Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/RE6ZjnSH8nIFTRiAY-v-pnOOvV8.roa
File:                     RE6ZjnSH8nIFTRiAY-v-pnOOvV8.roa (raw, json)
Hash identifier:          vNgBEhYa2EfbR4sFU0sBc+ZvjegUT6NTo6hmBrw3G7I=
Subject key identifier:   44:4E:99:8E:74:87:F2:72:05:4D:18:80:63:EB:FE:A6:73:8E:BD:5F
Certificate issuer:       /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial:       01B549AA
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/RE6ZjnSH8nIFTRiAY-v-pnOOvV8.roa
Signing time:             Sun 22 May 2022 18:03:29 +0000
ROA not before:           Sun 22 May 2022 18:03:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22653
IP address blocks:        146.19.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28658090 (0x1b549aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
        Validity
            Not Before: May 22 18:03:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=444e998e7487f272054d188063ebfea6738ebd5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:f5:f8:d8:3f:f9:1a:01:14:a9:89:7a:23:
                    17:aa:af:82:0c:67:03:aa:a2:dd:6b:5e:08:3a:69:
                    bf:5a:6e:9c:a9:e8:59:dd:fe:3c:a5:23:f8:3d:10:
                    fa:73:5c:4c:69:62:06:94:69:b2:a0:c5:f8:8c:5a:
                    53:e3:76:07:ca:65:51:13:5a:83:87:33:29:63:4b:
                    1e:cf:f0:e8:b6:8c:40:7f:3e:57:fe:2c:49:dc:43:
                    22:8a:86:f2:11:a3:ab:89:e4:c5:71:d6:f4:b3:e1:
                    1f:b9:e6:3a:37:a7:2a:ba:e7:f0:ae:94:84:11:70:
                    90:b4:f6:48:bc:75:33:ab:15:d3:95:c8:57:9f:3d:
                    67:86:a7:58:9f:77:64:ff:0a:16:43:40:fe:48:d1:
                    58:6a:ec:95:71:c5:bc:a6:81:1a:f3:3c:e6:05:03:
                    52:25:e7:38:bb:e8:9c:9b:be:48:e7:57:24:2d:8a:
                    05:94:73:9e:cc:f2:aa:8d:ec:0e:35:99:28:0a:3b:
                    9f:1b:97:9f:64:68:c1:a6:dc:1e:aa:50:a4:92:eb:
                    e1:ef:62:23:83:bd:fa:33:2c:de:94:b5:19:76:c7:
                    33:10:88:92:fa:d4:32:06:72:2d:ee:c0:36:e1:1b:
                    bb:f1:7f:a3:df:fb:dc:e8:f4:fa:92:0a:03:a9:8c:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:99:8E:74:87:F2:72:05:4D:18:80:63:EB:FE:A6:73:8E:BD:5F
            X509v3 Authority Key Identifier:
                keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/RE6ZjnSH8nIFTRiAY-v-pnOOvV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ff:53:42:ef:c7:94:53:36:5d:41:e2:aa:cc:43:7e:98:58:
         76:d3:ad:2b:87:36:ae:48:7b:d1:98:af:6e:44:45:c5:e1:10:
         89:f5:a3:27:44:6c:8a:01:7f:fe:a2:dc:2d:a5:2f:4e:51:70:
         00:7c:01:a5:c8:61:9f:d7:9d:94:7b:47:89:23:d1:9f:5c:3a:
         03:0e:2f:b5:53:19:b0:0d:dd:66:af:95:fb:23:97:d4:15:9c:
         20:85:dd:a7:03:6e:df:94:0a:e4:d0:4d:82:ba:05:f5:a8:c8:
         20:bf:b8:97:f3:c1:bc:c4:d2:86:d2:aa:a0:76:0b:b3:db:e6:
         5e:b3:6f:6f:c0:bd:70:60:26:93:4a:28:bf:34:85:c9:a3:88:
         9c:e5:1e:c5:99:34:cf:85:fa:9a:f1:7f:e0:79:11:19:e8:c3:
         a1:05:b8:da:c5:1b:a5:88:68:f8:14:ba:19:f5:b3:46:95:4a:
         a3:c6:f2:c7:8a:2d:75:21:97:de:00:70:95:e9:fd:34:c0:66:
         2b:8e:aa:05:23:44:2d:93:11:77:a6:ff:9c:94:f0:09:ab:cd:
         7d:5f:dd:4a:e8:0a:ad:47:8a:47:ac:25:90:48:86:bd:d0:54:
         ff:96:08:f3:3c:84:11:23:49:75:67:db:ee:0f:73:b4:ec:e5:
         d5:64:1b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:26 2024 by rpki-client on console-ams.rpki-client.org