Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa
File:                     DRVO8Rds-BjvhveKmD08LOS5ukE.roa (raw, json)
Hash identifier:          KNWdAsgckDPmztEYCRhE92hHD9pvT/cCWC1jrSYgf5w=
Subject key identifier:   0D:15:4E:F1:17:6C:F8:18:EF:86:F7:8A:98:3D:3C:2C:E4:B9:BA:41
Certificate issuer:       /CN=327519fc8684d3a9442df69619142228279a4f57
Certificate serial:       018A68D339C5F1B683F7FAE9C3AB3F5E24D4
Authority key identifier: 32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa
Signing time:             Wed 06 Sep 2023 04:49:47 +0000
ROA not before:           Wed 06 Sep 2023 04:49:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        146.19.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:68:d3:39:c5:f1:b6:83:f7:fa:e9:c3:ab:3f:5e:24:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327519fc8684d3a9442df69619142228279a4f57
        Validity
            Not Before: Sep  6 04:49:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0d154ef1176cf818ef86f78a983d3c2ce4b9ba41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a6:b4:2c:9b:16:9c:6b:af:07:ad:bd:f3:b8:
                    6e:99:85:db:64:d2:24:59:ca:47:8c:1c:c2:28:36:
                    4e:3a:46:d9:fe:ac:99:48:d5:d0:f3:c5:c5:87:02:
                    f9:31:59:f5:12:96:5b:a4:06:2d:5b:9c:2a:bb:df:
                    fd:fe:80:ee:b8:c7:39:19:1e:b5:e4:bf:d6:2c:db:
                    d0:ea:ba:e4:6b:51:62:6d:de:9e:12:e3:f5:fd:ef:
                    5b:b0:1c:4f:d3:9c:f1:06:60:09:d2:ea:f8:ef:33:
                    93:4d:17:be:c6:d6:55:28:db:74:b7:c2:a4:92:1f:
                    1d:02:dc:fd:71:cb:ae:ca:38:f9:e8:e3:83:5d:2f:
                    bd:c8:83:88:25:9b:38:7b:ec:0d:78:ef:87:a4:22:
                    cd:26:be:62:c3:0d:cd:0b:56:e6:cd:c3:c3:5c:f6:
                    18:32:b3:ba:be:20:a1:21:d0:5a:eb:7e:82:0d:3e:
                    7d:ce:19:b6:ce:89:5f:3c:59:3d:9f:4f:b8:1e:05:
                    93:dd:2b:e9:9b:ca:a9:ab:f8:bd:db:08:50:4c:79:
                    0b:d7:db:d5:ad:cb:d4:f1:a2:96:0b:ee:bc:e6:e9:
                    81:71:06:bc:4b:08:b0:00:6d:97:e7:af:fb:d0:a1:
                    02:f7:55:92:be:e2:5a:ff:59:5b:c7:b3:36:18:8e:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:4E:F1:17:6C:F8:18:EF:86:F7:8A:98:3D:3C:2C:E4:B9:BA:41
            X509v3 Authority Key Identifier:
                keyid:32:75:19:FC:86:84:D3:A9:44:2D:F6:96:19:14:22:28:27:9A:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnUZ_IaE06lELfaWGRQiKCeaT1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/DRVO8Rds-BjvhveKmD08LOS5ukE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d3a6d3-30cc-4c21-9789-9671f88a77e2/1/MnUZ_IaE06lELfaWGRQiKCeaT1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:58:1d:de:f4:9a:66:71:36:7f:f4:8f:9b:e0:f8:c7:25:
