Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/LrItymI3nEUYe9tVBIPBNAdzqjw.roa
File:                     LrItymI3nEUYe9tVBIPBNAdzqjw.roa (raw, json)
Hash identifier:          A4fAlZ5YFWcuPvMu6CdHnskpMwh4Nt7h/2bEzjfXJac=
Subject key identifier:   2E:B2:2D:CA:62:37:9C:45:18:7B:DB:55:04:83:C1:34:07:73:AA:3C
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       02389607
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/LrItymI3nEUYe9tVBIPBNAdzqjw.roa
Signing time:             Wed 26 Jan 2022 11:56:23 +0000
ROA not before:           Wed 26 Jan 2022 11:56:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205327
IP address blocks:        5.181.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37262855 (0x2389607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Jan 26 11:56:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2eb22dca62379c45187bdb550483c1340773aa3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:a8:10:13:a0:92:48:b6:ae:54:8d:34:90:
                    b1:b1:dc:63:de:12:cb:51:3f:80:6e:90:1a:98:e7:
                    7e:01:92:6c:46:42:85:9c:d1:94:55:0e:e2:1c:33:
                    0d:f3:cb:3c:b0:f2:cd:03:0e:7e:e9:dd:10:31:7f:
                    be:9f:73:2a:63:7a:07:2f:d3:9b:37:37:42:fb:b3:
                    1c:a9:fc:22:19:db:66:82:ea:ba:b3:f1:cb:a4:43:
                    82:17:b0:cb:27:89:7b:1e:72:d1:a3:d4:18:45:de:
                    a8:69:07:97:2c:02:2c:e1:0e:2f:37:08:c8:22:0d:
                    42:d4:5b:11:d9:62:9a:92:03:e0:1c:90:8e:79:96:
                    03:12:b7:2a:9f:68:ef:5f:51:da:41:c8:f6:10:2c:
                    4c:a8:86:ef:d4:63:44:2e:18:c1:14:eb:5e:a8:11:
                    75:4c:0e:33:a4:b6:e8:a7:21:e0:af:93:17:28:9f:
                    30:c4:de:b3:02:0b:df:6b:ce:d1:e6:aa:ac:4e:c0:
                    7b:31:6d:70:a1:e2:bf:3d:18:a5:65:0f:84:a3:4b:
                    fc:d7:a4:3d:bc:e2:ec:c6:7e:20:d4:f0:30:18:64:
                    f7:b9:a7:83:2f:62:c4:ec:30:c7:b6:4e:f5:83:a0:
                    98:e5:ca:94:a9:08:9b:b1:90:91:91:f5:f3:33:e1:
                    70:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B2:2D:CA:62:37:9C:45:18:7B:DB:55:04:83:C1:34:07:73:AA:3C
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/LrItymI3nEUYe9tVBIPBNAdzqjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:db:6a:98:24:c3:1d:be:e7:1f:c5:2d:34:7f:5d:7a:3e:
         5e:05:7c:1d:27:ed:ff:b1:3c:c7:72:c2:bf:b8:3e:17:96:6f:
         33:5a:b7:1f:30:b2:2c:a0:7e:f6:ba:d4:4e:e0:0d:5f:1d:27:
         c3:ad:a9:ee:5d:7a:c6:2f:a4:a5:f5:1a:ac:20:b6:80:15:20:
         76:fa:48:a1:80:f5:a7:a4:6c:e5:79:91:ee:c1:50:7a:76:13:
         f2:47:02:55:6a:0f:5d:f8:f8:d5:cb:81:3b:ef:65:3e:7e:e7:
         d2:05:b0:f8:8b:12:3d:b1:5d:ce:9c:e1:08:45:a0:87:19:1c:
         fd:de:ec:53:ba:6b:ef:9d:ba:0c:a3:79:76:03:9d:78:d1:70:
         93:bf:1f:90:de:fd:e0:ef:78:60:89:67:f4:7d:0d:28:2f:e0:
         42:d0:2d:08:8d:ee:2f:db:1a:e9:d7:6c:4c:6b:5a:07:48:35:
         67:e5:47:55:6e:1b:82:b4:05:dd:a3:e4:f3:68:f7:73:b6:85:
         6b:57:0c:c1:b8:82:66:77:6e:c7:83:a4:4c:17:84:dc:ef:8b:
         b5:9b:69:17:a2:2a:a4:15:dc:c7:bd:2b:89:91:ce:92:35:24:
         dd:fa:d5:61:3c:3b:f5:3c:7d:d6:27:b4:b4:2a:46:33:c7:27:
         97:a3:52:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjiWBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTkwZTc0ZTU3Mzc1Y2ZiNjIxOGQ1MmRjMDYwMTQxNmZlZTFmMzI4MB4XDTIyMDEy
NjExNTYyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmViMjJkY2E2MjM3
OWM0NTE4N2JkYjU1MDQ4M2MxMzQwNzczYWEzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALKgqBAToJJItq5UjTSQsbHcY94Sy1E/gG6QGpjnfgGSbEZC
hZzRlFUO4hwzDfPLPLDyzQMOfundEDF/vp9zKmN6By/Tmzc3QvuzHKn8IhnbZoLq
urPxy6RDghewyyeJex5y0aPUGEXeqGkHlywCLOEOLzcIyCINQtRbEdlimpID4ByQ
jnmWAxK3Kp9o719R2kHI9hAsTKiG79RjRC4YwRTrXqgRdUwOM6S26Kch4K+TFyif
MMTeswIL32vO0eaqrE7AezFtcKHivz0YpWUPhKNL/NekPbzi7MZ+INTwMBhk97mn
gy9ixOwwx7ZO9YOgmOXKlKkIm7GQkZH18zPhcDkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQusi3KYjecRRh721UEg8E0B3OqPDAfBgNVHSMEGDAWgBSZkOdOVzdc+2IY
1S3AYBQW/uHzKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21aRG5UbGMzWFB0aUdOVXR3R0FVRnY3aDh5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMjc1NzU1LWIzZDItNGNmYy04MzgyLWZhYzVlNzY0Mjg2NS8x
L0xySXR5bUkzbkVVWWU5dFZCSVBCTkFkenFqdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
Mjc1NzU1LWIzZDItNGNmYy04MzgyLWZhYzVlNzY0Mjg2NS8xL21aRG5UbGMzWFB0
aUdOVXR3R0FVRnY3aDh5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW1ojANBgkqhkiG9w0BAQsFAAOC
AQEAbrzbapgkwx2+5x/FLTR/XXo+XgV8HSft/7E8x3LCv7g+F5ZvM1q3HzCyLKB+
9rrUTuANXx0nw62p7l16xi+kpfUarCC2gBUgdvpIoYD1p6Rs5XmR7sFQenYT8kcC
VWoPXfj41cuBO+9lPn7n0gWw+IsSPbFdzpzhCEWghxkc/d7sU7pr7526DKN5dgOd
eNFwk78fkN794O94YIln9H0NKC/gQtAtCI3uL9sa6ddsTGtaB0g1Z+VHVW4bgrQF
3aPk82j3c7aFa1cMwbiCZndux4OkTBeE3O+LtZtpF6IqpBXcx70riZHOkjUk3frV
YTw79Tx91ie0tCpGM8cnl6NSkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:34 2024 by rpki-client on console-ams.rpki-client.org