Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa
File:                     pcIZUV89eaxcGbusu0nAbThhpDs.roa (raw, json)
Hash identifier:          76RkBFifkyN23N54sHSySx+Nq8pZuy2p3DkdTI+9/Pg=
Subject key identifier:   A5:C2:19:51:5F:3D:79:AC:5C:19:BB:AC:BB:49:C0:6D:38:61:A4:3B
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       8F9A3425
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa
Signing time:             Sat 25 Jun 2022 03:11:43 +0000
ROA not before:           Sat 25 Jun 2022 03:11:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2409247781 (0x8f9a3425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jun 25 03:11:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a5c219515f3d79ac5c19bbacbb49c06d3861a43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:7d:db:65:f7:c3:06:16:38:7f:4e:67:48:
                    93:f8:77:fe:b9:d5:65:e1:1b:f2:43:dd:f8:45:44:
                    1a:6c:41:9e:fd:54:06:8d:13:1a:6e:ec:de:3b:ab:
                    0b:00:41:1c:ff:81:f7:13:e0:6c:9e:f9:52:10:6f:
                    7a:b9:4d:0c:b6:7d:bb:ee:41:29:e3:12:51:9e:5e:
                    e6:e9:8d:81:cf:ae:9c:19:54:81:bb:44:bf:22:d5:
                    12:65:1d:c2:7a:c3:6b:58:3f:2e:20:d2:13:43:10:
                    b1:f3:ad:53:d9:49:d4:46:f1:ac:36:95:28:45:e7:
                    80:15:a5:e3:c9:e2:05:2d:79:dd:d0:91:66:dd:75:
                    fd:55:3a:5f:b9:40:d5:b8:8d:e2:6d:69:93:de:4d:
                    bb:e8:4b:26:09:eb:ba:43:99:88:a0:d9:20:af:3d:
                    30:e1:31:33:fc:21:ab:61:08:11:31:98:1d:70:43:
                    c2:d8:c9:e0:45:1d:8a:56:fc:7f:25:4e:2f:94:8c:
                    46:41:42:6d:07:39:be:9c:21:59:4b:35:0a:4c:c4:
                    c8:75:83:16:49:94:59:6e:0f:0d:c3:10:38:44:eb:
                    7d:d4:ea:dc:59:67:c6:7a:cb:0d:f4:f3:3f:f4:eb:
                    2b:73:19:e6:74:19:d9:b0:93:e0:44:f9:02:0b:29:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C2:19:51:5F:3D:79:AC:5C:19:BB:AC:BB:49:C0:6D:38:61:A4:3B
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/pcIZUV89eaxcGbusu0nAbThhpDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:9c:3d:f1:21:6a:2f:4f:2e:97:69:ef:df:e7:97:5b:ac:
         f1:51:bd:48:ae:70:43:b3:af:c9:09:75:e6:99:6a:40:0a:66:
         e5:cc:78:6c:10:bf:f0:e3:80:d0:80:f7:4f:38:ef:e1:40:fb:
         95:2d:a8:27:0f:ea:8f:df:68:85:10:c2:3c:5e:2e:cc:fa:d2:
         bf:76:b3:60:4a:4a:84:b0:a3:83:a2:92:66:74:38:f6:8d:54:
         9f:4d:52:a1:b5:9e:cb:f4:8a:bc:21:86:f4:ed:81:46:f2:6c:
         f2:05:b7:ce:41:9e:db:14:1e:4d:72:79:b5:54:bf:8f:fe:8e:
         16:0a:d7:db:fa:3a:79:c0:9b:51:d2:a5:55:b6:a5:e0:fb:d7:
         bb:95:36:41:c7:25:c7:92:6f:78:52:9d:0d:db:e7:65:ac:c6:
         0b:48:56:ba:33:91:1e:6c:7b:4e:be:99:16:15:9d:79:ba:3a:
         be:c7:1b:85:0f:db:7e:3d:52:23:36:49:82:5f:21:66:08:7c:
         ec:0e:f6:ad:14:7d:fb:6c:d2:e0:68:be:43:19:b1:64:b4:02:
         c7:4f:cb:4c:ab:ec:7d:a9:53:b9:b2:98:62:fc:f9:12:9e:1b:
         4f:39:92:07:c5:18:39:4f:6b:b2:43:91:24:e0:59:dc:59:ec:
         c4:43:79:19
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI+aNCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjUwMzExNDNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGE1YzIxOTUxNWYz
ZDc5YWM1YzE5YmJhY2JiNDljMDZkMzg2MWE0M2IwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMwn3bZffDBhY4f05nSJP4d/651WXhG/JD3fhFRBpsQZ79
VAaNExpu7N47qwsAQRz/gfcT4Gye+VIQb3q5TQy2fbvuQSnjElGeXubpjYHPrpwZ
VIG7RL8i1RJlHcJ6w2tYPy4g0hNDELHzrVPZSdRG8aw2lShF54AVpePJ4gUted3Q
kWbddf1VOl+5QNW4jeJtaZPeTbvoSyYJ67pDmYig2SCvPTDhMTP8IathCBExmB1w
Q8LYyeBFHYpW/H8lTi+UjEZBQm0HOb6cIVlLNQpMxMh1gxZJlFluDw3DEDhE633U
6txZZ8Z6yw308z/06ytzGeZ0Gdmwk+BE+QILKYCNAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUpcIZUV89eaxcGbusu0nAbThhpDswHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9wY0laVVY4OWVheGNHYnVzdTBuQWJUaGhwRHMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEADYWcPfEhai9PLpdp79/nl1us8VG9SK5wQ7Ov
yQl15plqQApm5cx4bBC/8OOA0ID3Tzjv4UD7lS2oJw/qj99ohRDCPF4uzPrSv3az
YEpKhLCjg6KSZnQ49o1Un01SobWey/SKvCGG9O2BRvJs8gW3zkGe2xQeTXJ5tVS/
j/6OFgrX2/o6ecCbUdKlVbal4PvXu5U2Qcclx5JveFKdDdvnZazGC0hWujORHmx7
Tr6ZFhWdebo6vscbhQ/bfj1SIzZJgl8hZgh87A72rRR9+2zS4Gi+QxmxZLQCx0/L
TKvsfalTubKYYvz5Ep4bTzmSB8UYOU9rskORJOBZ3FnsxEN5GQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:45:51 2025 by rpki-client