Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa
File:                     t5cX4p-wbZJiIP9fJh22ALHg3Io.roa (raw, json)
Hash identifier:          IeRDANZMQFjRkI02ivsyrxTTaAZ6fc6g6i/UdM3h56Q=
Subject key identifier:   B7:97:17:E2:9F:B0:6D:92:62:20:FF:5F:26:1D:B6:00:B1:E0:DC:8A
Certificate issuer:       /CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
Certificate serial:       7C75D5
Authority key identifier: 6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa
Signing time:             Sat 01 Jan 2022 02:54:32 +0000
ROA not before:           Sat 01 Jan 2022 02:54:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29538
IP address blocks:        146.19.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8156629 (0x7c75d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f624d0a85ccd9e96d28d76c951655b6b05782d6
        Validity
            Not Before: Jan  1 02:54:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b79717e29fb06d926220ff5f261db600b1e0dc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:85:3f:49:28:8b:50:6e:0b:a8:74:a5:cf:c3:
                    a8:7e:fe:1f:f6:e5:51:30:c9:74:ff:57:04:a8:d6:
                    df:c5:31:1c:a0:68:c8:9e:a8:88:f8:2d:de:57:cb:
                    d5:95:55:45:50:74:93:e0:3b:ca:4a:3c:ff:49:22:
                    8b:b3:8f:99:b7:a5:fe:39:2b:41:5a:e3:97:a2:3f:
                    26:84:ea:e5:e0:20:11:6c:0d:74:2a:8e:9f:8f:c9:
                    89:78:3e:cb:84:d0:5f:bc:9f:a9:01:54:37:a3:23:
                    9d:d9:31:e0:fb:50:59:24:dc:18:ce:b8:c1:e7:b8:
                    91:e0:3a:87:08:bb:ee:d5:3c:59:85:50:a6:c0:58:
                    a0:61:4e:d8:f7:8f:00:a0:6d:9a:bd:1f:da:4e:dc:
                    c5:20:4c:6c:ab:f7:79:a7:d0:e4:4c:f1:e7:f0:6e:
                    0c:4e:20:da:7c:0e:c2:5a:5e:b6:ac:a7:c8:ce:35:
                    54:47:aa:fb:bc:31:ad:8e:63:96:92:4d:b1:62:9d:
                    11:32:21:5d:2f:27:2e:ed:e5:af:11:43:45:0c:b8:
                    3a:26:e1:e1:9f:ae:d5:14:44:5f:4c:2d:09:5d:65:
                    ff:b3:1d:8c:b7:04:22:30:b6:05:30:2a:95:b2:04:
                    6e:87:33:4a:a7:c3:a3:37:67:76:32:de:0d:30:f1:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:97:17:E2:9F:B0:6D:92:62:20:FF:5F:26:1D:B6:00:B1:E0:DC:8A
            X509v3 Authority Key Identifier:
                keyid:6F:62:4D:0A:85:CC:D9:E9:6D:28:D7:6C:95:16:55:B6:B0:57:82:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2JNCoXM2eltKNdslRZVtrBXgtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/t5cX4p-wbZJiIP9fJh22ALHg3Io.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/22dc3d-f59f-45ad-a185-d80162790ccb/1/b2JNCoXM2eltKNdslRZVtrBXgtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:46:b7:91:5a:99:9e:86:82:f8:93:49:08:2a:0a:f3:ee:
         1a:0b:0d:a4:58:9e:35:eb:69:bf:af:6a:bf:48:d6:1d:38:b3:
         8e:81:8a:df:65:8c:c4:70:9f:24:86:52:37:89:53:a9:96:1d:
         66:93:73:ea:38:48:75:9c:65:17:b4:f8:1d:d9:85:87:3c:ce:
         b4:84:6f:f4:17:44:e2:ec:b7:66:e1:b1:6e:0c:e1:08:9f:b3:
         5a:cc:f1:28:6b:85:cb:10:bc:d9:95:b8:86:19:35:7a:32:85:
         a8:cf:60:75:a6:0f:4f:f2:6b:01:8b:13:41:07:4d:22:8e:40:
         9a:b3:af:0d:51:8a:09:5e:3b:a5:e1:5b:50:a4:cc:89:f0:b2:
         36:a6:f5:09:d4:c9:e3:3b:64:84:7f:31:08:80:9b:e9:fb:4d:
         9c:d8:9d:bc:83:86:f6:ad:95:7a:1d:90:e8:31:30:8b:76:ce:
         28:96:45:4f:9a:9e:d7:88:6d:9b:b4:9f:c8:74:e5:2c:69:fb:
         49:bd:ae:36:75:fa:44:78:e3:65:a0:b9:d9:3a:ac:47:59:76:
         50:32:67:eb:bc:52:b7:d2:ce:8c:11:75:1c:d9:6a:99:bf:23:
         31:c9:2d:d1:a3:f4:a4:81:56:1d:2e:b1:e7:a7:8b:46:1e:7c:
         3d:88:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:26 2024 by rpki-client on console-ams.rpki-client.org