Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_sySlUx6ZuTRpZ2VxW7yeb17daE.roa
File:                     _sySlUx6ZuTRpZ2VxW7yeb17daE.roa (raw, json)
Hash identifier:          vUKKgmj7p5WaNSIq2egI1gZdEUOBwZmfJrE8VMciMkw=
Subject key identifier:   FE:CC:92:95:4C:7A:66:E4:D1:A5:9D:95:C5:6E:F2:79:BD:7B:75:A1
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       018356AE6097C2618FAA68F7CC24B1F073DA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_sySlUx6ZuTRpZ2VxW7yeb17daE.roa
Signing time:             Mon 19 Sep 2022 16:56:51 +0000
ROA not before:           Mon 19 Sep 2022 16:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208148
IP address blocks:        2a06:a005:1e10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:56:ae:60:97:c2:61:8f:aa:68:f7:cc:24:b1:f0:73:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Sep 19 16:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fecc92954c7a66e4d1a59d95c56ef279bd7b75a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:b6:08:50:9c:16:63:17:af:ca:02:0f:70:
                    31:63:2e:ba:73:a1:38:14:df:c5:2a:b2:cb:9d:a9:
                    cf:d0:24:00:58:43:c1:ea:4e:9b:13:2d:fe:c1:4a:
                    77:93:48:82:21:84:6b:63:a4:cc:a1:41:bf:37:27:
                    03:2d:0e:31:26:75:13:d2:f6:06:23:33:84:ea:c7:
                    f7:94:80:71:58:00:87:b0:30:16:b7:e9:54:b8:0a:
                    21:08:42:dc:62:08:89:c4:8d:27:ab:fe:91:4e:6e:
                    b6:4d:8e:cb:d8:d2:12:08:50:0b:4a:cc:9a:0b:fc:
                    8a:b1:2d:d1:3a:55:bf:fc:8c:7e:c3:f5:b7:5f:20:
                    2f:9c:78:d4:01:0f:72:e8:7f:ef:ae:e1:a3:8a:fe:
                    82:31:25:3c:15:20:04:49:0a:ef:d9:c9:b2:17:ef:
                    c3:6b:21:15:5e:36:21:11:9a:23:fc:75:4c:fe:99:
                    85:52:1d:79:0f:37:e2:4f:04:ff:d6:fd:24:7f:a9:
                    ea:06:97:15:7b:37:ff:0b:e8:8e:ff:47:60:e8:8b:
                    e1:a1:ac:e7:7d:ea:ab:e3:be:44:3f:b9:5e:0c:e5:
                    86:f6:95:88:1d:e7:7e:64:8a:f3:20:0b:83:3b:c4:
                    47:a5:70:f3:90:3c:61:ba:78:6a:b7:b9:96:0f:cc:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CC:92:95:4C:7A:66:E4:D1:A5:9D:95:C5:6E:F2:79:BD:7B:75:A1
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/_sySlUx6ZuTRpZ2VxW7yeb17daE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:72:31:de:4b:71:b8:63:7e:31:bd:4e:9c:12:04:f1:be:
         5c:45:76:f1:84:74:9c:f6:0f:35:40:ab:3b:69:04:cf:8e:75:
         d8:0d:87:f9:7a:4b:8d:7b:bb:74:cd:60:2f:bc:27:16:85:37:
         08:bc:33:ef:17:72:0f:8f:68:84:eb:df:25:83:6c:72:8f:a1:
         2f:97:77:2a:22:c5:69:77:bd:aa:33:24:9e:80:f1:6a:9d:eb:
         05:9b:7a:45:4c:e2:61:df:43:14:e6:31:27:4e:c6:0d:34:c3:
         0c:5f:89:d7:61:b8:21:14:5c:6b:89:b7:bb:bd:6c:48:df:c7:
         f8:2e:85:97:70:25:d2:44:e6:dd:70:6d:92:55:f8:64:b3:06:
         1f:cf:d1:96:91:1c:62:63:75:4c:a5:ba:31:51:9d:37:07:c1:
         49:1b:f7:ca:aa:01:58:b5:fa:fb:43:be:13:5f:54:db:42:16:
         76:bb:3c:f9:5e:92:bd:c8:36:9b:85:48:9a:f0:a8:b5:97:95:
         b9:0d:3f:01:8b:68:36:61:7f:b1:a9:e8:62:ff:a1:11:5f:73:
         a2:ce:8c:52:32:a9:4c:ee:20:0d:fa:ba:87:1e:da:89:eb:5e:
         b7:a1:24:a4:e4:d5:9c:30:5d:17:8d:63:7f:2d:fc:a0:cc:e5:
         a3:79:92:02
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYNWrmCXwmGPqmj3zCSx8HPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTE5MTY1NjUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWNjOTI5NTRjN2E2NmU0ZDFhNTlkOTVjNTZlZjI3OWJkN2I3NWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUS2CFCcFmMXr8oCD3AxYy66c6E4
FN/FKrLLnanP0CQAWEPB6k6bEy3+wUp3k0iCIYRrY6TMoUG/NycDLQ4xJnUT0vYG
IzOE6sf3lIBxWACHsDAWt+lUuAohCELcYgiJxI0nq/6RTm62TY7L2NISCFALSsya
C/yKsS3ROlW//Ix+w/W3XyAvnHjUAQ9y6H/vruGjiv6CMSU8FSAESQrv2cmyF+/D
ayEVXjYhEZoj/HVM/pmFUh15DzfiTwT/1v0kf6nqBpcVezf/C+iO/0dg6Ivhoazn
feqr475EP7leDOWG9pWIHed+ZIrzIAuDO8RHpXDzkDxhunhqt7mWD8xCmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP7MkpVMembk0aWdlcVu8nm9e3WhMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEvX3N5U2xVeDZadVRScFoyVnhXN3llYjE3ZGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgagBR4Q
MA0GCSqGSIb3DQEBCwUAA4IBAQAA03Ix3ktxuGN+Mb1OnBIE8b5cRXbxhHSc9g81
QKs7aQTPjnXYDYf5ekuNe7t0zWAvvCcWhTcIvDPvF3IPj2iE698lg2xyj6Evl3cq
IsVpd72qMySegPFqnesFm3pFTOJh30MU5jEnTsYNNMMMX4nXYbghFFxribe7vWxI
38f4LoWXcCXSRObdcG2SVfhkswYfz9GWkRxiY3VMpboxUZ03B8FJG/fKqgFYtfr7
Q74TX1TbQhZ2uzz5XpK9yDabhUia8Ki1l5W5DT8Bi2g2YX+xqehi/6ERX3OizoxS
MqlM7iAN+rqHHtqJ6163oSSk5NWcMF0XjWN/LfygzOWjeZIC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:02 2024 by rpki-client on console-ams.rpki-client.org