Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/_08ZZCb6jFldG2KHldYmvKJMEUw.roa
File:                     _08ZZCb6jFldG2KHldYmvKJMEUw.roa (raw, json)
Hash identifier:          jkuDFLQn7acumdzRO4C723YxFLxIfJSP/pSalmUqmcA=
Subject key identifier:   FF:4F:19:64:26:FA:8C:59:5D:1B:62:87:95:D6:26:BC:A2:4C:11:4C
Certificate issuer:       /CN=51bf31291012f84ac9334dc97a97120f74f165f9
Certificate serial:       02F95DED
Authority key identifier: 51:BF:31:29:10:12:F8:4A:C9:33:4D:C9:7A:97:12:0F:74:F1:65:F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ub8xKRAS-ErJM03JepcSD3TxZfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/_08ZZCb6jFldG2KHldYmvKJMEUw.roa
Signing time:             Sat 01 Jan 2022 10:54:41 +0000
ROA not before:           Sat 01 Jan 2022 10:54:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205027
IP address blocks:        185.231.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49896941 (0x2f95ded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bf31291012f84ac9334dc97a97120f74f165f9
        Validity
            Not Before: Jan  1 10:54:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ff4f196426fa8c595d1b628795d626bca24c114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:20:a9:4c:b6:07:a2:47:9c:72:2a:93:28:
                    be:58:bf:4e:32:57:3b:29:c9:58:9d:c9:9d:7d:9f:
                    ca:92:8d:42:fa:cf:25:1a:f0:be:71:61:13:e1:ff:
                    42:fe:f3:3e:ed:e5:95:fc:9c:ef:bd:ed:53:48:4a:
                    d1:8a:84:7e:f1:d7:31:03:d1:08:18:ed:04:f7:b5:
                    e9:14:dc:9a:4e:65:75:cb:50:2d:31:a5:7d:de:cc:
                    7f:a7:7d:46:23:53:30:db:e8:20:d0:84:ab:42:a4:
                    8d:5c:e4:a3:c1:16:a2:08:33:a7:9c:79:6f:a2:c5:
                    c5:41:6f:40:b3:60:76:47:fc:a3:55:d3:62:09:2e:
                    bc:65:83:c5:97:e1:9a:33:9e:75:c0:cf:6b:70:a3:
                    f2:be:a8:d0:b2:0c:d9:3b:a4:20:7e:11:ba:af:a7:
                    bd:0d:10:43:d1:f2:06:4a:e1:a1:d6:ad:3c:69:c9:
                    07:b4:50:42:9c:a6:3a:76:1d:00:24:89:34:cd:37:
                    5c:0b:c6:f6:9d:f5:dd:af:ba:9a:9e:de:34:7c:c1:
                    08:d8:a7:c9:67:68:b6:19:80:d0:2b:45:2a:67:11:
                    60:d4:c4:9a:b7:bb:fb:1e:15:af:21:86:65:00:84:
                    01:6d:2d:3a:c9:5c:f4:c3:64:19:14:94:a7:1b:9e:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4F:19:64:26:FA:8C:59:5D:1B:62:87:95:D6:26:BC:A2:4C:11:4C
            X509v3 Authority Key Identifier:
                keyid:51:BF:31:29:10:12:F8:4A:C9:33:4D:C9:7A:97:12:0F:74:F1:65:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub8xKRAS-ErJM03JepcSD3TxZfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/_08ZZCb6jFldG2KHldYmvKJMEUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/acba2e-8e03-4ad7-a172-95ab1a35012e/1/Ub8xKRAS-ErJM03JepcSD3TxZfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:14:50:11:d3:a5:36:24:c3:17:97:a9:ca:99:7d:7f:95:
