Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/kVyV06LkV2M8kYMIheVfqnyOLsU.roa
File:                     kVyV06LkV2M8kYMIheVfqnyOLsU.roa (raw, json)
Hash identifier:          lMVBYBzuBKnb1kuTXX0Ea2Ut7mMCkd3mh5xGG/PiwtI=
Subject key identifier:   91:5C:95:D3:A2:E4:57:63:3C:91:83:08:85:E5:5F:AA:7C:8E:2E:C5
Certificate issuer:       /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial:       01856FF949979AF7AFCEF41648FA1345485A
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/kVyV06LkV2M8kYMIheVfqnyOLsU.roa
Signing time:             Mon 02 Jan 2023 00:54:46 +0000
ROA not before:           Mon 02 Jan 2023 00:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     265919
IP address blocks:        185.130.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:49:97:9a:f7:af:ce:f4:16:48:fa:13:45:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Jan  2 00:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=915c95d3a2e457633c91830885e55faa7c8e2ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:81:40:96:3b:dd:24:1b:80:9e:2f:73:80:
                    37:47:fe:dd:be:eb:8b:f7:93:a7:de:74:51:5b:6e:
                    06:91:b4:1d:51:7f:79:20:05:a0:46:e2:a1:62:cb:
                    92:42:a1:38:bb:8e:e5:17:34:c8:89:30:6e:46:23:
                    ef:7e:1b:f6:67:93:43:47:9c:34:3c:8e:10:70:d8:
                    05:ab:44:26:49:45:f9:ce:68:ed:21:c6:f0:37:01:
                    25:ab:20:42:7b:38:2c:7a:16:ae:76:21:f8:2a:a6:
                    e2:92:41:8a:06:c6:67:4e:e8:ce:79:0b:a9:11:65:
                    c3:62:6e:33:96:48:bd:c5:a8:c6:b4:57:a8:50:ca:
                    a6:c9:f3:44:de:1f:4f:15:4d:1f:d1:3b:9d:72:9c:
                    55:ee:d5:e5:23:c2:6f:01:cb:1b:eb:8b:5a:8e:40:
                    d1:d9:93:7b:45:9d:f9:3a:19:40:d3:fc:c9:e8:7e:
                    47:ea:85:1c:4f:2e:ba:c3:98:b1:f9:79:57:14:e8:
                    cd:d5:65:dc:03:f6:2e:6c:a6:ae:c8:66:cf:d5:c7:
                    33:c5:3d:4e:a3:47:61:ed:2c:7f:3f:45:22:d5:1e:
                    27:65:a2:c3:8c:7a:75:2e:70:d4:bd:5d:37:2b:e9:
                    98:27:f7:42:22:35:00:66:fc:60:81:04:76:8c:7f:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:95:D3:A2:E4:57:63:3C:91:83:08:85:E5:5F:AA:7C:8E:2E:C5
            X509v3 Authority Key Identifier:
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/kVyV06LkV2M8kYMIheVfqnyOLsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.130.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b8:dd:66:e2:5a:5e:58:87:ea:5f:15:69:21:ac:47:a5:75:
         ba:ac:88:93:19:33:7d:2e:25:3c:c4:10:7b:56:5c:a9:77:b6:
         83:e1:44:56:c4:f6:1f:9c:b7:b2:6d:8f:6a:5f:6d:d5:4f:cb:
         39:f2:93:7b:b6:28:3a:2d:00:b7:26:14:0a:23:4f:c8:fc:56:
         b9:2c:34:a1:88:84:76:e3:90:81:64:71:2c:60:dc:7a:22:86:
         db:d2:ef:c8:af:da:99:fc:15:37:82:ee:23:29:88:ca:ca:87:
         60:8f:a5:72:71:80:05:6b:b6:67:b8:3f:3b:13:73:f8:4a:18:
         d5:7e:80:fd:ed:85:47:bf:40:44:e4:8e:5b:78:49:14:10:17:
         b7:b6:e4:00:cf:61:96:73:f0:1f:e7:c0:54:00:48:38:84:c6:
         90:2b:e4:c2:24:72:fb:9e:17:62:15:1a:58:da:31:fc:e2:2e:
         51:4c:bb:6d:c7:6e:b2:f2:5f:da:46:9c:03:49:16:aa:5a:9f:
         be:91:8f:78:ac:4d:07:18:27:8c:85:69:cd:e0:f0:13:bc:7f:
         56:7a:7c:8e:0f:17:d9:24:45:08:29:84:4a:4f:c5:c2:a5:ca:
         39:ed:5b:01:ed:6a:93:d3:26:b8:6a:b0:ea:e2:79:d8:21:13:
         f5:99:4f:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+UmXmvevzvQWSPoTRUhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwODUzOTdmMjZhMDQ0Y2FlZjZhNmI2NjkyODczMzFhYTRk
Njg2NDUwHhcNMjMwMTAyMDA1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVjOTVkM2EyZTQ1NzYzM2M5MTgzMDg4NWU1NWZhYTdjOGUyZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNeBQJY73SQbgJ4vc4A3R/7dvuuL
95On3nRRW24GkbQdUX95IAWgRuKhYsuSQqE4u47lFzTIiTBuRiPvfhv2Z5NDR5w0
PI4QcNgFq0QmSUX5zmjtIcbwNwElqyBCezgsehaudiH4KqbikkGKBsZnTujOeQup
EWXDYm4zlki9xajGtFeoUMqmyfNE3h9PFU0f0TudcpxV7tXlI8JvAcsb64tajkDR
2ZN7RZ35OhlA0/zJ6H5H6oUcTy66w5ix+XlXFOjN1WXcA/YubKauyGbP1cczxT1O
o0dh7Sx/P0Ui1R4nZaLDjHp1LnDUvV03K+mYJ/dCIjUAZvxggQR2jH9C4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFcldOi5FdjPJGDCIXlX6p8ji7FMB8GA1UdIwQY
MBaAFGCFOX8moETK72prZpKHMxqk1oZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGIt
NjE2ZDk3YTc3YmQ2LzEva1Z5VjA2TGtWMk04a1lNSWhlVmZxbnlPTHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xMTI1YTItNDQzMi00ODNmLWEwMGItNjE2ZDk3YTc3YmQ2
LzEvWUlVNWZ5YWdSTXJ2YW10bWtvY3pHcVRXaGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYI9MA0G
CSqGSIb3DQEBCwUAA4IBAQAUuN1m4lpeWIfqXxVpIaxHpXW6rIiTGTN9LiU8xBB7
Vlypd7aD4URWxPYfnLeybY9qX23VT8s58pN7tig6LQC3JhQKI0/I/Fa5LDShiIR2
45CBZHEsYNx6Iobb0u/Ir9qZ/BU3gu4jKYjKyodgj6VycYAFa7ZnuD87E3P4ShjV
foD97YVHv0BE5I5beEkUEBe3tuQAz2GWc/Af58BUAEg4hMaQK+TCJHL7nhdiFRpY
2jH84i5RTLttx26y8l/aRpwDSRaqWp++kY94rE0HGCeMhWnN4PATvH9WenyODxfZ
JEUIKYRKT8XCpco57VsB7WqT0ya4arDq4nnYIRP1mU9B
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:46 2024 by rpki-client on console-ams.rpki-client.org