Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa
File:                     WeREVj0iRsTgUrD4jmpMyrcny98.roa (raw, json)
Hash identifier:          +hyN42TY0wzToKxWpoPJBANKLoij3c3uIPKJaaXzsCg=
Subject key identifier:   59:E4:44:56:3D:22:46:C4:E0:52:B0:F8:8E:6A:4C:CA:B7:27:CB:DF
Certificate issuer:       /CN=78745e4f905eb4e85b34d95a516ba84f9224d645
Certificate serial:       687710
Authority key identifier: 78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa
Signing time:             Sat 01 Jan 2022 01:52:33 +0000
ROA not before:           Sat 01 Jan 2022 01:52:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6846224 (0x687710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78745e4f905eb4e85b34d95a516ba84f9224d645
        Validity
            Not Before: Jan  1 01:52:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=59e444563d2246c4e052b0f88e6a4ccab727cbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:05:4b:66:7d:af:37:5c:90:91:6d:de:bb:
                    6f:ac:1f:cb:0f:c2:c6:5f:63:fd:25:e6:23:03:7c:
                    dd:1e:a7:25:8b:e9:4d:35:51:10:4d:f0:82:cc:29:
                    61:f8:49:ba:64:a2:21:d0:3f:72:ed:0a:66:35:c4:
                    91:b9:e5:32:ad:a6:f4:1f:8b:52:2a:12:8d:a9:e2:
                    94:85:f5:34:bc:77:19:3a:8c:76:47:58:17:e6:90:
                    e9:44:53:9e:a0:1e:ec:bf:e6:d5:fd:bf:a3:d0:b6:
                    aa:0d:21:c8:68:b3:91:14:bd:d9:f9:ad:25:06:1f:
                    d0:27:77:10:ff:ab:69:7e:61:67:c3:f9:d8:74:36:
                    ed:d8:10:94:2e:03:4b:f8:bf:3a:18:e8:f4:c4:66:
                    08:54:80:f2:6d:01:9c:3b:c3:1a:3f:21:4f:23:fe:
                    42:e9:b8:79:45:84:55:53:65:3d:11:5f:d9:0d:17:
                    02:0c:8c:2b:6d:c9:26:16:57:32:dc:e6:df:ff:71:
                    87:9d:86:70:42:af:7e:48:ce:4c:7e:54:3c:6e:c7:
                    23:56:a8:0c:23:4c:ab:c2:14:24:2b:8a:fa:c2:45:
                    c1:50:a5:d3:d4:c7:ee:45:94:54:b4:cc:61:80:de:
                    f4:f8:41:35:08:53:99:a9:fe:e2:c4:26:c9:76:65:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E4:44:56:3D:22:46:C4:E0:52:B0:F8:8E:6A:4C:CA:B7:27:CB:DF
            X509v3 Authority Key Identifier:
                keyid:78:74:5E:4F:90:5E:B4:E8:5B:34:D9:5A:51:6B:A8:4F:92:24:D6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHReT5BetOhbNNlaUWuoT5Ik1kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/WeREVj0iRsTgUrD4jmpMyrcny98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/dad92e-267d-45de-86d0-42a6322e7771/1/eHReT5BetOhbNNlaUWuoT5Ik1kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2e:ac:ae:be:81:ba:d0:e1:e9:9d:4b:71:e5:77:30:66:50:
         76:09:52:50:45:c9:49:b9:0a:64:ba:84:7a:1a:32:50:1d:3d:
         59:1d:51:c0:2c:aa:09:e2:19:85:15:b4:bb:74:e3:f2:0c:de:
         db:d8:c7:7a:bf:56:5e:00:85:5b:94:78:31:d7:71:09:12:ef:
         7f:76:69:74:26:2f:fc:88:ca:e6:99:9d:b9:e8:7e:c8:74:7a:
         13:f3:b5:b1:cc:99:3a:bb:90:51:db:ee:7f:6c:3b:a6:b0:11:
         48:4f:5e:7f:c6:8c:6c:a7:6a:1d:20:22:6b:de:03:3e:28:17:
         cc:44:7b:e7:77:49:e1:32:0e:8d:7b:df:ca:20:5f:0c:20:06:
         7b:74:fb:98:4a:28:fb:56:70:f1:e0:46:95:8a:33:57:53:d1:
         af:af:85:b9:1e:24:c6:70:52:cf:64:46:87:ee:0c:c7:5e:10:
         d7:c4:84:1b:02:18:c1:fc:5f:d8:67:db:b3:c3:11:ab:ee:ef:
         99:62:d7:2d:70:7c:bf:8c:59:25:50:f9:3c:bf:fa:35:8c:19:
         8e:91:7e:2c:aa:51:90:d5:33:ff:2d:75:8c:00:22:7d:f1:40:
         4c:56:3a:6a:b8:e4:a6:3c:68:da:c3:14:f5:b6:6a:c5:82:95:
         c3:de:90:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:26 2024 by rpki-client on console-ams.rpki-client.org