Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/b6LaYP5-t1nGF8r0WlWhQiLG4Nw.roa
File:                     b6LaYP5-t1nGF8r0WlWhQiLG4Nw.roa (raw, json)
Hash identifier:          cN6dmc2GAzmEak1RMGK7WLxVWie13KGS4rL5Jb8mUJY=
Subject key identifier:   6F:A2:DA:60:FE:7E:B7:59:C6:17:CA:F4:5A:55:A1:42:22:C6:E0:DC
Certificate issuer:       /CN=3a2651030fa3c5ffbb3488f1f15d99dc3b3bbaeb
Certificate serial:       1503C7
Authority key identifier: 3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/b6LaYP5-t1nGF8r0WlWhQiLG4Nw.roa
Signing time:             Sat 01 Jan 2022 00:53:19 +0000
ROA not before:           Sat 01 Jan 2022 00:53:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205775
IP address blocks:        185.36.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1377223 (0x1503c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a2651030fa3c5ffbb3488f1f15d99dc3b3bbaeb
        Validity
            Not Before: Jan  1 00:53:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6fa2da60fe7eb759c617caf45a55a14222c6e0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:7a:04:63:c0:aa:14:28:ac:48:79:95:e9:
                    3d:68:cc:b8:a7:88:93:61:73:8f:c8:72:b5:8c:bc:
                    bf:37:aa:e4:bb:b9:10:26:9b:ad:46:c2:63:fe:ab:
                    a7:61:26:ed:ac:81:9c:e5:36:76:85:4a:a9:4a:d2:
                    67:b3:12:bd:e6:cd:65:b7:a8:fb:46:ea:51:5a:45:
                    1d:72:d9:ea:dd:ce:c9:9d:1c:08:f3:8d:de:1f:74:
                    2d:a9:e0:ba:52:46:70:c6:c8:5c:33:50:f2:bb:a3:
                    23:09:6d:20:55:bd:38:cc:be:e7:1e:5a:76:b5:ee:
                    4f:47:88:83:aa:98:0c:72:50:11:cc:76:14:36:f1:
                    fc:90:37:4c:26:a4:ac:eb:d0:14:62:35:ef:63:0c:
                    ec:8b:21:a9:6f:fb:8c:2b:db:f3:a2:57:8d:af:74:
                    7f:2d:bd:56:05:f2:34:1b:22:c9:da:30:4b:bc:af:
                    bf:5d:3a:39:0d:22:20:bd:de:f1:8c:8e:c6:36:d4:
                    97:32:1b:ef:98:b8:ae:2e:05:16:18:66:83:cc:d9:
                    f4:1e:08:f0:2f:d1:75:6d:ad:ac:1f:6d:f6:22:2e:
                    f1:4e:d4:55:85:74:f3:90:bc:b9:f7:7c:c5:de:c2:
                    05:30:e5:8c:b4:7b:16:36:48:ec:b6:f0:79:8b:65:
                    80:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:DA:60:FE:7E:B7:59:C6:17:CA:F4:5A:55:A1:42:22:C6:E0:DC
            X509v3 Authority Key Identifier:
                keyid:3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/b6LaYP5-t1nGF8r0WlWhQiLG4Nw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:19:9d:6c:27:f0:93:4e:6c:68:41:fb:0e:77:0b:21:e2:a3:
