Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/BTDLnkwQM7tzFiPZ4u2JMyWcg1E.roa
File:                     BTDLnkwQM7tzFiPZ4u2JMyWcg1E.roa (raw, json)
Hash identifier:          0Hrr/SXtBx9KfcIzzDAC5wYmty5+qpWcFmm4OwRpA8U=
Subject key identifier:   05:30:CB:9E:4C:10:33:BB:73:16:23:D9:E2:ED:89:33:25:9C:83:51
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       0AFDFC
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/BTDLnkwQM7tzFiPZ4u2JMyWcg1E.roa
Signing time:             Sat 14 May 2022 06:58:40 +0000
ROA not before:           Sat 14 May 2022 06:58:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        213.139.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720380 (0xafdfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: May 14 06:58:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0530cb9e4c1033bb731623d9e2ed8933259c8351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:71:5d:c2:77:3c:1c:21:8b:a9:07:e7:5e:
                    ca:a8:bf:92:a8:5d:e5:ab:5c:a7:00:e2:4d:e5:91:
                    0b:aa:35:db:2f:71:8b:7c:35:4c:6e:c7:8d:36:3b:
                    80:33:96:3e:56:d9:7f:db:ca:ba:b8:f6:5c:30:5b:
                    b7:b7:9f:15:3e:e0:44:7d:c2:7e:30:42:ea:3f:d1:
                    a5:5d:ba:2d:f0:c9:69:ac:ff:bd:7e:89:e1:5c:ab:
                    62:82:d1:3f:db:6d:fc:14:73:e8:6e:8e:94:0e:44:
                    80:5c:c7:60:9e:f0:3c:52:e9:c8:b2:28:a6:6b:65:
                    1a:e9:ab:79:24:ba:ae:62:f4:a8:ce:40:de:64:27:
                    a6:ff:03:eb:1e:11:45:af:b9:c6:dd:b9:5d:64:2e:
                    8c:f2:fe:52:0c:66:8e:ac:9d:5e:c3:7a:40:b8:cb:
                    a1:86:1e:a5:ba:04:86:6b:af:6c:b2:bd:38:35:c1:
                    6d:12:0e:d7:9f:fb:db:f9:40:1c:03:b2:4f:6d:f0:
                    79:fd:38:6f:4c:35:d7:c5:66:5f:43:64:4b:56:cb:
                    da:89:ec:92:4d:d0:c2:d2:61:bb:bc:6c:ca:1e:6a:
                    a0:f6:bd:b5:ad:ef:89:1f:10:0a:9a:47:ce:df:87:
                    ac:1c:15:85:f7:81:dc:d0:34:e0:f0:a5:dd:e7:12:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:30:CB:9E:4C:10:33:BB:73:16:23:D9:E2:ED:89:33:25:9C:83:51
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/BTDLnkwQM7tzFiPZ4u2JMyWcg1E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ba:c3:dc:97:00:40:ad:24:a3:98:2c:fe:b4:ab:6d:65:f3:
         4a:b2:78:e7:31:3c:09:c3:99:69:98:0d:83:0c:67:32:48:1d:
         83:9e:19:4a:0a:b8:b8:d5:4f:d2:ea:ae:f9:ea:e4:6a:43:57:
         fc:73:9a:aa:32:3f:cf:e4:c5:29:41:20:7d:da:f5:84:df:c4:
         aa:21:19:b0:75:02:48:40:20:fb:68:e3:26:af:bb:d8:cd:df:
         d1:81:c6:55:3a:35:7c:c8:1c:8d:0e:5e:47:72:ca:7a:9e:1b:
         98:b4:33:56:1c:1a:04:75:0a:c0:c2:49:21:73:aa:21:f2:9e:
         da:f8:6e:45:e6:e7:08:5e:14:fb:e9:12:19:c0:8c:59:78:ef:
         e9:51:61:38:6c:08:38:ea:ee:73:64:81:7b:74:4c:47:91:2b:
         97:d7:4c:f4:b6:37:a3:50:80:1d:51:e2:cd:4c:6b:77:51:f1:
         c0:a9:2b:cd:dc:5e:67:c9:7f:7a:37:20:ea:00:53:0f:aa:63:
         d5:32:8f:10:69:bb:41:88:58:60:b4:17:36:d1:4e:07:85:f0:
         36:05:ca:d8:71:c2:64:56:72:1a:76:3e:c6:ad:42:cd:12:3c:
         88:ca:8e:aa:69:e2:88:78:79:b5:be:b3:00:52:ed:8b:0d:21:
         90:0a:2f:3c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDCv38MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA5
NDg3NWY0MDY3OTVkYjQyYTAxNzlkZjFmYmZjNWQ2OWFlNzEyZWUwHhcNMjIwNTE0
MDY1ODQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygwNTMwY2I5ZTRjMTAz
M2JiNzMxNjIzZDllMmVkODkzMzI1OWM4MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAys9xXcJ3PBwhi6kH517KqL+SqF3lq1ynAOJN5ZELqjXbL3GL
fDVMbseNNjuAM5Y+Vtl/28q6uPZcMFu3t58VPuBEfcJ+MELqP9GlXbot8MlprP+9
fonhXKtigtE/2238FHPobo6UDkSAXMdgnvA8UunIsiima2Ua6at5JLquYvSozkDe
ZCem/wPrHhFFr7nG3bldZC6M8v5SDGaOrJ1ew3pAuMuhhh6lugSGa69ssr04NcFt
Eg7Xn/vb+UAcA7JPbfB5/ThvTDXXxWZfQ2RLVsvaieySTdDC0mG7vGzKHmqg9r21
re+JHxAKmkfO34esHBWF94Hc0DTg8KXd5xJmbwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFAUwy55MEDO7cxYj2eLtiTMlnINRMB8GA1UdIwQYMBaAFAlIdfQGeV20KgF5
3x+/xdaa5xLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
Q1VoMTlBWjVYYlFxQVhuZkg3X0YxcHJuRXU0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xZS8zMzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgxLzEv
QlRETG5rd1FNN3R6RmlQWjR1MkpNeVdjZzFFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8z
MzZhYWItNGU4Ny00ZDI3LWI0NzUtODY0NTgwZDAyZjgxLzEvQ1VoMTlBWjVYYlFx
QVhuZkg3X0YxcHJuRXU0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YtKMA0GCSqGSIb3DQEBCwUAA4IB
AQBFusPclwBArSSjmCz+tKttZfNKsnjnMTwJw5lpmA2DDGcySB2DnhlKCri41U/S
6q756uRqQ1f8c5qqMj/P5MUpQSB92vWE38SqIRmwdQJIQCD7aOMmr7vYzd/RgcZV
OjV8yByNDl5Hcsp6nhuYtDNWHBoEdQrAwkkhc6oh8p7a+G5F5ucIXhT76RIZwIxZ
eO/pUWE4bAg46u5zZIF7dExHkSuX10z0tjejUIAdUeLNTGt3UfHAqSvN3F5nyX96
NyDqAFMPqmPVMo8QabtBiFhgtBc20U4HhfA2BcrYccJkVnIadj7GrULNEjyIyo6q
aeKIeHm1vrMAUu2LDSGQCi88
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org