Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa
File:                     vbKKbs5hX43RBeGU26NBQgtU6ak.roa (raw, json)
Hash identifier:          fykLbaMGQuBxdcl290MWoCPb/rRrI4jOa30WXqap4hg=
Subject key identifier:   BD:B2:8A:6E:CE:61:5F:8D:D1:05:E1:94:DB:A3:41:42:0B:54:E9:A9
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       01856F42A8647A2C6325FB4C8E3DDF7E586D
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa
Signing time:             Sun 01 Jan 2023 21:35:17 +0000
ROA not before:           Sun 01 Jan 2023 21:35:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49981
IP address blocks:        146.19.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:a8:64:7a:2c:63:25:fb:4c:8e:3d:df:7e:58:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: Jan  1 21:35:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdb28a6ece615f8dd105e194dba341420b54e9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:21:8f:c8:f8:12:09:8f:bc:d2:72:b6:2b:
                    93:d2:a8:8f:6c:75:dc:76:2c:27:0e:15:d2:b7:c0:
                    c8:5c:79:c0:a2:6e:02:ef:15:34:24:ba:24:b6:84:
                    38:18:2c:b1:cf:42:1a:48:4b:69:4c:6c:8e:e0:3d:
                    4b:e1:91:5c:f2:a3:50:83:4e:f5:89:38:a1:7c:11:
                    73:dd:d2:e4:4a:17:3e:e2:4f:96:dc:23:cd:a2:34:
                    7a:5b:4b:79:eb:a3:3d:a3:df:b0:a5:7f:5e:87:44:
                    09:b7:bc:49:72:79:3b:ce:eb:0b:d2:64:e5:05:47:
                    23:e3:83:e2:92:d4:54:b3:ea:94:d3:71:1a:8a:94:
                    c8:d5:13:2b:32:d3:5d:01:6b:5e:4c:7f:6f:85:21:
                    41:20:f5:85:96:3d:de:5b:8f:4c:e3:87:27:a8:cb:
                    02:b2:59:f5:50:b5:4e:79:b3:f2:95:b9:c6:0d:34:
                    3c:d2:7f:fc:e7:0b:1a:ab:87:cf:f2:eb:33:8d:5a:
                    b1:9e:f5:ad:05:2f:c9:08:d1:e2:e8:34:c2:6e:4d:
                    63:72:6b:62:de:74:e2:ba:3e:bf:c1:4c:19:24:9f:
                    24:6f:d1:fc:43:03:b4:94:19:66:52:2f:b7:a9:86:
                    e4:a1:36:be:ab:ab:42:2a:3a:8e:b6:89:4c:41:1a:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B2:8A:6E:CE:61:5F:8D:D1:05:E1:94:DB:A3:41:42:0B:54:E9:A9
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/vbKKbs5hX43RBeGU26NBQgtU6ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:bb:7c:f0:ce:92:41:a2:ec:7f:fd:52:17:25:44:0b:bb:
         15:30:1c:1b:59:ce:a4:0c:92:df:2f:bb:96:90:12:de:50:bb:
         72:fa:d3:ac:76:d4:e4:8b:90:d7:12:69:26:90:1f:94:cd:2f:
         58:04:bf:cd:80:9e:cf:ec:40:fc:5f:ef:64:34:b6:aa:b6:9b:
         88:92:98:7f:ba:d2:77:d7:94:d9:bd:ad:a4:bc:e4:54:a3:4f:
         a6:cb:fd:7e:f0:eb:ab:b4:fe:ad:40:9f:93:44:12:a2:bf:d3:
         c9:a9:be:c0:f7:1e:2b:c7:ff:76:2c:1c:bb:cf:2b:87:39:f0:
         e7:38:0c:e8:cb:68:19:6d:7f:70:b9:ce:c2:ea:5a:c9:13:d5:
         71:a3:3c:63:12:3a:6f:df:15:4a:e1:dd:33:10:34:33:af:a6:
         8b:13:21:69:14:f7:be:30:88:14:42:da:a5:0e:9e:5a:a2:dd:
         08:a4:c3:cd:15:43:f7:2a:eb:9b:1c:e1:20:39:9c:b5:02:d7:
         a6:c6:19:a3:5b:1f:38:85:c9:c8:6f:ce:b1:d3:da:43:1a:9e:
         2b:a4:6a:6b:aa:05:a9:d8:b2:2b:89:6a:ce:e4:ae:d6:b7:c0:
         3e:e2:de:c3:6a:06:e4:70:5c:ca:67:47:a0:93:fa:e2:85:a5:
         75:1e:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:14 2024 by rpki-client on console-ams.rpki-client.org