Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/HhYuVQwDTWriIE58fsbg9m-_kHA.roa
File:                     HhYuVQwDTWriIE58fsbg9m-_kHA.roa (raw, json)
Hash identifier:          R4yVi/O7OaHsLBPpq3W6FGIDl9wzfV8ETOqaauhgk0A=
Subject key identifier:   1E:16:2E:55:0C:03:4D:6A:E2:20:4E:7C:7E:C6:E0:F6:6F:BF:90:70
Certificate issuer:       /CN=9fb074d069dfc494fc60ea01df4f8d98f8192bad
Certificate serial:       018964C051334339CC2AA231746F2CE97DA7
Authority key identifier: 9F:B0:74:D0:69:DF:C4:94:FC:60:EA:01:DF:4F:8D:98:F8:19:2B:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7B00GnfxJT8YOoB30-NmPgZK60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/HhYuVQwDTWriIE58fsbg9m-_kHA.roa
Signing time:             Mon 17 Jul 2023 16:47:52 +0000
ROA not before:           Mon 17 Jul 2023 16:47:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        5.1.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:c0:51:33:43:39:cc:2a:a2:31:74:6f:2c:e9:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb074d069dfc494fc60ea01df4f8d98f8192bad
        Validity
            Not Before: Jul 17 16:47:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1e162e550c034d6ae2204e7c7ec6e0f66fbf9070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ff:3a:25:c7:73:0b:90:7e:46:8c:e1:b5:cc:
                    02:c6:b0:0f:89:ab:77:b9:33:13:ef:b5:72:01:25:
                    73:0a:f1:f2:52:df:d5:49:01:74:6f:db:47:50:8c:
                    25:ed:de:a3:85:ed:68:a2:c6:6c:ca:f8:04:d2:49:
                    21:b6:03:e1:c3:09:0a:55:3d:0e:1c:50:d0:a5:d3:
                    1e:a6:cf:25:d8:b9:e6:a9:2e:da:95:d8:14:d2:b9:
                    64:5b:9b:88:07:25:73:85:83:f1:8f:80:e8:c4:78:
                    05:ff:56:1f:e1:d7:c4:91:cc:d3:6b:32:7d:68:f0:
                    09:f3:e6:45:8d:6d:fe:01:65:04:52:e8:1b:1c:41:
                    7a:4e:04:05:60:73:28:8b:73:a8:c1:0e:85:b2:f0:
                    d0:1d:67:46:29:bb:1d:50:b7:08:91:85:c1:b7:60:
                    ab:c9:14:1e:83:01:0c:be:d0:c1:02:13:4b:a7:c9:
                    d6:c6:92:0d:ee:29:a6:c3:0f:e9:db:dd:05:f8:87:
                    55:7a:3e:ab:88:af:a5:bc:e1:f4:e4:28:2a:f8:63:
                    d2:c4:a8:25:12:c4:de:51:b5:fa:53:47:93:c5:21:
                    5f:cc:15:36:35:cb:20:23:de:e4:60:36:08:24:83:
                    09:dd:b0:a4:72:4e:f9:62:35:bd:8b:9c:da:7c:0d:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:16:2E:55:0C:03:4D:6A:E2:20:4E:7C:7E:C6:E0:F6:6F:BF:90:70
            X509v3 Authority Key Identifier:
                keyid:9F:B0:74:D0:69:DF:C4:94:FC:60:EA:01:DF:4F:8D:98:F8:19:2B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7B00GnfxJT8YOoB30-NmPgZK60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/HhYuVQwDTWriIE58fsbg9m-_kHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c31163-b467-4736-9309-d941842847e3/1/n7B00GnfxJT8YOoB30-NmPgZK60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:84:47:5c:37:ab:62:7d:e2:29:fd:e5:4e:0b:ad:b7:3c:18:
