Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/irLhAZQ09W4A4Ls2FnLNMThtJhg.roa
File:                     irLhAZQ09W4A4Ls2FnLNMThtJhg.roa (raw, json)
Hash identifier:          UtkMfpUyY51QcyHnqaAUaf0JLbfxVXZwXnQZ3CP8Qho=
Subject key identifier:   8A:B2:E1:01:94:34:F5:6E:00:E0:BB:36:16:72:CD:31:38:6D:26:18
Certificate issuer:       /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial:       08C8FD9F
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/irLhAZQ09W4A4Ls2FnLNMThtJhg.roa
Signing time:             Mon 07 Mar 2022 07:06:27 +0000
ROA not before:           Mon 07 Mar 2022 07:06:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398343
IP address blocks:        91.149.202.0/23 maxlen: 23
                          91.149.215.0/24 maxlen: 24
                          91.149.218.0/23 maxlen: 23
                          91.149.221.0/24 maxlen: 24
                          91.149.222.0/23 maxlen: 23
                          91.149.232.0/23 maxlen: 23
                          91.149.236.0/22 maxlen: 22
                          91.149.235.0/24 maxlen: 24
                          91.149.240.0/22 maxlen: 22
                          91.149.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147389855 (0x8c8fd9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
        Validity
            Not Before: Mar  7 07:06:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8ab2e1019434f56e00e0bb361672cd31386d2618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:fe:5d:5a:0c:a5:cc:51:e0:cb:1c:5b:69:
                    35:9a:b9:1c:8b:82:a5:42:41:a0:79:fc:2f:25:e7:
                    63:c8:e8:4a:ab:1a:bd:f6:b3:10:dd:d7:62:33:00:
                    cc:18:ef:60:e9:eb:2f:a5:a6:a9:9f:87:49:88:a3:
                    e5:4c:90:b9:17:ef:b1:81:f1:f7:92:e7:ec:f5:c9:
                    a2:3e:b4:db:f9:6b:e2:2d:79:65:bb:e0:24:e9:ea:
                    62:08:da:54:51:b9:5d:89:18:02:5d:4c:15:b7:0c:
                    2f:d6:54:c0:d7:4a:62:fb:70:0c:1f:c9:f2:2e:60:
                    9d:4f:d9:d7:06:28:76:57:72:5d:1a:64:63:2a:86:
                    67:80:d4:5d:40:8d:1d:a8:13:2f:ee:a3:36:17:0a:
                    b3:dc:85:7a:1d:64:e6:f0:4f:d0:de:57:10:57:1e:
                    39:61:f4:77:a4:29:89:5e:ad:b4:50:7b:aa:b2:2b:
                    af:e0:84:34:ed:e9:43:8c:32:3e:ae:dc:96:f4:20:
                    c3:33:70:84:65:4a:a2:01:a4:3e:dc:9c:6c:a7:68:
                    32:52:16:b4:34:6a:57:6e:ed:db:d9:43:ef:5e:45:
                    d5:e8:67:10:62:1b:de:3b:c8:f3:d2:25:5c:7d:41:
                    4d:3d:90:6b:c1:22:ad:9a:10:6c:0b:44:6a:b5:c9:
                    17:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:E1:01:94:34:F5:6E:00:E0:BB:36:16:72:CD:31:38:6D:26:18
            X509v3 Authority Key Identifier:
                keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/irLhAZQ09W4A4Ls2FnLNMThtJhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.149.202.0/23
