Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/a-orL6XO93KLNp_uHUxxglPaLjg.roa
File:                     a-orL6XO93KLNp_uHUxxglPaLjg.roa (raw, json)
Hash identifier:          tdlAUyChEhCkqGPNsrqvLmnTKz/384eNFmG2Z6Albkk=
Subject key identifier:   6B:EA:2B:2F:A5:CE:F7:72:8B:36:9F:EE:1D:4C:71:82:53:DA:2E:38
Certificate issuer:       /CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
Certificate serial:       9D79C1
Authority key identifier: A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/a-orL6XO93KLNp_uHUxxglPaLjg.roa
Signing time:             Sat 01 Jan 2022 03:54:05 +0000
ROA not before:           Sat 01 Jan 2022 03:54:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        176.126.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10320321 (0x9d79c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a518fe89f78527304023f8c5f05ab2e3a3d6d9f2
        Validity
            Not Before: Jan  1 03:54:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6bea2b2fa5cef7728b369fee1d4c718253da2e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f6:f6:cb:f0:c1:e6:32:41:5c:37:ea:7c:5b:
                    05:5d:2e:19:13:2f:e8:02:28:1b:e3:14:3f:8d:55:
                    cd:5c:f5:ef:c8:e7:9c:94:0e:c4:16:59:6f:a0:78:
                    b8:af:93:24:34:7c:29:db:cf:67:5a:f2:0f:31:99:
                    70:fa:d7:1f:8c:93:e6:b8:02:ab:7e:0b:99:9d:9a:
                    4e:a2:ad:d7:32:c6:53:55:bc:e2:b1:05:d1:7e:00:
                    e4:8e:9c:1f:b2:c8:98:61:af:89:d5:7a:74:c9:11:
                    1c:19:3f:e7:7b:1d:56:2e:67:25:6a:4d:00:a4:8f:
                    3e:e1:ed:1b:22:10:28:b5:1b:07:22:54:14:45:bb:
                    62:97:0b:90:4a:a0:1b:8e:43:84:4b:fd:cc:91:34:
                    90:a0:6a:95:d5:52:4e:ef:db:fb:70:19:cd:25:0c:
                    03:6e:c6:34:cb:58:cd:c6:06:3d:80:c6:b7:d0:79:
                    0c:a5:27:c8:e1:39:b9:9e:fe:af:eb:b4:a7:3f:78:
                    0d:76:23:91:dd:5b:a8:40:c3:be:a5:82:ff:e4:ec:
                    e6:eb:2c:df:93:f8:1e:9e:67:97:b8:11:08:5a:66:
                    8e:3c:0e:a3:db:f2:4d:7a:8e:16:92:03:e5:e5:2b:
                    ce:43:59:de:0b:6c:42:ac:0c:50:d7:16:ac:d4:3a:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:2B:2F:A5:CE:F7:72:8B:36:9F:EE:1D:4C:71:82:53:DA:2E:38
            X509v3 Authority Key Identifier:
                keyid:A5:18:FE:89:F7:85:27:30:40:23:F8:C5:F0:5A:B2:E3:A3:D6:D9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRj-ifeFJzBAI_jF8Fqy46PW2fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/a-orL6XO93KLNp_uHUxxglPaLjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3fc2fb-d24e-41cc-835b-91f3e38d0535/1/pRj-ifeFJzBAI_jF8Fqy46PW2fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fd:a5:6a:7d:c5:e0:ce:2f:32:77:1f:c1:71:ec:c6:ef:28:
         83:0a:0f:a0:6c:dd:91:48:43:38:f2:c8:58:42:70:5d:d1:d9:
         97:47:ea:cd:f5:99:b0:6a:e4:89:4f:1e:d2:33:41:61:39:c0:
         45:ad:0c:66:08:7b:76:55:55:d5:ea:73:65:30:ac:d6:e3:eb:
         65:4d:d9:a4:93:84:16:c4:a5:62:5c:f6:b7:83:48:b5:52:00:
         60:a0:ff:2c:c8:ef:d3:77:5b:af:c5:3d:d2:86:39:a5:68:01:
         b0:c8:eb:c7:04:87:4a:78:27:c7:25:a2:30:a1:5d:ac:fb:ab:
         b4:3c:33:8f:2b:ec:6c:cb:3a:5f:be:5b:6b:b9:21:bc:29:f2:
         dd:7d:d0:4b:f8:39:0c:29:0b:67:ab:e8:78:80:97:b7:c6:ab:
         57:85:aa:35:13:62:60:50:35:e6:43:68:b8:43:6e:d6:7d:00:
         54:64:b4:40:7c:df:64:3b:9a:7d:e0:83:a7:38:39:a7:2a:bc:
         4b:53:86:dc:c8:bd:a4:1f:07:40:61:da:a5:94:7e:ed:4c:d8:
         d5:8c:51:8a:59:da:ff:3c:c4:44:e3:45:a3:83:5b:8c:c8:21:
         39:f3:d7:ef:d8:29:69:68:6e:c5:bc:0d:ac:a9:24:bf:cc:26:
         3e:9f:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:34 2024 by rpki-client on console-ams.rpki-client.org