         02:76:d9:cd:ce:42:1a:22:09:e6:48:04:4b:27:21:e2:8b:3c:
         32:8d:72:3e:c4:b9:ce:51:dc:01:07:6a:74:c4:50:61:e0:55:
         ea:b4:7e:fe:5e:0c:2a:f2:b2:8f:e5:fd:b1:b9:8b:12:7f:c1:
         92:11:8e:f3:cd:a2:1a:78:f0:3c:bd:ff:5c:f9:fd:e6:35:56:
         c2:a9:c4:95:9e:47:bb:c6:82:6e:79:2a:bc:8e:4e:30:52:d7:
         72:1d:bd:09:df:45:e7:33:08:86:ff:30:7a:86:1b:3f:86:22:
         d7:d0:92:c3:42:8c:6c:c4:f5:73:b9:92:cd:94:44:7e:37:5d:
         7e:fe:63:bd:d6:0f:1b:20:fe:19:28:bb:ae:fc:b1:94:8d:fd:
         e7:1d:78:45:cc:65:7d:38:cd:6c:90:68:49:01:6d:b9:c2:22:
         92:ac:45:b5:b2:10:a4:b8:0b:2a:5a:4c:08:ae:20:09:c8:56:
         13:8b:ad:6f:08:6a:e7:b5:04:78:03:55:0f:29:ff:bb:e5:8f:
         78:91:6e:c0:d2:a5:a5:52:ca:b4:1b:39:ae:17:0b:62:6d:7d:
         22:41:fb:5a:a3:58:a0:f7:b3:4e:ca:a1:c9:6f:a5:ff:50:01:
         ad:66:55:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkwFEzQznMKqIxdG8s6X2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjA3NGQwNjlkZmM0OTRmYzYwZWEwMWRmNGY4ZDk4Zjgx
OTJiYWQwHhcNMjMwNzE3MTY0NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTE2MmU1NTBjMDM0ZDZhZTIyMDRlN2M3ZWM2ZTBmNjZmYmY5MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv86JcdzC5B+RozhtcwCxrAPiat3
uTMT77VyASVzCvHyUt/VSQF0b9tHUIwl7d6jhe1oosZsyvgE0kkhtgPhwwkKVT0O
HFDQpdMeps8l2LnmqS7aldgU0rlkW5uIByVzhYPxj4DoxHgF/1Yf4dfEkczTazJ9
aPAJ8+ZFjW3+AWUEUugbHEF6TgQFYHMoi3OowQ6FsvDQHWdGKbsdULcIkYXBt2Cr
yRQegwEMvtDBAhNLp8nWxpIN7immww/p290F+IdVej6riK+lvOH05Cgq+GPSxKgl
EsTeUbX6U0eTxSFfzBU2NcsgI97kYDYIJIMJ3bCkck75YjW9i5zafA1zCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4WLlUMA01q4iBOfH7G4PZvv5BwMB8GA1UdIwQY
MBaAFJ+wdNBp38SU/GDqAd9PjZj4GSutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdCMDBHbmZ4SlQ4WU9vQjMwLU5tUGdaSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMzExNjMtYjQ2Ny00NzM2LTkzMDkt
ZDk0MTg0Mjg0N2UzLzEvSGhZdVZRd0RUV3JpSUU1OGZzYmc5bS1fa0hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMzExNjMtYjQ2Ny00NzM2LTkzMDktZDk0MTg0Mjg0N2Uz
LzEvbjdCMDBHbmZ4SlQ4WU9vQjMwLU5tUGdaSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQEuMA0G
CSqGSIb3DQEBCwUAA4IBAQBEhEdcN6tifeIp/eVOC623PBgCdtnNzkIaIgnmSARL
JyHiizwyjXI+xLnOUdwBB2p0xFBh4FXqtH7+Xgwq8rKP5f2xuYsSf8GSEY7zzaIa
ePA8vf9c+f3mNVbCqcSVnke7xoJueSq8jk4wUtdyHb0J30XnMwiG/zB6hhs/hiLX
0JLDQoxsxPVzuZLNlER+N11+/mO91g8bIP4ZKLuu/LGUjf3nHXhFzGV9OM1skGhJ
AW25wiKSrEW1shCkuAsqWkwIriAJyFYTi61vCGrntQR4A1UPKf+75Y94kW7A0qWl
Usq0GzmuFwtibX0iQftao1ig97NOyqHJb6X/UAGtZlW8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:25 2024 by rpki-client on console-ams.rpki-client.org