Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4OSTqMqqC1m2IBVlJ71C4HIohwQ.roa
File:                     4OSTqMqqC1m2IBVlJ71C4HIohwQ.roa (raw, json)
Hash identifier:          6jKKXAINuObmASD6hy4dnfO8TRgnqa2MH5WcHSW1GIQ=
Subject key identifier:   E0:E4:93:A8:CA:AA:0B:59:B6:20:15:65:27:BD:42:E0:72:28:87:04
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018256652B8B12954EF16D2E37D467AE0090
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4OSTqMqqC1m2IBVlJ71C4HIohwQ.roa
Signing time:             Sun 31 Jul 2022 22:34:07 +0000
ROA not before:           Sun 31 Jul 2022 22:34:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204005
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:56:65:2b:8b:12:95:4e:f1:6d:2e:37:d4:67:ae:00:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Jul 31 22:34:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0e493a8caaa0b59b620156527bd42e072288704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:75:04:54:82:68:5f:42:bd:09:f2:2e:fc:
                    fb:d0:8f:22:c8:00:25:70:03:29:12:5b:e4:d6:46:
                    97:ba:94:f7:9c:76:22:b7:92:00:d6:d4:8b:11:2b:
                    3b:24:68:c9:30:d8:73:d2:98:e4:e3:1a:a9:a7:70:
                    5b:a8:8a:b5:9f:72:24:17:6d:bd:08:1d:4c:fe:5c:
                    b0:19:91:4a:e8:6e:c3:17:bb:cd:3d:a8:e2:4b:c3:
                    e2:35:df:0f:05:52:10:91:52:fc:46:2b:4a:f8:b0:
                    a7:67:df:cc:26:dc:4a:69:bf:52:de:55:ec:26:37:
                    f1:ee:af:0f:a5:b2:ee:e1:3a:19:43:36:e6:bb:18:
                    57:eb:c0:cc:d0:88:22:9c:77:fa:06:50:49:44:e8:
                    23:4a:f6:5a:f2:9b:b2:7a:5e:24:64:79:27:96:72:
                    02:1a:93:af:ec:78:81:a7:7a:45:35:65:9a:80:d1:
                    70:c3:e8:8b:5a:32:fd:08:d4:21:b0:81:c3:14:fd:
                    3e:2c:8e:c0:9f:f9:f1:f9:ea:51:bc:11:a4:e8:99:
                    19:71:8b:b8:c0:e2:58:1b:71:59:32:2f:6e:70:37:
                    9b:7e:b9:3b:34:44:66:ab:89:2f:ea:d2:2a:b8:04:
                    be:b0:cc:46:69:69:f3:9b:11:52:df:d2:fb:e7:c0:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E4:93:A8:CA:AA:0B:59:B6:20:15:65:27:BD:42:E0:72:28:87:04
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4OSTqMqqC1m2IBVlJ71C4HIohwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:dd:88:14:29:d4:83:db:10:20:cf:d6:a7:9c:12:48:60:
         5f:d5:fa:7e:7d:ab:0b:2e:18:73:45:a2:37:53:47:84:d8:fb:
         50:f7:49:f5:31:16:4b:44:4e:35:49:86:5a:6f:95:02:ec:a9:
         8a:ca:f8:99:72:52:85:23:d9:e4:ed:60:b8:88:3a:df:1a:db:
         e7:10:26:a5:75:74:3c:f9:e4:5c:da:28:26:88:9b:d0:16:dc:
         c0:5a:1a:59:dc:b5:83:f7:0d:21:ce:b6:ba:00:62:e6:73:97:
         70:ff:94:aa:51:40:2d:11:de:92:b9:9f:f0:85:fe:a5:2e:2b:
         82:24:65:2d:30:04:d8:2d:46:4e:de:c4:b5:4e:e5:ab:9d:e4:
         7d:98:01:4d:44:96:b1:c9:b4:42:e6:9e:2a:03:1d:c5:aa:a5:
         28:cd:db:da:14:30:1a:e9:f6:40:df:ca:aa:0a:07:ef:9a:a8:
         a5:13:5c:0f:42:11:d8:d8:c4:0f:56:f7:75:cf:ce:bd:95:d1:
         e5:81:79:75:57:01:ad:9f:74:e1:d9:bc:65:55:c6:fd:b3:01:
         f6:ef:a7:35:92:a3:02:cf:62:2c:e4:b4:4c:a9:f6:89:54:4f:
         2b:16:06:50:31:76:a9:36:51:42:8f:cf:38:23:99:f9:ee:59:
         e4:e8:8f:43
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYJWZSuLEpVO8W0uN9RnrgCQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwNzMxMjIzNDA3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGU0OTNhOGNhYWEwYjU5YjYyMDE1NjUyN2JkNDJlMDcyMjg4NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq691BFSCaF9CvQnyLvz70I8iyAAl
cAMpElvk1kaXupT3nHYit5IA1tSLESs7JGjJMNhz0pjk4xqpp3BbqIq1n3IkF229
CB1M/lywGZFK6G7DF7vNPajiS8PiNd8PBVIQkVL8RitK+LCnZ9/MJtxKab9S3lXs
Jjfx7q8PpbLu4ToZQzbmuxhX68DM0IginHf6BlBJROgjSvZa8puyel4kZHknlnIC
GpOv7HiBp3pFNWWagNFww+iLWjL9CNQhsIHDFP0+LI7An/nx+epRvBGk6JkZcYu4
wOJYG3FZMi9ucDebfrk7NERmq4kv6tIquAS+sMxGaWnzmxFS39L758CMEwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFODkk6jKqgtZtiAVZSe9QuByKIcEMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvNE9TVHFNcXFDMW0ySUJWbEo3MUM0SElvaHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgdUwrAL
MA0GCSqGSIb3DQEBCwUAA4IBAQAZDt2IFCnUg9sQIM/Wp5wSSGBf1fp+fasLLhhz
RaI3U0eE2PtQ90n1MRZLRE41SYZab5UC7KmKyviZclKFI9nk7WC4iDrfGtvnECal
dXQ8+eRc2igmiJvQFtzAWhpZ3LWD9w0hzra6AGLmc5dw/5SqUUAtEd6SuZ/whf6l
LiuCJGUtMATYLUZO3sS1TuWrneR9mAFNRJaxybRC5p4qAx3FqqUozdvaFDAa6fZA
38qqCgfvmqilE1wPQhHY2MQPVvd1z869ldHlgXl1VwGtn3Th2bxlVcb9swH276c1
kqMCz2Is5LRMqfaJVE8rFgZQMXapNlFCj884I5n57lnk6I9D
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:00 2024 by rpki-client on console-ams.rpki-client.org