         ba:80:5c:e4:d0:10:1d:e0:ab:8d:87:72:65:c1:32:a9:b8:23:
         c4:ea:d9:20:36:e8:4d:2e:52:46:7d:51:75:08:5c:02:af:2b:
         5d:37:34:c5:70:8f:d4:b5:b3:38:62:fe:6f:a2:2f:9c:fa:c8:
         db:72:27:54:e5:7b:34:8f:68:ae:2d:62:5e:e1:16:39:c6:34:
         20:63:aa:b0:e9:4e:32:ac:ac:97:bc:e5:76:be:c1:fc:ef:b5:
         00:23:b8:d1:73:99:5b:07:46:a9:4b:fc:44:9a:32:53:5f:e8:
         65:10:c8:aa:3b:17:36:3c:1b:d5:63:b8:0e:3a:1b:21:c9:8a:
         20:85:a9:53:aa:ae:32:11:08:77:bc:35:0a:92:e3:8e:42:13:
         81:b3:30:cb:63:74:75:ee:19:54:42:e0:ba:a3:ca:76:5f:ec:
         85:a3:82:57:bf:6f:1f:30:e8:60:09:c7:ff:4e:d4:50:a8:3f:
         27:55:c0:7d:b1:d3:d3:71:32:40:89:95:6e:32:39:4e:92:50:
         49:14:ee:9d:5e:b1:6b:87:04:8d:8a:27:ba:73:7d:c6:da:4c:
         4a:db:d7:db:c4:7c:e8:26:eb:6c:60:17:9f:50:a0:3f:41:dd:
         1a:16:41:ad
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDFQPHMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNh
MjY1MTAzMGZhM2M1ZmZiYjM0ODhmMWYxNWQ5OWRjM2IzYmJhZWIwHhcNMjIwMTAx
MDA1MzE5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg2ZmEyZGE2MGZlN2Vi
NzU5YzYxN2NhZjQ1YTU1YTE0MjIyYzZlMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlph6BGPAqhQorEh5lek9aMy4p4iTYXOPyHK1jLy/N6rku7kQ
JputRsJj/qunYSbtrIGc5TZ2hUqpStJnsxK95s1lt6j7RupRWkUdctnq3c7JnRwI
843eH3QtqeC6UkZwxshcM1Dyu6MjCW0gVb04zL7nHlp2te5PR4iDqpgMclARzHYU
NvH8kDdMJqSs69AUYjXvYwzsiyGpb/uMK9vzoleNr3R/Lb1WBfI0GyLJ2jBLvK+/
XTo5DSIgvd7xjI7GNtSXMhvvmLiuLgUWGGaDzNn0HgjwL9F1ba2sH232Ii7xTtRV
hXTzkLy593zF3sIFMOWMtHsWNkjstvB5i2WAuQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFG+i2mD+frdZxhfK9FpVoUIixuDcMB8GA1UdIwQYMBaAFDomUQMPo8X/uzSI
8fFdmdw7O7rrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
T2laUkF3LWp4Zi03TklqeDhWMlozRHM3dXVzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84MC9iYzQ2MTktNGIwNS00NzUzLTkwYjItMTFiNjlmNzg0YTdhLzEv
YjZMYVlQNS10MW5HRjhyMFdsV2hRaUxHNE53LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9i
YzQ2MTktNGIwNS00NzUzLTkwYjItMTFiNjlmNzg0YTdhLzEvT2laUkF3LWp4Zi03
TklqeDhWMlozRHM3dXVzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSQAMA0GCSqGSIb3DQEBCwUAA4IB
AQCSGZ1sJ/CTTmxoQfsOdwsh4qO6gFzk0BAd4KuNh3JlwTKpuCPE6tkgNuhNLlJG
fVF1CFwCrytdNzTFcI/UtbM4Yv5voi+c+sjbcidU5Xs0j2iuLWJe4RY5xjQgY6qw
6U4yrKyXvOV2vsH877UAI7jRc5lbB0apS/xEmjJTX+hlEMiqOxc2PBvVY7gOOhsh
yYoghalTqq4yEQh3vDUKkuOOQhOBszDLY3R17hlUQuC6o8p2X+yFo4JXv28fMOhg
Ccf/TtRQqD8nVcB9sdPTcTJAiZVuMjlOklBJFO6dXrFrhwSNiie6c33G2kxK29fb
xHzoJutsYBefUKA/Qd0aFkGt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:32 2024 by rpki-client on console-ams.rpki-client.org