Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Ljs9cGCGvOcZQkzEepsV_9LJrpQ.roa
File:                     Ljs9cGCGvOcZQkzEepsV_9LJrpQ.roa (raw, json)
Hash identifier:          aOD0OuRcpF5v4LCM0IpuIFOdoTMCZhTAgTnfZZ1V/zQ=
Subject key identifier:   2E:3B:3D:70:60:86:BC:E7:19:42:4C:C4:7A:9B:15:FF:D2:C9:AE:94
Certificate issuer:       /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial:       01856BD34E6A8F6B9D905DA3DB882AECAB99
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Ljs9cGCGvOcZQkzEepsV_9LJrpQ.roa
Signing time:             Sun 01 Jan 2023 05:34:48 +0000
ROA not before:           Sun 01 Jan 2023 05:34:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197248
IP address blocks:        5.149.241.0/24 maxlen: 24
                          5.149.242.0/24 maxlen: 24
                          185.235.33.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:4e:6a:8f:6b:9d:90:5d:a3:db:88:2a:ec:ab:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
        Validity
            Not Before: Jan  1 05:34:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e3b3d706086bce719424cc47a9b15ffd2c9ae94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:7d:1e:78:5a:89:aa:60:1b:19:b3:0f:5c:
                    ec:d5:8c:55:df:27:9b:5c:c2:e2:8f:8f:d6:12:1c:
                    4c:df:52:33:db:0c:1f:20:96:4d:03:8b:8c:9a:64:
                    6b:2e:25:ca:92:3c:34:37:fb:4f:0e:fb:d9:97:19:
                    25:72:56:41:d0:a4:b8:0c:a5:b2:47:b3:60:07:73:
                    40:8f:f3:25:ee:36:a7:93:0c:5a:a0:93:be:de:63:
                    2f:07:30:29:f1:33:91:03:01:3f:91:50:62:a4:28:
                    b7:19:c4:9b:57:94:19:91:ec:d2:f8:8f:1c:57:27:
                    ee:bf:7b:8c:8a:6d:27:c1:09:fc:e5:98:88:0e:b4:
                    fe:8b:4f:2d:0a:13:8d:d9:42:25:cf:a0:44:73:2a:
                    04:3b:97:da:2f:93:3d:d1:c7:25:fb:ae:47:a9:c4:
                    09:36:f5:22:13:35:a6:d0:36:02:52:23:3e:cb:b9:
                    67:c6:67:0e:41:52:2c:b3:a5:86:cf:75:35:27:20:
                    19:cf:2e:c6:14:40:a2:dc:c4:00:28:cb:f2:98:6b:
                    90:40:f4:44:e1:04:ad:b3:0b:64:cc:38:1a:d5:23:
                    ce:98:0d:a8:60:bb:3a:1e:32:99:6b:84:38:09:e4:
                    d4:ef:ee:85:1b:a5:25:68:bb:ba:f3:41:69:57:2b:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:3D:70:60:86:BC:E7:19:42:4C:C4:7A:9B:15:FF:D2:C9:AE:94
            X509v3 Authority Key Identifier:
                keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/Ljs9cGCGvOcZQkzEepsV_9LJrpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.241.0-5.149.242.255
                  185.235.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:48:51:7a:7c:e0:36:10:86:8a:cb:a4:38:db:26:15:94:
         1e:2a:33:a0:9d:da:dd:87:98:42:2d:b0:d5:cd:9b:b8:a5:0e:
         7a:6a:fd:d9:df:2d:29:65:95:46:e7:75:92:61:23:f8:0c:fb:
         21:cd:99:fb:29:73:18:06:8d:f4:c4:3e:07:26:b3:d8:e3:2e:
         fb:f4:57:07:23:75:78:12:b4:be:2e:d3:02:3f:01:7f:e3:9f:
         d1:d1:ab:82:87:55:d2:2f:a1:bc:94:fd:7c:f0:7f:5e:42:cb:
         2d:de:7d:b4:d8:fc:98:ba:23:92:cd:8b:66:dc:61:ac:4d:04:
         4f:a9:dc:8e:37:e5:80:e5:f9:33:21:75:fa:c3:7b:31:d4:6d:
         01:f0:16:4f:28:1e:16:b9:d3:9f:d4:94:d0:5d:a3:74:e7:41:
         28:14:62:89:5b:8c:29:8f:fe:dd:45:67:d2:09:d4:23:a5:c0:
         c4:17:6e:e3:12:c1:e6:ac:8b:71:dc:a2:7f:ef:3e:70:3f:8a:
         a2:ce:37:c1:e0:e2:a1:74:b6:83:f4:08:72:79:0c:44:0b:03:
         f4:7a:ee:76:1b:7b:e1:9b:74:4e:7f:1d:26:b3:2e:4b:16:f5:
         5b:14:69:f0:81:75:fa:02:74:21:0c:3b:45:8c:dc:5e:72:e7:
         f7:67:23:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:55 2024 by rpki-client on console-ams.rpki-client.org