Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/fUs1MJ8msl2BteVlFXslRv8zwcE.roa
File:                     fUs1MJ8msl2BteVlFXslRv8zwcE.roa (raw, json)
Hash identifier:          169ImsXbrwiWXCOJu9CdaFts+YKu74qvwOJnhnmRuqA=
Subject key identifier:   7D:4B:35:30:9F:26:B2:5D:81:B5:E5:65:15:7B:25:46:FF:33:C1:C1
Certificate issuer:       /CN=da0558d734b16c0a798b90344570e5e5cc05399d
Certificate serial:       05B812
Authority key identifier: DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/fUs1MJ8msl2BteVlFXslRv8zwcE.roa
Signing time:             Tue 17 May 2022 18:04:29 +0000
ROA not before:           Tue 17 May 2022 18:04:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212249
IP address blocks:        141.98.113.0/24 maxlen: 24
                          141.98.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374802 (0x5b812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0558d734b16c0a798b90344570e5e5cc05399d
        Validity
            Not Before: May 17 18:04:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d4b35309f26b25d81b5e565157b2546ff33c1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:2e:c1:4e:10:09:f6:86:56:f3:00:b1:b6:
                    40:cc:60:1a:ad:68:47:63:a2:88:e1:d8:94:d7:8d:
                    ae:2a:18:cc:ea:09:c8:f1:a3:36:ea:fb:85:a8:ee:
                    7a:b7:2a:0d:dc:16:09:88:9c:4a:22:9d:d3:0e:33:
                    f8:1a:35:d7:08:f5:f5:6f:a1:24:1d:ae:7a:22:f8:
                    95:d2:50:95:dc:ba:57:d8:a8:1b:01:2f:cb:55:50:
                    80:33:5e:8d:5c:04:36:5e:98:8e:ce:2e:f0:cd:be:
                    ec:20:83:8c:fa:77:68:c6:2c:4f:d1:8f:79:0b:5a:
                    c4:8d:8d:c9:f5:17:36:87:ed:fe:33:be:a1:76:de:
                    d1:32:14:7f:26:5f:c9:f8:1d:b1:4b:b4:92:db:d7:
                    8e:84:0f:bc:59:5b:f3:aa:de:62:69:21:68:32:89:
                    fd:e2:6c:3f:f1:58:74:eb:9f:98:9c:64:94:57:c5:
                    8c:b3:58:ad:a3:49:2d:ff:5b:45:b4:88:10:11:87:
                    6d:32:be:46:b6:d3:24:93:cc:15:06:98:60:00:e2:
                    ff:4d:cb:d8:91:ca:91:db:46:a5:3c:88:94:61:40:
                    51:4a:05:0c:fe:95:29:1a:cd:ee:a9:8f:68:db:ee:
                    04:8f:9b:a9:95:37:bf:03:e6:27:81:14:50:d7:76:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4B:35:30:9F:26:B2:5D:81:B5:E5:65:15:7B:25:46:FF:33:C1:C1
            X509v3 Authority Key Identifier:
                keyid:DA:05:58:D7:34:B1:6C:0A:79:8B:90:34:45:70:E5:E5:CC:05:39:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/fUs1MJ8msl2BteVlFXslRv8zwcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/fc6800-b6e0-4a0b-92c1-604444f96290/1/2gVY1zSxbAp5i5A0RXDl5cwFOZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.113.0-141.98.114.255

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:27:13:58:8f:1d:5b:0a:83:c8:dd:88:f9:ab:57:e6:b7:
         17:49:ea:8e:e3:6a:08:b6:55:c5:9e:4c:8f:f8:dc:1f:28:e6:
         be:6a:af:5e:0c:61:c3:71:c3:63:66:dc:fb:ac:7c:31:02:b2:
         08:af:bd:be:98:d5:8f:0e:34:0c:da:52:97:5a:71:2b:80:1b:
         cc:55:bd:1a:cf:14:c7:2d:8a:da:e4:ab:55:a9:42:2d:8d:6b:
         83:50:d2:d7:a8:71:4e:0a:79:4f:37:fc:89:73:1b:04:23:aa:
         4e:75:c9:f4:e2:9f:d0:e0:39:60:82:86:8f:f5:c4:94:4e:ff:
         b8:e1:19:a6:4b:38:ab:84:bd:a8:22:70:3b:0b:60:04:bb:02:
         3a:fa:90:eb:48:52:1f:a1:98:fa:cb:f2:76:41:fa:fa:56:05:
         1c:1a:27:19:b2:c4:83:47:4b:0e:b9:76:32:17:6e:5d:99:d8:
         f5:cf:78:a0:7f:2b:51:b9:98:46:2d:b3:4f:76:32:7f:6c:3b:
         51:04:16:a1:16:f6:96:55:80:fe:16:2c:51:80:af:14:d6:cc:
         fc:07:29:b7:06:1c:ae:d6:2f:8b:1b:ad:62:25:c5:3d:2a:2d:
         dc:18:d8:ef:28:34:7d:ab:67:d6:f1:f6:39:8d:f3:ef:ba:36:
         dc:79:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-ams.rpki-client.org