Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rbJWY_E76f7d4VJ3qAA04UhtPfk.roa
File:                     rbJWY_E76f7d4VJ3qAA04UhtPfk.roa (raw, json)
Hash identifier:          b4xhwnI2aN9hQHqD8Ni7lIHXRoFOas6hs6gsPTRzNkU=
Subject key identifier:   AD:B2:56:63:F1:3B:E9:FE:DD:E1:52:77:A8:00:34:E1:48:6D:3D:F9
Certificate issuer:       /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial:       01825558407A713DDB625F225387086F0AAB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rbJWY_E76f7d4VJ3qAA04UhtPfk.roa
Signing time:             Sun 31 Jul 2022 17:40:23 +0000
ROA not before:           Sun 31 Jul 2022 17:40:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        92.119.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:55:58:40:7a:71:3d:db:62:5f:22:53:87:08:6f:0a:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
        Validity
            Not Before: Jul 31 17:40:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=adb25663f13be9fedde15277a80034e1486d3df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:70:4c:8e:6a:25:bb:01:33:d1:24:e0:5c:59:
                    42:23:7a:41:db:41:8b:e8:fd:f6:a2:f2:29:a9:6d:
                    fd:72:d0:d2:ce:94:12:a3:c3:9f:3b:bc:af:23:63:
                    e0:d2:ea:09:d1:b4:f0:06:f0:de:d1:01:64:94:ae:
                    3f:73:34:00:0e:8b:67:87:91:ee:a1:5c:47:8f:e1:
                    53:dc:14:00:24:e3:f4:5f:96:26:de:42:b5:74:7a:
                    a8:3f:50:5a:b3:40:89:1c:f1:8f:cf:05:e3:ce:c9:
                    b5:79:e3:58:79:7e:c7:b0:c8:71:41:8c:6d:ac:0e:
                    f7:48:50:af:7b:df:02:d6:d9:9c:e7:76:eb:4c:14:
                    c6:cc:f0:40:9a:96:a0:9f:6b:11:35:5d:c9:d5:76:
                    11:3a:41:90:61:49:fd:ce:52:50:c0:13:b4:cc:ba:
                    ef:9b:22:d3:53:3e:7a:77:93:07:f0:1b:d8:19:c2:
                    8f:fc:ac:90:46:11:9a:64:22:9d:c1:49:4d:92:67:
                    1c:4c:b8:74:88:00:b9:fd:b1:05:7b:69:57:2b:cf:
                    f6:55:b9:e9:01:0f:35:c1:d1:ff:89:35:76:99:81:
                    17:62:97:57:5c:01:18:d7:53:51:df:5f:8d:49:50:
                    7f:1b:0d:7f:d5:f9:5b:d3:84:bd:46:14:66:05:9c:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B2:56:63:F1:3B:E9:FE:DD:E1:52:77:A8:00:34:E1:48:6D:3D:F9
            X509v3 Authority Key Identifier:
                keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/rbJWY_E76f7d4VJ3qAA04UhtPfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:97:96:f4:a0:0e:8b:c2:c5:a7:71:2b:81:18:0f:56:d1:45:
         aa:ff:a5:88:fb:f7:da:c7:b3:aa:3f:bb:7a:a5:0a:81:ac:90:
         85:7e:6d:2f:ad:1f:6a:49:a5:b3:89:eb:f1:56:1c:67:7a:8d:
         73:f4:12:ed:fa:0e:ff:bb:62:aa:d1:a3:29:bb:3e:51:67:b0:
         f0:43:ed:a9:46:a0:d4:8d:d7:c8:94:29:bb:7f:0e:20:fb:60:
         22:a1:7d:f3:58:d3:a5:19:6f:13:11:eb:28:c5:c8:cb:a5:e5:
         19:00:06:42:b5:12:45:fb:b5:3a:36:7e:06:8a:00:c5:73:62:
         81:a5:6e:28:4a:ca:5a:98:44:80:78:9a:35:77:7b:8b:23:f2:
         2e:d2:93:d1:d0:0a:8b:e4:9f:15:34:12:cf:3f:c6:40:c8:98:
         e9:23:5c:f1:ec:24:79:5f:fa:af:99:8b:b7:7c:fc:f4:b1:3e:
         68:53:45:c9:6a:de:d3:4d:8f:59:86:bc:8e:d2:b0:ff:e7:a7:
         1c:8b:c2:64:8e:b8:71:d1:3a:d9:52:6b:94:e9:01:e0:27:4e:
         0d:1f:3a:99:40:b1:ac:81:bb:0a:6b:d6:d7:5a:95:b5:06:c5:
         68:5f:ce:19:d9:45:e7:0d:2b:b5:62:22:14:16:c9:70:fb:17:
         4e:7d:14:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJVWEB6cT3bYl8iU4cIbwqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NGMyNjdmYTc1NGNkNjUwOWU5ZjgwNzI3MzEyM2JlZTk2
YzUyNWQwHhcNMjIwNzMxMTc0MDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGIyNTY2M2YxM2JlOWZlZGRlMTUyNzdhODAwMzRlMTQ4NmQzZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHBMjmoluwEz0STgXFlCI3pB20GL
6P32ovIpqW39ctDSzpQSo8OfO7yvI2Pg0uoJ0bTwBvDe0QFklK4/czQADotnh5Hu
oVxHj+FT3BQAJOP0X5Ym3kK1dHqoP1Bas0CJHPGPzwXjzsm1eeNYeX7HsMhxQYxt
rA73SFCve98C1tmc53brTBTGzPBAmpagn2sRNV3J1XYROkGQYUn9zlJQwBO0zLrv
myLTUz56d5MH8BvYGcKP/KyQRhGaZCKdwUlNkmccTLh0iAC5/bEFe2lXK8/2Vbnp
AQ81wdH/iTV2mYEXYpdXXAEY11NR31+NSVB/Gw1/1flb04S9RhRmBZzMuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2yVmPxO+n+3eFSd6gANOFIbT35MB8GA1UdIwQY
MBaAFKRMJn+nVM1lCen4BycxI77pbFJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWIt
NDhhZjA4MDA0YjVmLzEvcmJKV1lfRTc2ZjdkNFZKM3FBQTA0VWh0UGZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYjI2YTUtNjdiOS00NjY3LTg1NWItNDhhZjA4MDA0YjVm
LzEvcEV3bWY2ZFV6V1VKNmZnSEp6RWp2dWxzVWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXHcMMA0G
CSqGSIb3DQEBCwUAA4IBAQARl5b0oA6LwsWncSuBGA9W0UWq/6WI+/fax7OqP7t6
pQqBrJCFfm0vrR9qSaWzievxVhxneo1z9BLt+g7/u2Kq0aMpuz5RZ7DwQ+2pRqDU
jdfIlCm7fw4g+2AioX3zWNOlGW8TEesoxcjLpeUZAAZCtRJF+7U6Nn4GigDFc2KB
pW4oSspamESAeJo1d3uLI/Iu0pPR0AqL5J8VNBLPP8ZAyJjpI1zx7CR5X/qvmYu3
fPz0sT5oU0XJat7TTY9ZhryO0rD/56cci8Jkjrhx0TrZUmuU6QHgJ04NHzqZQLGs
gbsKa9bXWpW1BsVoX84Z2UXnDSu1YiIUFslw+xdOfRTj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org