Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/HOmlaZ83gtNL_MZKBAgCZ7ZaE7k.roa
File:                     HOmlaZ83gtNL_MZKBAgCZ7ZaE7k.roa (raw, json)
Hash identifier:          1E5OeVQqBwJOuLlvaf1VS+Saghkspgpn4pmuBSQIZRA=
Subject key identifier:   1C:E9:A5:69:9F:37:82:D3:4B:FC:C6:4A:04:08:02:67:B6:5A:13:B9
Certificate issuer:       /CN=22e7871b9266e3bd516dbd542345686af34bfc91
Certificate serial:       121FAB58
Authority key identifier: 22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/HOmlaZ83gtNL_MZKBAgCZ7ZaE7k.roa
Signing time:             Sat 01 Jan 2022 08:02:50 +0000
ROA not before:           Sat 01 Jan 2022 08:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203146
IP address blocks:        2001:67c:2ff8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304065368 (0x121fab58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22e7871b9266e3bd516dbd542345686af34bfc91
        Validity
            Not Before: Jan  1 08:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ce9a5699f3782d34bfcc64a04080267b65a13b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:f3:54:8e:80:a3:99:d9:aa:ce:2c:60:99:
                    84:c6:27:c0:b2:a3:fe:f9:27:3e:5d:1a:a4:0f:5b:
                    fc:27:96:b7:f0:eb:81:4a:d3:77:7e:fe:16:51:63:
                    e1:cd:de:9f:a4:05:b6:77:96:c7:5e:40:45:05:43:
                    08:48:ce:13:3d:d8:02:c7:2c:95:a3:16:40:00:cb:
                    45:cb:71:c3:2e:60:9b:01:b8:46:90:32:e5:af:b2:
                    1c:0f:4e:b9:74:da:88:95:9b:45:56:50:ad:af:83:
                    0b:27:a7:bc:54:57:21:52:9a:d3:28:48:6e:42:84:
                    6b:12:c0:7f:c6:95:11:34:c7:86:a1:a4:1e:e6:80:
                    dc:c6:e6:72:0e:8a:7a:79:6a:99:63:ba:0b:da:31:
                    eb:20:de:92:00:35:04:86:10:de:14:64:20:b8:7c:
                    69:51:cd:2d:28:0c:68:b9:00:73:3e:36:b3:b0:49:
                    5c:19:1d:11:db:72:8b:39:8d:8c:37:c9:6c:ba:93:
                    14:55:e6:83:8c:59:0d:05:73:81:44:59:6b:f7:54:
                    4c:4f:aa:24:36:15:54:ce:c1:5d:d9:da:88:7e:4e:
                    3b:a2:1d:34:b8:c3:e6:51:31:fe:61:77:de:5b:cf:
                    e7:a2:c6:fd:f7:2a:63:fd:72:26:4d:67:7e:37:3a:
                    f4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:A5:69:9F:37:82:D3:4B:FC:C6:4A:04:08:02:67:B6:5A:13:B9
            X509v3 Authority Key Identifier:
                keyid:22:E7:87:1B:92:66:E3:BD:51:6D:BD:54:23:45:68:6A:F3:4B:FC:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IueHG5Jm471Rbb1UI0VoavNL_JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/HOmlaZ83gtNL_MZKBAgCZ7ZaE7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/8288e6-27a5-404a-9de3-39435e4d9304/1/IueHG5Jm471Rbb1UI0VoavNL_JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2ff8::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:03:ce:c9:b4:bf:82:a4:64:a1:e5:44:f0:f3:c3:26:6a:76:
         75:0d:aa:59:80:72:32:c7:cd:5a:f2:79:8f:04:79:6f:b5:e5:
         5a:b3:09:0b:b6:9e:5e:b7:a0:7d:ed:a8:50:5f:53:76:04:4b:
         f2:7b:f6:4e:fc:cc:a0:0a:84:20:7f:05:2c:e6:1e:cf:66:de:
         eb:98:30:8e:a2:a4:76:35:39:90:3a:e8:c0:73:4f:aa:a3:06:
         06:9b:a7:f1:1c:5f:9f:19:4d:22:6e:52:fa:7f:3b:7a:aa:d8:
         b5:fe:f4:3e:b8:08:7e:9d:30:1b:ca:47:fd:ea:3c:c4:69:69:
         17:1b:2a:d1:1c:42:14:e8:47:01:b7:c4:2e:63:c4:bb:7c:1d:
         a6:46:7f:97:86:f9:b9:55:b1:0b:b8:1f:69:69:59:6e:62:53:
         f8:29:3c:94:e1:d6:8b:81:bc:22:81:45:fc:db:d7:93:b6:63:
         82:b9:55:6a:a1:84:8f:36:70:8c:92:30:d8:29:6a:05:c5:7d:
         88:58:87:bf:11:e1:eb:20:41:5c:04:11:dc:10:9c:b0:b6:6d:
         5a:78:f7:1a:62:02:b9:9f:39:c0:f8:97:d1:a7:03:c8:c8:85:
         4e:15:94:bd:0a:a2:1e:c3:96:17:4a:b8:f8:ad:5c:79:51:64:
         88:7f:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:34 2024 by rpki-client on console-ams.rpki-client.org