Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eJ38Z4M1FNFMzaXC3BaPJmUoalA.roa
File:                     eJ38Z4M1FNFMzaXC3BaPJmUoalA.roa (raw, json)
Hash identifier:          mMD/KMqnyxz92WjHX6wJtyzVVR3E0fFofuZ+fvyQQ4U=
Subject key identifier:   78:9D:FC:67:83:35:14:D1:4C:CD:A5:C2:DC:16:8F:26:65:28:6A:50
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019421B2331785CA961A312DCB7E735866FD
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eJ38Z4M1FNFMzaXC3BaPJmUoalA.roa
Signing time:             Wed 01 Jan 2025 11:48:34 +0000
ROA not before:           Wed 01 Jan 2025 11:48:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205813
IP address blocks:        81.15.239.0/24 maxlen: 24
                          81.15.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:33:17:85:ca:96:1a:31:2d:cb:7e:73:58:66:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 11:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=789dfc67833514d14ccda5c2dc168f2665286a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:79:a6:5c:a2:d6:c2:55:ea:46:cd:52:5f:
                    e0:70:dc:e5:2d:c6:bc:f0:3c:51:20:c0:90:3d:e9:
                    4d:bd:42:6f:78:9f:82:b6:b7:e9:91:49:b2:67:69:
                    6a:63:38:9c:6b:da:ab:c1:0e:b2:90:67:17:3c:a9:
                    64:24:e1:8b:72:3c:61:9a:96:63:3c:23:74:78:1c:
                    ec:b0:ad:12:a2:bb:af:fb:ad:b5:ce:e1:8f:d5:9b:
                    36:5c:cd:30:59:bb:c8:bd:07:83:2d:98:e3:6d:d9:
                    31:7a:23:2f:7b:a6:74:29:1a:9f:58:40:05:36:76:
                    cb:30:a2:74:67:25:de:a7:a7:70:e5:d8:ba:3c:b4:
                    75:59:b9:bf:9a:2b:38:14:4b:1e:88:e4:b6:2c:4c:
                    49:e8:9b:fe:74:f0:3b:83:d9:fe:93:5b:75:22:25:
                    43:3c:61:7c:98:f7:26:29:1b:30:08:ae:44:d5:b4:
                    a8:8c:43:d7:6e:49:ce:db:a9:eb:41:4a:96:f0:9e:
                    9c:d1:6a:de:51:c9:20:c3:b5:6e:0e:74:dc:69:cd:
                    a8:3e:71:ff:b0:28:0b:d5:f2:72:6b:c9:f2:91:6a:
                    e6:36:a8:53:b2:40:f0:7b:e0:d5:d8:6a:60:10:9f:
                    1e:de:4b:60:db:bb:a5:df:54:12:ff:98:05:50:56:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9D:FC:67:83:35:14:D1:4C:CD:A5:C2:DC:16:8F:26:65:28:6A:50
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eJ38Z4M1FNFMzaXC3BaPJmUoalA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.15.239.0/24
                  81.15.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:29:3d:8e:cb:9c:5a:a1:c9:08:b0:5a:7a:66:f2:e0:ed:14:
         d2:cf:b6:a4:d1:21:66:5d:89:40:19:37:5b:56:06:4a:50:1f:
         e9:07:5d:12:6c:db:28:7a:b7:87:c3:27:7c:3f:47:c9:27:a8:
         06:be:5c:e0:48:97:8d:65:bc:11:93:9e:0b:46:4e:d9:7d:4d:
         67:9c:d7:1b:0a:88:67:ef:16:f4:80:6b:ee:3f:7e:a0:1c:9c:
         50:b0:a6:62:04:37:7e:ee:f4:14:86:c9:89:8c:ba:9f:bb:7d:
         8a:cc:a9:7e:5c:6d:8b:3b:b2:e7:b4:bf:8a:e9:2e:f2:4a:a5:
         89:15:7d:21:ec:10:6a:b2:0f:d0:be:70:1c:0e:64:13:da:9c:
         f2:c2:23:95:e0:fd:1d:d4:e3:50:8d:46:bb:70:a0:81:bf:aa:
         3f:b6:ce:5d:f1:03:33:e3:a1:32:e9:f1:f3:e3:cd:29:95:09:
         9d:48:52:1c:6d:b1:50:b8:52:a7:87:f0:e2:7f:8f:89:c4:bd:
         52:2a:08:7e:25:bd:71:1c:77:e6:db:5d:7f:5a:62:2b:d0:96:
         e5:e3:06:53:87:d5:85:52:78:42:a6:f2:50:c6:33:13:b4:84:
         08:f4:59:ea:7a:85:ec:f1:c8:5c:e8:d1:e6:52:55:f4:6e:87:
         39:fc:ef:af
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhsjMXhcqWGjEty35zWGb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjUwMTAxMTE0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODlkZmM2NzgzMzUxNGQxNGNjZGE1YzJkYzE2OGYyNjY1Mjg2YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27l5plyi1sJV6kbNUl/gcNzlLca8
8DxRIMCQPelNvUJveJ+CtrfpkUmyZ2lqYzica9qrwQ6ykGcXPKlkJOGLcjxhmpZj
PCN0eBzssK0Soruv+621zuGP1Zs2XM0wWbvIvQeDLZjjbdkxeiMve6Z0KRqfWEAF
NnbLMKJ0ZyXep6dw5di6PLR1Wbm/mis4FEseiOS2LExJ6Jv+dPA7g9n+k1t1IiVD
PGF8mPcmKRswCK5E1bSojEPXbknO26nrQUqW8J6c0WreUckgw7VuDnTcac2oPnH/
sCgL1fJya8nykWrmNqhTskDwe+DV2GpgEJ8e3ktg27ul31QS/5gFUFZUdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHid/GeDNRTRTM2lwtwWjyZlKGpQMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvZUozOFo0TTFGTkZNemFYQzNCYVBKbVVvYWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQ/vAwQA
UQ/yMA0GCSqGSIb3DQEBCwUAA4IBAQBJKT2Oy5xaockIsFp6ZvLg7RTSz7ak0SFm
XYlAGTdbVgZKUB/pB10SbNsoereHwyd8P0fJJ6gGvlzgSJeNZbwRk54LRk7ZfU1n
nNcbCohn7xb0gGvuP36gHJxQsKZiBDd+7vQUhsmJjLqfu32KzKl+XG2LO7LntL+K
6S7ySqWJFX0h7BBqsg/QvnAcDmQT2pzywiOV4P0d1ONQjUa7cKCBv6o/ts5d8QMz
46Ey6fHz480plQmdSFIcbbFQuFKnh/Dif4+JxL1SKgh+Jb1xHHfm211/WmIr0Jbl
4wZTh9WFUnhCpvJQxjMTtIQI9FnqeoXs8chc6NHmUlX0boc5/O+v
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:07 2025 by rpki-client