         33:c8:c0:8d:c9:47:cd:81:20:dd:ce:03:c6:4c:9e:03:5c:91:
         8c:8a:e8:dc:88:b5:a7:08:2c:93:de:03:73:81:1b:cc:9a:a4:
         f6:7c:02:be:da:d4:52:f0:a5:12:63:5a:e9:cd:61:af:a9:d6:
         9d:52:a3:f0:89:20:15:33:c2:75:da:73:75:25:f1:aa:ef:f5:
         d1:4a:e4:f9:3d:ee:a6:78:fc:54:c1:f4:4f:ee:63:5e:89:c8:
         89:85:4f:af:dd:05:2c:83:bc:d5:e5:47:7c:ff:25:3f:d3:50:
         b0:6e:6b:97:6a:66:df:7d:4d:cc:5c:5c:e0:bb:ff:d5:90:17:
         3b:bc:5c:96:87:ce:e9:11:41:1a:bd:40:14:ca:8b:36:4c:e7:
         7e:42:b8:f9:db:13:ce:6d:b8:cd:15:1d:33:bc:36:ce:26:59:
         3c:17:67:26:ec:2c:e6:2f:50:dd:11:b0:8a:d8:a4:1d:2a:08:
         4e:01:9a:7b:77:4d:99:63:c9:3d:fa:05:59:f9:49:1d:f4:3b:
         e6:fe:47:44:e7:28:3a:91:ae:60:bb:dd:f7:ca:f7:4d:d0:76:
         4d:93:4e:d0:cb:30:09:ff:9b:e0:6e:b3:3d:2e:12:f9:f1:59:
         8e:5a:6c:74
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAvld7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MWJmMzEyOTEwMTJmODRhYzkzMzRkYzk3YTk3MTIwZjc0ZjE2NWY5MB4XDTIyMDEw
MTEwNTQ0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmY0ZjE5NjQyNmZh
OGM1OTVkMWI2Mjg3OTVkNjI2YmNhMjRjMTE0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMf6IKlMtgeiR5xyKpMovli/TjJXOynJWJ3JnX2fypKNQvrP
JRrwvnFhE+H/Qv7zPu3llfyc773tU0hK0YqEfvHXMQPRCBjtBPe16RTcmk5ldctQ
LTGlfd7Mf6d9RiNTMNvoINCEq0KkjVzko8EWoggzp5x5b6LFxUFvQLNgdkf8o1XT
YgkuvGWDxZfhmjOedcDPa3Cj8r6o0LIM2TukIH4Ruq+nvQ0QQ9HyBkrhodatPGnJ
B7RQQpymOnYdACSJNM03XAvG9p313a+6mp7eNHzBCNinyWdothmA0CtFKmcRYNTE
mre7+x4VryGGZQCEAW0tOslc9MNkGRSUpxuex18CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBT/TxlkJvqMWV0bYoeV1ia8okwRTDAfBgNVHSMEGDAWgBRRvzEpEBL4Sskz
Tcl6lxIPdPFl+TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ViOHhLUkFTLUVySk0wM0plcGNTRDNUeFpmay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjcvYWNiYTJlLThlMDMtNGFkNy1hMTcyLTk1YWIxYTM1MDEyZS8x
L18wOFpaQ2I2akZsZEcyS0hsZFltdktKTUVVdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcv
YWNiYTJlLThlMDMtNGFkNy1hMTcyLTk1YWIxYTM1MDEyZS8xL1ViOHhLUkFTLUVy
Sk0wM0plcGNTRDNUeFpmay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnnjDANBgkqhkiG9w0BAQsFAAOC
AQEApMYUUBHTpTYkwxeXqcqZfX+VM8jAjclHzYEg3c4DxkyeA1yRjIro3Ii1pwgs
k94Dc4EbzJqk9nwCvtrUUvClEmNa6c1hr6nWnVKj8IkgFTPCddpzdSXxqu/10Urk
+T3upnj8VMH0T+5jXonIiYVPr90FLIO81eVHfP8lP9NQsG5rl2pm331NzFxc4Lv/
1ZAXO7xclofO6RFBGr1AFMqLNkznfkK4+dsTzm24zRUdM7w2ziZZPBdnJuws5i9Q
3RGwitikHSoITgGae3dNmWPJPfoFWflJHfQ75v5HROcoOpGuYLvd98r3TdB2TZNO
0MswCf+b4G6zPS4S+fFZjlpsdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:29 2024 by rpki-client on console-ams.rpki-client.org