Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/4VOATe19UgrR0od34o1n8YHlL2w.roa
File:                     4VOATe19UgrR0od34o1n8YHlL2w.roa (raw, json)
Hash identifier:          QIZvg2t58p6EwDGlOnRN2SvfYhgaj/Fmn4DzkkTK2nA=
Subject key identifier:   E1:53:80:4D:ED:7D:52:0A:D1:D2:87:77:E2:8D:67:F1:81:E5:2F:6C
Certificate issuer:       /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial:       0185710C214C97A5081D3A23C19A91AAB604
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/4VOATe19UgrR0od34o1n8YHlL2w.roa
Signing time:             Mon 02 Jan 2023 05:54:58 +0000
ROA not before:           Mon 02 Jan 2023 05:54:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        188.244.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:21:4c:97:a5:08:1d:3a:23:c1:9a:91:aa:b6:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
        Validity
            Not Before: Jan  2 05:54:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e153804ded7d520ad1d28777e28d67f181e52f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:98:90:c3:0c:bf:51:db:96:cf:04:dd:76:
                    ed:07:3a:b5:b4:c8:65:4f:d1:d7:a2:93:ef:e9:e3:
                    8e:83:35:fd:8b:da:b3:f5:ce:7e:17:a5:84:a4:3f:
                    1d:26:ca:1d:7e:73:29:18:ed:c0:84:0f:cd:8e:a2:
                    2f:0c:5c:ec:9b:27:67:32:14:4a:ed:ed:bf:e8:00:
                    0c:6f:3b:2b:6e:05:69:f1:73:4d:e9:06:46:5e:79:
                    79:46:6b:fb:5d:ff:3c:75:6b:ff:36:be:ea:ae:47:
                    9b:b1:83:9f:70:ae:25:33:4f:b2:e5:f0:f6:d6:98:
                    1d:3f:9f:3c:a9:86:c6:c3:19:cb:c5:56:f2:a0:3d:
                    f4:b5:c6:c1:d3:06:4a:54:5d:80:e5:08:93:11:5f:
                    97:15:06:b2:e1:e9:01:f1:8d:4c:71:a8:7f:cb:e7:
                    3a:5b:ae:13:99:55:00:c9:1c:f2:a8:0d:7e:05:44:
                    38:8e:16:5f:44:79:6f:81:fe:3d:ec:61:9b:8b:17:
                    16:e2:33:df:f1:0f:24:c3:fe:ce:ad:6c:d5:fa:03:
                    e5:14:9f:37:0f:3f:39:d5:8d:9c:f9:40:f3:85:50:
                    81:08:86:29:aa:71:72:be:41:19:3e:6d:02:01:f7:
                    6c:c0:cd:77:58:1f:60:68:9a:65:6d:cd:86:cd:46:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:53:80:4D:ED:7D:52:0A:D1:D2:87:77:E2:8D:67:F1:81:E5:2F:6C
            X509v3 Authority Key Identifier:
                keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/4VOATe19UgrR0od34o1n8YHlL2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f5:2c:51:b0:c9:25:46:c6:e2:c8:3f:8c:60:c0:71:f9:f7:
         6d:80:71:a0:d1:41:02:50:2c:94:d8:33:61:c7:24:26:c7:8e:
         2a:73:44:b1:65:7c:55:56:b0:d9:ee:e5:46:30:81:1f:1a:fb:
         a6:73:db:2b:3b:05:01:9b:8e:a5:c7:17:20:9d:00:27:23:0a:
         6c:bf:86:e7:1c:b1:de:20:d2:b6:57:40:66:1f:4f:e9:98:8d:
         0b:42:74:60:04:78:28:a9:b6:05:3a:33:6b:e9:64:fd:c8:a2:
         48:58:98:64:d4:d4:9e:bb:5e:3f:50:5c:17:5e:7a:44:07:86:
         63:5d:9c:32:b7:3e:a3:e8:0d:bc:21:94:2f:2a:6f:e4:4f:7d:
         86:cb:07:89:72:11:30:77:08:68:b8:0a:4c:70:19:32:eb:06:
         29:4e:ee:95:95:35:0f:41:95:b0:e3:4d:2e:ec:ac:06:56:b8:
         c0:84:fc:a3:cb:c5:5b:ca:e7:19:9f:b4:6f:24:27:e1:39:9b:
         72:47:07:60:a7:86:83:df:8c:a7:b6:9a:7d:66:9e:28:05:45:
         64:9e:71:0b:a4:43:b0:61:6a:a7:ea:97:16:8c:be:c8:c1:e5:
         c4:1d:05:ee:62:3c:91:09:39:80:8e:cc:c2:ba:bd:76:e7:ca:
         11:e2:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:04 2024 by rpki-client on console-ams.rpki-client.org