Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/LHjiADv_VLvHVrpAypnDIqEHTyM.roa
File:                     LHjiADv_VLvHVrpAypnDIqEHTyM.roa (raw, json)
Hash identifier:          9lrVgSfpPktLhNmpa9WnhHuA8TrxxLaMQL/buM0tXEA=
Subject key identifier:   2C:78:E2:00:3B:FF:54:BB:C7:56:BA:40:CA:99:C3:22:A1:07:4F:23
Certificate issuer:       /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial:       040718DD
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/LHjiADv_VLvHVrpAypnDIqEHTyM.roa
Signing time:             Wed 01 Jun 2022 07:02:13 +0000
ROA not before:           Wed 01 Jun 2022 07:02:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209371
IP address blocks:        141.98.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67573981 (0x40718dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
        Validity
            Not Before: Jun  1 07:02:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c78e2003bff54bbc756ba40ca99c322a1074f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fb:58:b1:ee:ca:85:3f:18:49:a1:c1:d5:6d:
                    5e:3b:39:20:c6:30:14:b7:a9:7a:38:6c:63:c4:46:
                    db:25:b5:9f:f5:c7:e9:00:57:57:bf:a6:a1:55:b4:
                    23:33:16:2d:12:01:92:93:1a:5d:57:5e:e3:b6:56:
                    8b:2b:5f:0e:4e:ac:1a:6c:40:8e:78:0a:27:4d:0f:
                    3d:e8:28:44:7d:71:52:11:3b:a2:68:1a:c1:3c:16:
                    a5:21:5b:bd:3a:ac:03:95:f8:a2:fd:a4:70:48:69:
                    46:3b:b5:0e:1d:bd:9f:71:72:41:eb:eb:07:b4:37:
                    3f:cf:1b:0a:95:cd:b5:89:ac:57:ca:32:5c:6d:5e:
                    91:ae:11:91:3b:b9:87:8f:01:73:6f:a0:27:55:16:
                    f4:71:95:f3:6f:bb:dd:b0:75:1e:ec:66:6b:f3:74:
                    48:9f:83:02:0e:50:71:55:7f:af:38:ff:3a:8a:1d:
                    2f:d8:4e:7c:5e:c7:5d:99:3b:7a:b2:79:18:20:87:
                    b3:88:f7:0a:4c:91:f7:1e:4a:56:64:53:e9:4a:25:
                    88:62:a4:bf:7e:31:bc:ec:cd:bd:a5:c5:96:a8:54:
                    b2:0c:88:9c:d4:cf:cd:ce:04:16:95:cb:56:53:67:
                    d3:a6:fb:38:1a:d4:0e:7e:47:50:e3:0c:9b:52:d0:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:E2:00:3B:FF:54:BB:C7:56:BA:40:CA:99:C3:22:A1:07:4F:23
            X509v3 Authority Key Identifier:
                keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/LHjiADv_VLvHVrpAypnDIqEHTyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:01:2b:a4:c0:7d:dd:d9:b7:61:2e:95:6e:92:f0:5d:2d:74:
         d1:0e:db:a0:46:68:ef:e2:8d:c0:4b:d6:0c:10:4b:95:75:fe:
         b8:e3:4e:59:0e:cf:38:18:98:dc:eb:95:f5:67:3d:ea:5f:a1:
         7f:f2:5c:e5:e6:9a:66:e9:a4:46:1c:63:87:5d:44:66:2d:6b:
         1e:30:ab:8e:04:d9:05:33:b5:76:f2:c0:b5:5b:99:a0:8f:ad:
         aa:33:10:28:1e:13:95:87:0c:57:8a:96:e9:d1:27:d7:3c:d3:
         14:10:93:29:87:f7:0a:1a:4b:36:d6:e9:d3:16:a9:15:60:3b:
         d2:60:fe:b2:51:30:68:de:9f:28:da:31:b0:27:5c:52:33:e9:
         f9:70:6c:a4:09:67:b1:b2:38:26:d7:4c:78:d5:30:7a:03:dd:
         c5:5b:f7:8f:cf:37:23:da:05:c3:bb:e9:0f:96:e7:89:6c:e3:
         c1:44:aa:87:b8:6a:a7:a2:14:da:7b:92:19:d2:c2:39:7d:4c:
         74:79:b8:c1:16:48:f2:30:bc:f6:85:17:a3:a5:85:70:2b:bc:
         b9:ab:02:10:29:4a:8b:8b:5d:7b:9f:90:20:51:63:08:23:ec:
         9e:0b:fa:94:2e:57:4a:2c:36:1a:15:e9:0f:61:06:e6:b5:1b:
         4f:12:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:04 2024 by rpki-client on console-ams.rpki-client.org