Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/FusjygidKuUutace3mT7vGxAP0E.roa
File:                     FusjygidKuUutace3mT7vGxAP0E.roa (raw, json)
Hash identifier:          NCt5Qe+pUazJ5y3MEixmTkNQOIMLlP6yHwo9BwSiEMQ=
Subject key identifier:   16:EB:23:CA:08:9D:2A:E5:2E:B5:A7:1E:DE:64:FB:BC:6C:40:3F:41
Certificate issuer:       /CN=6189c749502e55366a350bea97354f6997c3c321
Certificate serial:       0182208E26BF669F73E359B7930672DE943B
Authority key identifier: 61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/FusjygidKuUutace3mT7vGxAP0E.roa
Signing time:             Thu 21 Jul 2022 11:39:23 +0000
ROA not before:           Thu 21 Jul 2022 11:39:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        171.22.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:20:8e:26:bf:66:9f:73:e3:59:b7:93:06:72:de:94:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6189c749502e55366a350bea97354f6997c3c321
        Validity
            Not Before: Jul 21 11:39:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16eb23ca089d2ae52eb5a71ede64fbbc6c403f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:21:75:a1:9f:ea:14:28:3b:77:cc:a4:df:
                    c7:9c:57:07:61:bd:67:44:c2:5d:fc:db:b5:09:fd:
                    23:6d:34:8d:8a:de:ff:9e:20:04:d5:7f:c6:97:e6:
                    7b:79:15:fa:70:58:4d:da:94:63:bb:98:2b:cb:2b:
                    b4:cd:e7:b5:e4:6b:d9:9a:7c:96:4d:7e:64:de:ec:
                    2b:49:9a:37:f3:25:ac:3a:3e:09:98:6f:4b:32:c1:
                    cf:53:60:ed:31:f0:b0:be:89:7c:c8:62:9d:95:93:
                    55:2d:38:cd:4b:2b:5b:fc:e2:d8:d8:12:3e:6b:2f:
                    3c:9c:ab:ac:cf:c1:8c:02:62:66:4e:6f:fe:22:13:
                    cb:ca:c8:12:1e:14:ba:a8:52:a5:7c:56:f1:58:37:
                    0e:0c:c3:e7:00:3c:a8:b2:52:c8:d9:fb:09:64:dc:
                    90:82:1b:28:c9:5d:7a:34:b6:27:13:3f:73:a6:87:
                    36:ac:06:61:4d:b5:dc:ac:07:53:99:a0:fe:bf:31:
                    8a:aa:3a:e0:e6:d9:8e:4e:06:7c:22:30:6e:51:56:
                    22:b1:fc:2e:f7:ed:2a:b8:0e:93:47:28:50:78:8f:
                    92:e7:4d:b9:51:07:0c:c2:aa:cf:6f:d3:a4:63:22:
                    47:90:2f:95:f8:ee:f4:66:53:a1:33:a7:f4:f4:94:
                    a6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:23:CA:08:9D:2A:E5:2E:B5:A7:1E:DE:64:FB:BC:6C:40:3F:41
            X509v3 Authority Key Identifier:
                keyid:61:89:C7:49:50:2E:55:36:6A:35:0B:EA:97:35:4F:69:97:C3:C3:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYnHSVAuVTZqNQvqlzVPaZfDwyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/FusjygidKuUutace3mT7vGxAP0E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/febb37-d2fe-444c-87db-bd6c99e7e2da/1/YYnHSVAuVTZqNQvqlzVPaZfDwyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.22.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:73:6a:b1:f1:db:48:74:a5:e4:e7:7d:98:33:f8:2f:54:e5:
