Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_F8ZIzJCKKwLvvh28uzEu9SCTsQ.roa
File:                     _F8ZIzJCKKwLvvh28uzEu9SCTsQ.roa (raw, json)
Hash identifier:          LUplaKDvPNs8HllYNyBtsmCrTifPY71Ti9J9aDobLyI=
Subject key identifier:   FC:5F:19:23:32:42:28:AC:0B:BE:F8:76:F2:EC:C4:BB:D4:82:4E:C4
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       01859D5EE35F06019BB4703FD7AE78CF4D58
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_F8ZIzJCKKwLvvh28uzEu9SCTsQ.roa
Signing time:             Tue 10 Jan 2023 20:28:39 +0000
ROA not before:           Tue 10 Jan 2023 20:28:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400810
IP address blocks:        141.98.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9d:5e:e3:5f:06:01:9b:b4:70:3f:d7:ae:78:cf:4d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jan 10 20:28:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc5f1923324228ac0bbef876f2ecc4bbd4824ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:a0:b0:4c:3c:e2:2d:e4:a6:ec:7d:8c:81:
                    a3:80:5b:cc:19:61:d2:fd:b7:08:47:ff:5b:c7:9a:
                    7b:0e:e9:44:a9:b8:97:5e:b7:63:d9:77:59:94:3d:
                    47:3d:21:27:38:43:6b:0c:bd:c4:a1:27:1c:90:6d:
                    cc:7c:e6:aa:d9:dc:3e:e1:8c:98:86:26:65:5f:85:
                    c9:9b:47:ab:58:55:08:4f:12:0b:59:fe:2e:0e:e0:
                    b9:81:9c:81:db:71:de:94:41:e5:ca:eb:47:e7:cd:
                    61:af:53:b0:28:cb:0a:08:ed:33:32:68:d9:d6:0c:
                    07:52:d3:e3:65:46:1f:54:d4:58:e1:ef:bf:56:e8:
                    e3:c4:a9:15:06:e0:33:6f:6e:f4:7f:fc:67:fa:b7:
                    ba:b8:92:05:ef:60:2b:ea:21:cd:42:f8:b2:4a:ba:
                    cc:c6:2b:e5:06:cc:be:0a:bc:3f:d3:fb:20:fe:16:
                    19:8c:6b:e9:91:99:f2:e3:47:57:2b:85:eb:81:86:
                    76:c6:2b:6d:4e:6d:32:4e:4f:b0:a0:d2:29:cc:fa:
                    f9:0f:a6:60:a7:7d:36:5a:cc:b7:dd:62:3c:19:70:
                    5f:06:ac:7b:e8:1d:99:96:1e:c1:42:6a:e3:e8:d6:
                    0f:17:6a:ed:f9:fd:81:fc:aa:c1:d4:a3:ae:2f:e5:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:19:23:32:42:28:AC:0B:BE:F8:76:F2:EC:C4:BB:D4:82:4E:C4
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/_F8ZIzJCKKwLvvh28uzEu9SCTsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:03:0a:bc:46:e6:c7:c4:5a:81:bd:ff:55:5c:a6:52:89:74:
         1f:94:3f:53:c7:cb:8d:19:ec:bc:2f:3e:e4:42:39:94:b7:d6:
         2a:5c:d8:87:c4:f7:dc:1e:93:8b:8f:f7:e2:26:e9:96:31:b5:
         23:03:eb:6c:9f:14:92:8e:2a:46:c0:c6:b7:4f:f7:b3:f0:4d:
         b9:34:21:23:a5:1c:66:cc:74:66:3a:78:09:14:04:28:e8:59:
         03:5d:ea:eb:7d:05:3e:e0:3d:0a:b7:bb:f7:cb:80:71:23:97:
         1e:e0:e3:69:9a:58:1a:3e:15:21:e8:5c:3e:08:8b:fe:5f:47:
         47:a7:06:66:de:d6:2b:0a:6a:60:c7:ae:cd:1c:42:77:f5:41:
         a1:6d:24:33:48:18:d9:2c:cf:dc:67:52:78:95:c1:af:41:aa:
         ff:32:b4:e6:be:33:e9:49:49:a1:16:13:53:cf:56:cd:8a:dd:
         93:55:71:d3:58:bf:b0:ec:d3:3f:dd:b4:18:46:a3:ec:39:e2:
         f5:10:81:32:40:d7:6a:b7:26:8b:1f:5c:73:32:fc:87:94:3d:
         cf:e2:f4:db:f4:11:22:a7:cd:9f:86:3c:8f:dd:03:c4:b7:df:
         37:9f:b9:82:b7:6e:3b:50:c3:0c:aa:17:6c:26:b7:9f:69:1c:
         84:98:82:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWdXuNfBgGbtHA/1654z01YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjMwMTEwMjAyODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzVmMTkyMzMyNDIyOGFjMGJiZWY4NzZmMmVjYzRiYmQ0ODI0ZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozWgsEw84i3kpux9jIGjgFvMGWHS
/bcIR/9bx5p7DulEqbiXXrdj2XdZlD1HPSEnOENrDL3EoScckG3MfOaq2dw+4YyY
hiZlX4XJm0erWFUITxILWf4uDuC5gZyB23HelEHlyutH581hr1OwKMsKCO0zMmjZ
1gwHUtPjZUYfVNRY4e+/VujjxKkVBuAzb270f/xn+re6uJIF72Ar6iHNQviySrrM
xivlBsy+Crw/0/sg/hYZjGvpkZny40dXK4XrgYZ2xittTm0yTk+woNIpzPr5D6Zg
p302Wsy33WI8GXBfBqx76B2Zlh7BQmrj6NYPF2rt+f2B/KrB1KOuL+UIEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxfGSMyQiisC774dvLsxLvUgk7EMB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvX0Y4Wkl6SkNLS3dMdnZoMjh1ekV1OVNDVHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJKMA0G
CSqGSIb3DQEBCwUAA4IBAQAzAwq8RubHxFqBvf9VXKZSiXQflD9Tx8uNGey8Lz7k
QjmUt9YqXNiHxPfcHpOLj/fiJumWMbUjA+tsnxSSjipGwMa3T/ez8E25NCEjpRxm
zHRmOngJFAQo6FkDXerrfQU+4D0Kt7v3y4BxI5ce4ONpmlgaPhUh6Fw+CIv+X0dH
pwZm3tYrCmpgx67NHEJ39UGhbSQzSBjZLM/cZ1J4lcGvQar/MrTmvjPpSUmhFhNT
z1bNit2TVXHTWL+w7NM/3bQYRqPsOeL1EIEyQNdqtyaLH1xzMvyHlD3P4vTb9BEi
p82fhjyP3QPEt983n7mCt247UMMMqhdsJrefaRyEmIKX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org