Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/MIMivwpmMKQWaJ_--2btT4wQHpw.roa
File:                     MIMivwpmMKQWaJ_--2btT4wQHpw.roa (raw, json)
Hash identifier:          BuHcuRuVxiM7f8q8PMIplcoiYVROaLZoQM6n7JIeuyw=
Subject key identifier:   30:83:22:BF:0A:66:30:A4:16:68:9F:FE:FB:66:ED:4F:8C:10:1E:9C
Certificate issuer:       /CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Certificate serial:       7E08E1
Authority key identifier: 6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/MIMivwpmMKQWaJ_--2btT4wQHpw.roa
Signing time:             Sat 01 Jan 2022 02:54:33 +0000
ROA not before:           Sat 01 Jan 2022 02:54:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209242
IP address blocks:        146.19.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8259809 (0x7e08e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
        Validity
            Not Before: Jan  1 02:54:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=308322bf0a6630a416689ffefb66ed4f8c101e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:2f:62:93:fd:4d:88:9c:e1:8c:a2:91:28:
                    a9:c7:c6:0c:28:06:ba:f0:b6:ec:e9:22:6e:ab:ae:
                    29:5e:39:e0:5b:17:b7:03:66:9b:14:4b:f6:76:a7:
                    3c:52:f7:aa:e0:7b:93:8e:c2:7c:8d:06:7b:74:51:
                    89:2e:ec:d3:58:ed:d9:b7:1e:bd:d9:c8:78:c7:d3:
                    63:2f:29:86:fd:e0:b0:e3:c5:d5:66:90:04:43:e9:
                    dc:4c:d5:1c:31:1a:d1:af:21:0e:ca:82:f9:ee:9a:
                    90:54:af:e8:16:e1:fe:30:c9:c9:25:4d:c5:c7:49:
                    a7:d6:d0:4a:eb:d4:e0:9d:49:f6:cd:59:3a:33:2c:
                    52:57:3c:37:84:61:c4:1d:01:fb:4c:49:bb:f1:f4:
                    02:6d:ef:16:ca:51:b1:97:dd:88:6c:63:22:2d:50:
                    14:66:0f:98:e8:c8:12:80:e6:c2:4d:61:09:9d:ea:
                    de:21:d0:a0:65:c1:0f:1f:eb:b7:93:63:51:7d:56:
                    c7:a5:bb:63:70:f1:57:72:57:c6:08:b9:ff:1c:2b:
                    ba:68:f5:29:2a:14:96:03:65:7d:39:eb:e0:e9:82:
                    27:06:d1:43:42:b8:6c:18:c3:96:bb:84:8c:65:40:
                    d9:a2:d3:23:44:7e:df:ef:9a:3a:52:5d:29:7c:79:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:83:22:BF:0A:66:30:A4:16:68:9F:FE:FB:66:ED:4F:8C:10:1E:9C
            X509v3 Authority Key Identifier:
                keyid:6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/MIMivwpmMKQWaJ_--2btT4wQHpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/b2JNCoXM2eltKNdslRZVtrBXgtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:e2:67:2d:bf:63:87:34:29:80:b5:52:f3:f1:5d:d8:98:23:
         11:05:5c:24:62:b2:a3:3b:fd:92:e9:ff:32:dc:36:0a:5e:79:
         ca:23:1c:7a:1c:35:ec:d1:9f:53:f3:cc:0f:e7:a4:79:77:0e:
         4e:98:43:4d:0d:76:ea:c0:0a:5a:c8:e1:54:3a:8e:60:45:7c:
         32:aa:33:db:c6:3f:05:4d:fb:6d:04:ec:70:e7:b7:d1:57:14:
         90:f6:b2:17:e6:46:a1:2e:a7:3e:b6:6c:0d:a1:e2:ca:64:30:
         14:6c:5b:71:5d:eb:ac:7e:05:bd:b3:31:a9:57:b8:c8:d3:11:
         42:e4:12:51:71:db:29:81:a2:d4:4d:82:51:6c:75:9a:08:77:
         6b:f5:29:6b:4b:af:4c:45:92:3a:a1:08:07:fa:52:35:57:6d:
         2b:b2:1a:83:0b:6b:de:35:56:07:0c:38:44:26:fa:cf:b6:78:
         c6:93:92:49:05:18:02:89:21:da:59:de:38:58:7c:f3:72:85:
         14:83:e9:35:54:c8:50:a8:e4:39:7c:b9:f5:a6:b6:9f:7b:77:
         ae:73:73:3e:3b:65:97:3b:9e:c8:b3:ce:01:55:f3:7b:97:c3:
         eb:9f:49:52:9f:67:08:88:e0:aa:58:fa:7a:9a:75:28:5f:9a:
         5f:60:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org