Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/ETcng1OWPQRriYmCpHo2mSvnKuM.roa
File:                     ETcng1OWPQRriYmCpHo2mSvnKuM.roa (raw, json)
Hash identifier:          OqFWqiJUfDPsW2cuMhObgJSl3tQvm/FyPV5D2Kurg2I=
Subject key identifier:   11:37:27:83:53:96:3D:04:6B:89:89:82:A4:7A:36:99:2B:E7:2A:E3
Certificate issuer:       /CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
Certificate serial:       04381615
Authority key identifier: 1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/ETcng1OWPQRriYmCpHo2mSvnKuM.roa
Signing time:             Fri 25 Mar 2022 14:15:11 +0000
ROA not before:           Fri 25 Mar 2022 14:15:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210574
IP address blocks:        141.98.114.0/24 maxlen: 24
                          141.98.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70784533 (0x4381615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6dabc3628f271f8c5b0cdb184d18bcde5b9900
        Validity
            Not Before: Mar 25 14:15:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1137278353963d046b898982a47a36992be72ae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:1f:d5:bc:0f:86:ae:d2:3a:7c:eb:2d:d5:
                    f2:20:6b:c8:69:54:ac:41:21:a2:5f:ef:ad:d1:1b:
                    8e:7a:17:87:27:34:80:10:61:8a:e4:ee:25:b4:00:
                    39:e7:a9:c2:fd:52:78:d0:15:2e:53:00:6d:24:54:
                    42:f2:83:1c:d7:c0:ad:a1:9e:f5:eb:cf:89:3a:09:
                    c1:10:72:4c:e9:bf:a3:a6:a2:06:03:ce:38:cc:f5:
                    e1:5a:50:04:a1:54:b9:9f:e9:85:f2:de:44:79:a2:
                    a9:07:80:32:27:de:2c:03:be:7c:b0:fe:e6:bb:a6:
                    fa:7b:2c:d8:97:6e:c9:fa:9f:d4:cc:91:d6:2c:9d:
                    d1:5e:20:b0:8e:57:45:56:32:e8:7f:e8:e9:0c:05:
                    04:70:91:51:3c:17:86:73:e9:2e:7e:eb:90:b4:f9:
                    87:91:2f:80:60:4d:d1:12:b0:c0:bb:5a:10:bd:a7:
                    31:9c:89:29:9a:b0:41:78:59:a9:d9:0f:fd:54:29:
                    a9:d2:c7:99:c3:e8:58:3e:61:bf:f8:50:06:d9:4b:
                    2f:92:3d:91:e9:39:c9:59:5d:5d:d7:0e:30:f5:29:
                    46:53:03:62:01:dc:51:e3:79:c3:96:8b:9d:44:3f:
                    f8:dd:2b:5d:16:31:d3:ce:68:17:49:12:3e:39:30:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:37:27:83:53:96:3D:04:6B:89:89:82:A4:7A:36:99:2B:E7:2A:E3
            X509v3 Authority Key Identifier:
                keyid:1D:6D:AB:C3:62:8F:27:1F:8C:5B:0C:DB:18:4D:18:BC:DE:5B:99:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2rw2KPJx-MWwzbGE0YvN5bmQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/ETcng1OWPQRriYmCpHo2mSvnKuM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/78277b-3567-4e7f-9c69-d39bdfed9fbd/1/HW2rw2KPJx-MWwzbGE0YvN5bmQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:e4:24:81:ea:78:8f:7c:fc:76:4d:d9:63:57:b1:de:e5:40:
         6b:1e:d4:46:3e:d8:b2:56:eb:80:0b:12:66:83:17:bf:91:f9:
         15:97:8f:41:70:d9:7e:dc:ce:2a:67:6d:42:a9:22:83:d3:80:
         93:82:7a:20:f5:6a:e9:ed:fc:d7:99:cc:a9:20:08:ea:21:06:
         60:aa:30:3c:c8:f0:48:48:7f:4b:ce:d2:0a:d6:f1:ea:ab:3d:
         7c:f9:c9:8b:8f:b3:c3:85:d7:da:53:35:a7:67:a3:1c:96:48:
         37:66:73:2c:1c:89:3b:da:69:9c:03:e6:79:1a:7f:12:1e:61:
         e6:fd:d3:e1:67:95:ef:08:93:9f:32:8b:6a:d8:4e:39:c7:cb:
         f2:50:9a:90:3f:19:55:82:29:07:06:3b:02:62:e4:e6:be:6b:
         c8:cb:da:60:99:70:4a:c4:76:c7:09:99:7b:48:9a:99:92:6d:
         f0:da:75:19:89:2e:93:b0:76:f2:01:e8:3e:ed:db:4b:9c:fb:
         dd:de:71:df:d1:95:7c:79:10:6e:c4:7c:71:86:02:d0:95:0b:
         56:f8:f4:cd:a5:4d:fa:a1:5d:c4:55:b1:b6:8c:41:09:23:38:
         c3:b9:33:ba:3a:c3:bb:97:2d:a2:e7:f3:f4:63:dc:f0:f2:ad:
         39:b7:7d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org