                  91.149.215.0/24
                  91.149.218.0/23
                  91.149.221.0-91.149.223.255
                  91.149.232.0/23
                  91.149.235.0-91.149.243.255
                  91.149.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:25:f4:d6:2a:83:14:0c:bf:02:b9:4d:7e:96:d8:2e:ea:
         1c:2c:01:32:d5:f1:ca:e5:97:83:03:56:b5:c3:c6:a3:a4:90:
         38:22:18:e9:d1:ee:5a:40:8c:4e:07:13:f2:13:3e:c9:34:ff:
         a2:6c:6e:70:a3:4f:ff:47:32:0b:26:26:21:87:52:4b:ed:c4:
         ca:4c:4f:df:df:8c:ce:a5:e0:93:23:f2:11:02:82:e1:d2:06:
         dc:70:37:f1:ef:52:c0:5d:f4:74:62:b7:ec:0f:1d:13:1f:60:
         2c:c4:b0:c9:ad:9b:d6:47:60:cf:5d:4a:de:18:aa:4b:67:60:
         b7:40:27:c2:21:2a:91:bd:98:55:a3:e5:2b:f8:1a:f1:c4:d7:
         48:87:9f:cb:8d:0a:fb:04:69:ba:b5:8c:0d:e2:75:e2:8c:d8:
         b6:63:2d:e5:88:3f:e5:72:7b:84:1a:d1:3c:db:ff:3a:17:52:
         48:67:74:e0:30:76:03:d3:6c:ea:86:97:80:85:28:f9:64:01:
         90:d9:3c:14:33:1e:8b:1a:6b:0d:a5:bd:5b:1b:64:9e:53:f2:
         f2:6a:6b:a4:51:bb:b2:db:4f:df:13:be:71:a6:5d:99:8c:68:
         5a:69:9d:ca:8f:e5:ac:e0:a3:24:2e:0b:4f:55:65:e4:a1:3c:
         ff:25:9b:1e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIECMj9nzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
Njc4NTBlNTcxZjNmMmFjYTJjMWVjMWQ3ZTUwMmQ5YmQxODRjNDVjMB4XDTIyMDMw
NzA3MDYyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOGFiMmUxMDE5NDM0
ZjU2ZTAwZTBiYjM2MTY3MmNkMzEzODZkMjYxODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMr9/l1aDKXMUeDLHFtpNZq5HIuCpUJBoHn8LyXnY8joSqsa
vfazEN3XYjMAzBjvYOnrL6WmqZ+HSYij5UyQuRfvsYHx95Ln7PXJoj602/lr4i15
ZbvgJOnqYgjaVFG5XYkYAl1MFbcML9ZUwNdKYvtwDB/J8i5gnU/Z1wYodldyXRpk
YyqGZ4DUXUCNHagTL+6jNhcKs9yFeh1k5vBP0N5XEFceOWH0d6QpiV6ttFB7qrIr
r+CENO3pQ4wyPq7clvQgwzNwhGVKogGkPtycbKdoMlIWtDRqV27t29lD715F1ehn
EGIb3jvI89IlXH1BTT2Qa8EirZoQbAtEarXJF48CAwEAAaOCAj0wggI5MB0GA1Ud
DgQWBBSKsuEBlDT1bgDguzYWcs0xOG0mGDAfBgNVHSMEGDAWgBSmeFDlcfPyrKLB
7B1+UC2b0YTEXDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BuaFE1WEh6OHF5aXdld2RmbEF0bTlHRXhGdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTkvMzMwOWI1LWY5M2YtNGM2Mi04ZGNlLWIwYzE1MWU1MTZjZi8x
L2lyTGhBWlEwOVc0QTRMczJGbkxOTVRodEpoZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkv
MzMwOWI1LWY5M2YtNGM2Mi04ZGNlLWIwYzE1MWU1MTZjZi8xL3BuaFE1WEh6OHF5
aXdld2RmbEF0bTlHRXhGdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBT
BggrBgEFBQcBBwEB/wREMEIwQAQCAAEwOgMEAVuVygMEAFuV1wMEAVuV2jAMAwQA
W5XdAwQFW5XAAwQBW5XoMAwDBABblesDBAJblfADBAJblfwwDQYJKoZIhvcNAQEL
BQADggEBAGRrJfTWKoMUDL8CuU1+ltgu6hwsATLV8crll4MDVrXDxqOkkDgiGOnR
7lpAjE4HE/ITPsk0/6JsbnCjT/9HMgsmJiGHUkvtxMpMT9/fjM6l4JMj8hECguHS
BtxwN/HvUsBd9HRit+wPHRMfYCzEsMmtm9ZHYM9dSt4YqktnYLdAJ8IhKpG9mFWj
5Sv4GvHE10iHn8uNCvsEabq1jA3ideKM2LZjLeWIP+Vye4Qa0Tzb/zoXUkhndOAw
dgPTbOqGl4CFKPlkAZDZPBQzHosaaw2lvVsbZJ5T8vJqa6RRu7LbT98TvnGmXZmM
aFppncqP5azgoyQuC09VZeShPP8lmx4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-ams.rpki-client.org