Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/7MCjjhuV7EIehXrGAgYVOX1C-Q4.roa
File:                     7MCjjhuV7EIehXrGAgYVOX1C-Q4.roa (raw, json)
Hash identifier:          rltKzH+xL3fFLMzPzwxrhYQxINd5MsyFa97EODrOPEQ=
Subject key identifier:   EC:C0:A3:8E:1B:95:EC:42:1E:85:7A:C6:02:06:15:39:7D:42:F9:0E
Certificate issuer:       /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial:       839724
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/7MCjjhuV7EIehXrGAgYVOX1C-Q4.roa
Signing time:             Sun 06 Feb 2022 09:50:20 +0000
ROA not before:           Sun 06 Feb 2022 09:50:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        130.255.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8623908 (0x839724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
        Validity
            Not Before: Feb  6 09:50:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ecc0a38e1b95ec421e857ac6020615397d42f90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:6e:0b:37:22:6c:49:45:72:ed:74:b0:9e:
                    22:14:d0:7a:35:0d:47:e8:cf:dc:a2:a5:9d:d8:19:
                    80:90:67:97:7b:78:42:dc:83:33:38:31:1e:b6:b0:
                    27:98:29:72:f1:f4:4e:9e:ee:31:7e:16:41:21:e7:
                    2c:e2:73:db:0d:c4:00:5f:5a:17:c9:84:e4:fb:b4:
                    19:dc:39:18:d5:3e:50:fc:50:3f:29:b6:a5:ce:93:
                    6f:57:3a:61:a0:b1:df:b8:6f:2e:5e:6b:0a:8f:64:
                    0f:64:a5:d1:61:3c:5c:35:7e:4d:0e:97:0f:79:e2:
                    ca:41:27:ea:5b:7a:3f:41:df:7e:e8:01:91:fb:47:
                    b4:72:c9:bc:c6:79:40:d8:7e:bd:89:c0:65:5c:3e:
                    08:25:30:11:dd:28:2c:a9:43:db:15:98:d3:71:02:
                    4d:46:22:af:18:53:db:86:90:86:11:83:d5:91:90:
                    9c:73:2a:14:b6:aa:d4:6c:1f:e0:cf:a3:8c:63:c5:
                    88:f6:7d:01:c5:03:f0:17:9c:75:88:1b:a0:c4:e2:
                    b5:6c:3e:26:b1:41:5f:06:c7:ca:f5:74:bf:84:c0:
                    8a:88:3a:5e:9a:86:14:93:c1:40:03:da:27:96:a1:
                    6f:db:c5:6f:7d:fe:f2:e5:91:4d:1e:45:40:12:f8:
                    65:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C0:A3:8E:1B:95:EC:42:1E:85:7A:C6:02:06:15:39:7D:42:F9:0E
            X509v3 Authority Key Identifier:
                keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/7MCjjhuV7EIehXrGAgYVOX1C-Q4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.255.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:bc:30:33:63:0b:7b:97:4f:14:4b:a2:65:1a:7c:33:33:
         a4:ed:2b:d6:e7:3b:4b:4e:f9:d7:4f:e1:8b:9c:f7:a9:2d:12:
         92:cf:72:42:de:21:62:2c:8d:db:3e:26:a5:99:62:c1:1f:99:
         81:91:9c:0c:d3:5e:89:9e:ae:f0:60:fb:38:03:21:78:87:6a:
         44:fc:7c:2c:8d:e9:dd:9c:80:8b:c1:4b:49:5b:b7:ea:80:15:
         e4:9e:69:f8:11:77:b7:c1:ab:b1:11:31:7f:05:9b:da:3d:fb:
         eb:71:90:ac:40:be:af:78:60:28:01:f7:bd:78:b5:10:94:31:
         02:6e:1b:40:e6:90:3e:a4:cd:96:4a:7e:39:87:3c:32:77:3f:
         8a:c7:ed:f8:1c:f1:6b:81:cd:7b:36:77:19:b2:dc:21:a8:3d:
         4c:54:88:59:60:60:9a:ae:92:73:4b:bd:e8:6e:59:23:ba:25:
         88:4e:fe:ef:34:a1:c3:83:53:38:e9:3b:f4:4b:9d:df:02:6f:
         c8:99:c2:03:ba:9f:7c:97:33:e9:29:45:89:af:ba:05:5c:a3:
         c5:69:1a:a2:22:b5:23:b3:c0:b8:38:ff:79:41:1f:6c:85:b3:
         88:8f:ae:38:c3:88:1f:44:18:6e:5f:ca:2e:a3:ce:c8:66:ac:
         4c:4f:10:3b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAIOXJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ZWYxMDRmYzRiMGI1YzA4MjcyZTNhZTc4M2I4Y2Q3NzdiYTJhYTkwMB4XDTIyMDIw
NjA5NTAyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWNjMGEzOGUxYjk1
ZWM0MjFlODU3YWM2MDIwNjE1Mzk3ZDQyZjkwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbhbgs3ImxJRXLtdLCeIhTQejUNR+jP3KKlndgZgJBnl3t4
QtyDMzgxHrawJ5gpcvH0Tp7uMX4WQSHnLOJz2w3EAF9aF8mE5Pu0Gdw5GNU+UPxQ
Pym2pc6Tb1c6YaCx37hvLl5rCo9kD2Sl0WE8XDV+TQ6XD3niykEn6lt6P0HffugB
kftHtHLJvMZ5QNh+vYnAZVw+CCUwEd0oLKlD2xWY03ECTUYirxhT24aQhhGD1ZGQ
nHMqFLaq1Gwf4M+jjGPFiPZ9AcUD8BecdYgboMTitWw+JrFBXwbHyvV0v4TAiog6
XpqGFJPBQAPaJ5ahb9vFb33+8uWRTR5FQBL4ZRkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTswKOOG5XsQh6FesYCBhU5fUL5DjAfBgNVHSMEGDAWgBRe8QT8SwtcCCcu
OueDuM13e6KqkDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1h2RUVfRXNMWEFnbkxqcm5nN2pOZDN1aXFwQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvMzUzYmZhLWFiZGItNDQ0YS04MTU0LTRmYzU0YjBiYWE3OC8x
LzdNQ2pqaHVWN0VJZWhYckdBZ1lWT1gxQy1RNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
MzUzYmZhLWFiZGItNDQ0YS04MTU0LTRmYzU0YjBiYWE3OC8xL1h2RUVfRXNMWEFn
bkxqcm5nN2pOZDN1aXFwQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIL/rjANBgkqhkiG9w0BAQsFAAOC
AQEAo7C8MDNjC3uXTxRLomUafDMzpO0r1uc7S07510/hi5z3qS0Sks9yQt4hYiyN
2z4mpZliwR+ZgZGcDNNeiZ6u8GD7OAMheIdqRPx8LI3p3ZyAi8FLSVu36oAV5J5p
+BF3t8GrsRExfwWb2j3763GQrEC+r3hgKAH3vXi1EJQxAm4bQOaQPqTNlkp+OYc8
Mnc/isft+Bzxa4HNezZ3GbLcIag9TFSIWWBgmq6Sc0u96G5ZI7oliE7+7zShw4NT
OOk79Eud3wJvyJnCA7qffJcz6SlFia+6BVyjxWkaoiK1I7PAuDj/eUEfbIWziI+u
OMOIH0QYbl/KLqPOyGasTE8QOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:03 2024 by rpki-client on console-ams.rpki-client.org