:8e:25:37:7a:
         15:2f:94:db:91:a2:d9:cd:00:cc:b1:db:59:71:45:eb:71:59:
         a6:49:f9:85:2c:56:e5:30:84:97:f3:ac:6f:93:07:fd:58:35:
         1f:bb:dc:0f:66:38:ca:6b:70:2a:fc:bd:49:80:91:4d:96:86:
         c0:b3:d7:41:4e:38:16:c0:25:4e:0d:ca:7b:77:49:ef:a4:e3:
         4d:d6:87:65:c3:d8:3f:2d:29:7b:38:1d:f8:b3:68:d9:2f:4e:
         fd:67:ef:30:0c:5a:62:91:bd:43:74:1c:d8:29:e4:fe:2f:14:
         03:bb:be:21:7e:ea:42:f4:f2:a1:e3:de:54:13:aa:8d:92:67:
         99:58:7f:eb:e6:06:0c:48:c4:66:da:f4:48:07:63:76:4c:db:
         7e:f0:ee:0c:49:64:55:ca:be:33:a2:d2:a3:0f:3e:0f:53:bf:
         34:d5:39:c1:7f:ed:48:9d:b2:de:8d:f9:a2:90:2b:9b:09:e1:
         8e:8c:18:1c:04:55:7f:44:03:a3:0c:e8:10:70:0b:8c:92:e7:
         ee:a2:a7:1f:70:5a:41:c5:c9:e9:78:9a:f4:82:b1:5a:e1:b2:
         09:7c:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org