         fc:cb:18:b0:62:b8:ab:e9:65:53:6e:66:df:37:18:1e:2b:27:
         8c:57:43:40:4d:a5:b2:d0:24:c7:b2:ef:15:49:fa:15:62:90:
         af:86:b3:08:09:3a:5e:3e:19:c8:ac:4c:0f:64:47:8d:d6:e3:
         e9:78:7c:c7:b8:32:6c:57:46:6c:66:f9:ff:1d:d2:81:23:23:
         42:f8:52:96:be:f8:d0:00:87:9b:09:f8:b5:31:c2:d9:fb:9b:
         5c:64:bd:c3:0a:af:29:73:ca:5c:42:3a:98:e0:b7:75:66:d7:
         2e:d2:bb:dd:30:79:e0:28:ea:dd:7f:98:10:36:d9:35:82:4a:
         49:67:da:16:61:79:31:d6:32:f9:a0:fe:19:ae:9e:24:6a:3a:
         84:47:97:fa:a2:34:e9:91:ed:a0:4c:ed:ad:b0:f9:e5:9c:5c:
         70:d8:42:90:c4:97:6a:a9:34:4f:9c:1f:81:f8:76:6b:94:aa:
         52:34:c4:9f:4b:f3:0e:94:6d:86:90:28:d4:ee:3e:ac:68:6a:
         a0:a9:a3:47:77:b6:61:a0:d4:4e:5a:5e:9c:64:09:f1:7c:a0:
         c5:06:29:c9:5f:58:c5:85:38:cb:2b:12:9c:59:3f:cf:4e:73:
         25:b4:20:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpo0znF8baD9/rpw6s/XiTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNzUxOWZjODY4NGQzYTk0NDJkZjY5NjE5MTQyMjI4Mjc5
YTRmNTcwHhcNMjMwOTA2MDQ0OTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDE1NGVmMTE3NmNmODE4ZWY4NmY3OGE5ODNkM2MyY2U0YjliYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKa0LJsWnGuvB62987humYXbZNIk
WcpHjBzCKDZOOkbZ/qyZSNXQ88XFhwL5MVn1EpZbpAYtW5wqu9/9/oDuuMc5GR61
5L/WLNvQ6rrka1Fibd6eEuP1/e9bsBxP05zxBmAJ0ur47zOTTRe+xtZVKNt0t8Kk
kh8dAtz9ccuuyjj56OODXS+9yIOIJZs4e+wNeO+HpCLNJr5iww3NC1bmzcPDXPYY
MrO6viChIdBa636CDT59zhm2zolfPFk9n0+4HgWT3Svpm8qpq/i92whQTHkL19vV
rcvU8aKWC+685umBcQa8SwiwAG2X56/70KEC91WSvuJa/1lbx7M2GI6InQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0VTvEXbPgY74b3ipg9PCzkubpBMB8GA1UdIwQY
MBaAFDJ1GfyGhNOpRC32lhkUIignmk9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5VWl9JYUUwNmxFTGZhV0dSUWlLQ2VhVDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kM2E2ZDMtMzBjYy00YzIxLTk3ODkt
OTY3MWY4OGE3N2UyLzEvRFJWTzhSZHMtQmp2aHZlS21EMDhMT1M1dWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kM2E2ZDMtMzBjYy00YzIxLTk3ODktOTY3MWY4OGE3N2Uy
LzEvTW5VWl9JYUUwNmxFTGZhV0dSUWlLQ2VhVDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNdMA0G
CSqGSIb3DQEBCwUAA4IBAQAO41gd3vSaZnE2f/SPm+D4xyX8yxiwYrir6WVTbmbf
NxgeKyeMV0NATaWy0CTHsu8VSfoVYpCvhrMICTpePhnIrEwPZEeN1uPpeHzHuDJs
V0ZsZvn/HdKBIyNC+FKWvvjQAIebCfi1McLZ+5tcZL3DCq8pc8pcQjqY4Ld1Ztcu
0rvdMHngKOrdf5gQNtk1gkpJZ9oWYXkx1jL5oP4Zrp4kajqER5f6ojTpke2gTO2t
sPnlnFxw2EKQxJdqqTRPnB+B+HZrlKpSNMSfS/MOlG2GkCjU7j6saGqgqaNHd7Zh
oNROWl6cZAnxfKDFBinJX1jFhTjLKxKcWT/PTnMltCCJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:53 2024 by rpki-client on console-ams.rpki-client.org