Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/wjWlDUM5_uLccpuVblaqbmZ7gyQ.roa
File:                     wjWlDUM5_uLccpuVblaqbmZ7gyQ.roa (raw, json)
Hash identifier:          zyDwIie9HEF5C6PQLkUA/BnTMX188Pnk5ZVoyARn3GM=
Subject key identifier:   C2:35:A5:0D:43:39:FE:E2:DC:72:9B:95:6E:56:AA:6E:66:7B:83:24
Certificate issuer:       /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial:       79376D
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/wjWlDUM5_uLccpuVblaqbmZ7gyQ.roa
Signing time:             Sat 01 Jan 2022 03:55:08 +0000
ROA not before:           Sat 01 Jan 2022 03:55:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        146.19.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7944045 (0x79376d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
        Validity
            Not Before: Jan  1 03:55:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c235a50d4339fee2dc729b956e56aa6e667b8324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:4f:fc:eb:d7:0b:5d:be:40:df:37:8d:37:
                    71:f4:99:53:ae:be:88:9a:72:a0:73:7b:d4:91:6e:
                    54:d5:03:e2:34:06:64:9b:42:0f:54:66:11:19:49:
                    b0:13:2b:d9:36:90:45:35:16:87:14:fc:ca:18:91:
                    02:97:e7:9b:cf:73:76:75:cc:4a:60:5e:cd:5b:41:
                    70:da:a7:41:72:2f:c0:f1:5c:9c:e9:28:20:69:aa:
                    87:c5:f4:d9:e9:12:9e:8a:05:c8:19:2d:33:e7:fb:
                    9c:74:63:4f:04:37:87:a6:35:b8:42:46:63:fe:c8:
                    d7:cb:cb:14:12:ce:86:be:06:cc:eb:64:c7:73:dd:
                    4d:9d:23:b4:12:79:8d:e8:fd:aa:81:d2:7e:da:b3:
                    53:1e:8b:76:58:0e:37:b8:0a:33:8e:a6:bb:f9:eb:
                    11:a4:4b:41:6b:64:73:ee:a7:04:bf:23:19:b6:0e:
                    61:02:78:be:f4:cd:26:8d:80:80:78:2a:a4:cb:2f:
                    30:03:49:05:5a:0d:d6:a3:d3:9f:5a:07:5b:a2:af:
                    24:76:5e:43:33:94:92:bf:b9:47:26:d9:ba:1c:b7:
                    94:f9:a1:28:08:56:3f:98:64:b4:d6:3d:6f:f3:f4:
                    84:a1:72:ff:ac:f1:51:fe:23:5a:d3:ff:e0:1b:e9:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:A5:0D:43:39:FE:E2:DC:72:9B:95:6E:56:AA:6E:66:7B:83:24
            X509v3 Authority Key Identifier:
                keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/wjWlDUM5_uLccpuVblaqbmZ7gyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:da:c1:dd:de:98:8b:da:70:8f:f6:c2:c8:34:7e:8d:c2:
         c0:9b:97:77:bd:b1:36:18:b7:dc:8c:cc:b3:3a:34:d3:e4:4d:
         15:1b:2b:8e:79:83:8b:9c:cc:1c:b6:81:b7:f6:10:24:32:d9:
         e3:98:32:cf:73:01:8f:02:69:64:b0:48:8e:9a:c9:21:51:f8:
         6b:80:52:3c:e6:4a:e6:c6:b3:e9:54:b5:1c:db:40:8c:38:9b:
         24:2c:93:7a:ca:cb:6a:bb:ab:e3:9d:51:11:54:d5:e0:d2:30:
         29:1c:e9:c6:bd:d4:9f:37:fb:c9:e8:65:c1:82:2a:20:70:13:
         83:af:69:5f:f5:60:cf:16:1a:f1:5f:63:c4:53:62:e1:af:64:
         b8:33:c1:04:b3:d5:b0:ae:13:99:28:d9:43:32:ff:d1:80:12:
         4a:5d:b5:6c:af:30:ef:22:79:86:57:18:ba:e8:73:76:36:7b:
         a5:73:63:0f:17:76:21:59:ad:ac:00:a4:ee:03:fc:17:14:be:
         67:6b:1a:91:5f:72:23:06:cb:61:e0:26:bc:8e:07:a1:08:45:
         0d:ea:b4:49:ba:70:d6:20:ac:3a:09:86:29:a0:a6:ef:11:27:
         1c:04:1c:86:45:3e:5e:d2:e9:da:81:07:51:46:0b:e6:ec:d2:
         8b:69:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:26 2024 by rpki-client on console-ams.rpki-client.org