         b5:ca:45:f4:d1:2f:04:41:bc:25:7f:44:ac:36:f5:44:f6:75:
         b9:2e:89:76:39:52:8b:d3:bc:e3:4e:ac:bf:08:ed:7e:1c:a4:
         c7:55:fb:13:c0:db:94:c8:7f:a3:84:88:ca:9d:a0:87:64:70:
         8c:8d:c3:a0:56:eb:31:3a:fc:8d:69:d6:78:0b:74:96:9f:85:
         89:42:80:45:7a:8c:3a:fc:88:ff:58:26:bb:2d:e8:62:83:57:
         b9:cc:64:1a:48:fc:a5:85:9f:c3:8f:85:85:31:22:70:94:1c:
         20:e4:d7:a1:fb:83:a4:82:e0:ce:69:cb:a1:cd:5d:25:0d:e2:
         bc:ed:1e:2a:d5:26:f7:b0:c5:f2:70:77:14:a6:51:cd:d6:93:
         98:1d:d4:ce:29:f4:2e:52:b1:60:d7:7e:5e:68:27:a9:cf:b6:
         57:e8:00:61:1a:16:ba:2a:79:4c:ae:73:f2:aa:e5:c6:56:60:
         fa:ec:4f:5e:b6:b7:cc:99:f9:cc:e7:2c:e6:c6:98:8e:55:52:
         3a:a5:4d:20:4f:6e:25:ac:82:07:64:86:e8:27:8b:15:c0:ac:
         61:77:1e:2e:a7:c4:58:b6:58:78:8d:55:3a:bf:92:e7:2a:22:
         bc:5f:12:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIgjia/Zp9z41m3kwZy3pQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODljNzQ5NTAyZTU1MzY2YTM1MGJlYTk3MzU0ZjY5OTdj
M2MzMjEwHhcNMjIwNzIxMTEzOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmViMjNjYTA4OWQyYWU1MmViNWE3MWVkZTY0ZmJiYzZjNDAzZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBUhdaGf6hQoO3fMpN/HnFcHYb1n
RMJd/Nu1Cf0jbTSNit7/niAE1X/Gl+Z7eRX6cFhN2pRju5gryyu0zee15GvZmnyW
TX5k3uwrSZo38yWsOj4JmG9LMsHPU2DtMfCwvol8yGKdlZNVLTjNSytb/OLY2BI+
ay88nKusz8GMAmJmTm/+IhPLysgSHhS6qFKlfFbxWDcODMPnADyoslLI2fsJZNyQ
ghsoyV16NLYnEz9zpoc2rAZhTbXcrAdTmaD+vzGKqjrg5tmOTgZ8IjBuUVYisfwu
9+0quA6TRyhQeI+S5025UQcMwqrPb9OkYyJHkC+V+O70ZlOhM6f09JSmtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBbrI8oInSrlLrWnHt5k+7xsQD9BMB8GA1UdIwQY
MBaAFGGJx0lQLlU2ajUL6pc1T2mXw8MhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVluSFNWQXVWVFpxTlF2cWx6VlBhWmZEd3lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mZWJiMzctZDJmZS00NDRjLTg3ZGIt
YmQ2Yzk5ZTdlMmRhLzEvRnVzanlnaWRLdVV1dGFjZTNtVDd2R3hBUDBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mZWJiMzctZDJmZS00NDRjLTg3ZGItYmQ2Yzk5ZTdlMmRh
LzEvWVluSFNWQXVWVFpxTlF2cWx6VlBhWmZEd3lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxYeMA0G
CSqGSIb3DQEBCwUAA4IBAQCSc2qx8dtIdKXk532YM/gvVOW1ykX00S8EQbwlf0Ss
NvVE9nW5Lol2OVKL07zjTqy/CO1+HKTHVfsTwNuUyH+jhIjKnaCHZHCMjcOgVusx
OvyNadZ4C3SWn4WJQoBFeow6/Ij/WCa7Lehig1e5zGQaSPylhZ/Dj4WFMSJwlBwg
5Neh+4OkguDOacuhzV0lDeK87R4q1Sb3sMXycHcUplHN1pOYHdTOKfQuUrFg135e
aCepz7ZX6ABhGha6KnlMrnPyquXGVmD67E9etrfMmfnM5yzmxpiOVVI6pU0gT24l
rIIHZIboJ4sVwKxhdx4up8RYtlh4jVU6v5LnKiK8XxLv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:49 2023 by rpki-client on console-ams.rpki-client.org