Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oJ8GjrpyeqOEvRIJRc9Q-wF2M4g.roa
File:                     oJ8GjrpyeqOEvRIJRc9Q-wF2M4g.roa (raw, json)
Hash identifier:          J5fLpij7ObUWfMP6MnV//NNtbf2VgOqP9s6FUzJ2NvM=
Subject key identifier:   A0:9F:06:8E:BA:72:7A:A3:84:BD:12:09:45:CF:50:FB:01:76:33:88
Certificate issuer:       /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial:       07C83AFC
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oJ8GjrpyeqOEvRIJRc9Q-wF2M4g.roa
Signing time:             Wed 16 Mar 2022 19:11:07 +0000
ROA not before:           Wed 16 Mar 2022 19:11:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210376
IP address blocks:        2a0f:85c1:29::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130562812 (0x7c83afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
        Validity
            Not Before: Mar 16 19:11:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a09f068eba727aa384bd120945cf50fb01763388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:4f:0e:0d:a0:50:cb:b9:93:11:54:2d:9f:
                    82:61:66:d7:71:01:cf:bc:fb:6f:fd:b2:4b:3a:36:
                    ec:a4:f5:0f:5e:ed:3b:86:77:57:ac:91:f1:b6:31:
                    ae:fb:e4:4d:08:8b:a9:44:0b:a3:a1:1e:45:ff:38:
                    83:1c:a6:5d:91:a9:1c:a4:79:c7:ec:42:19:74:5c:
                    a5:ea:66:3d:97:f3:ae:91:b9:6e:29:82:14:3e:14:
                    ab:90:54:d8:3a:86:62:dc:b8:46:ce:7c:3d:d8:f8:
                    71:98:6d:20:da:6e:43:f0:8c:3b:fb:6e:7a:7b:6a:
                    4c:97:cc:49:d5:f2:3c:d4:75:7e:13:df:09:f0:88:
                    2d:d1:b7:4e:5a:4b:e1:4b:3a:51:3a:0a:6b:9a:e0:
                    e8:d4:62:31:80:ee:2b:56:7a:e0:87:b3:a3:67:d3:
                    2d:ef:ed:81:3a:e8:a8:6a:e2:4c:93:73:b5:da:2b:
                    ac:79:89:6d:fc:cd:54:cc:30:6a:df:53:3d:f7:ed:
                    f7:69:6f:11:39:ca:7f:8c:f8:d6:08:41:92:d2:e7:
                    45:99:f7:4f:53:09:44:1e:90:5e:ba:c7:ce:9d:a2:
                    75:76:a4:fd:ec:ee:92:80:1c:f9:3a:03:ff:86:59:
                    19:71:1e:48:b4:db:ae:f9:2e:22:6b:ca:59:cb:cd:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9F:06:8E:BA:72:7A:A3:84:BD:12:09:45:CF:50:FB:01:76:33:88
            X509v3 Authority Key Identifier:
                keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/oJ8GjrpyeqOEvRIJRc9Q-wF2M4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:a9:f2:c0:14:29:e4:55:fc:ed:4b:42:98:16:46:48:3b:95:
         a3:df:08:07:fb:e5:d5:b8:71:1f:e6:b7:ab:a8:db:50:08:d6:
         9a:74:a6:04:6b:d6:a7:72:b9:99:22:a3:72:54:c3:28:b6:e8:
         e5:c4:19:56:85:18:ce:9a:78:37:eb:51:86:52:36:28:27:6c:
         e4:01:78:ed:bd:c4:ef:77:32:ff:92:5f:d2:71:54:6a:04:73:
         4a:32:32:e6:88:1d:5f:a1:e3:c2:79:09:0d:47:7e:dc:78:9c:
         d3:ef:76:5d:cb:ad:c5:3e:75:8d:fc:8d:53:9f:dc:cf:24:f5:
         99:a7:6e:f3:70:03:d0:e2:91:33:b6:4c:d9:09:25:50:cd:af:
         95:21:0b:6e:67:a5:82:6f:40:37:cc:9e:3b:67:bc:81:54:57:
         ec:60:02:6e:6b:d8:ad:7e:be:43:99:8d:2c:4a:84:82:da:cf:
         80:83:40:67:bd:13:b6:b2:2e:ca:8e:7b:27:8a:94:3d:e2:ef:
         17:0b:a7:79:35:8f:1c:29:87:e2:19:f7:3f:7e:a0:a2:53:cb:
         ed:3c:f3:bb:7f:90:bf:3d:9d:01:99:9f:5a:75:1e:40:89:1e:
         3d:f0:a2:97:34:1e:b3:56:30:13:41:4e:b5:62:ac:09:6c:94:
         e0:cb:a3:35
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEB8g6/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YmIzYWUxMWEzYTZhNWVlMWUzMmVhNmNjZTFmMTBkZjIzMWVhZDg4MB4XDTIyMDMx
NjE5MTEwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTA5ZjA2OGViYTcy
N2FhMzg0YmQxMjA5NDVjZjUwZmIwMTc2MzM4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0NTw4NoFDLuZMRVC2fgmFm13EBz7z7b/2ySzo27KT1D17t
O4Z3V6yR8bYxrvvkTQiLqUQLo6EeRf84gxymXZGpHKR5x+xCGXRcpepmPZfzrpG5
bimCFD4Uq5BU2DqGYty4Rs58Pdj4cZhtINpuQ/CMO/tuentqTJfMSdXyPNR1fhPf
CfCILdG3TlpL4Us6UToKa5rg6NRiMYDuK1Z64Iezo2fTLe/tgTroqGriTJNztdor
rHmJbfzNVMwwat9TPfft92lvETnKf4z41ghBktLnRZn3T1MJRB6QXrrHzp2idXak
/ezukoAc+ToD/4ZZGXEeSLTbrvkuImvKWcvNW5MCAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBSgnwaOunJ6o4S9EglFz1D7AXYziDAfBgNVHSMEGDAWgBRrs64Ro6al7h4y
6mzOHxDfIx6tiDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2E3T3VFYU9tcGU0ZU11cHN6aDhRM3lNZXJZZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmEvY2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8x
L29KOEdqcnB5ZXFPRXZSSUpSYzlRLXdGMk00Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEv
Y2MxMWU4LWQ1MWItNDY3OS05YzZjLTFlZjE5N2Q2ZGM2OS8xL2E3T3VFYU9tcGU0
ZU11cHN6aDhRM3lNZXJZZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoPhcEAKTANBgkqhkiG9w0BAQsF
AAOCAQEAKqnywBQp5FX87UtCmBZGSDuVo98IB/vl1bhxH+a3q6jbUAjWmnSmBGvW
p3K5mSKjclTDKLbo5cQZVoUYzpp4N+tRhlI2KCds5AF47b3E73cy/5Jf0nFUagRz
SjIy5ogdX6HjwnkJDUd+3Hic0+92XcutxT51jfyNU5/czyT1madu83AD0OKRM7ZM
2QklUM2vlSELbmelgm9AN8yeO2e8gVRX7GACbmvYrX6+Q5mNLEqEgtrPgINAZ70T
trIuyo57J4qUPeLvFwuneTWPHCmH4hn3P36golPL7Tzzu3+Qvz2dAZmfWnUeQIke
PfCilzQes1YwE0FOtWKsCWyU4MujNQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org