Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/qVPlkl6MdD2duPVZ-RFaRCuKTys.roa
File:                     qVPlkl6MdD2duPVZ-RFaRCuKTys.roa (raw, json)
Hash identifier:          tZqAWxPkx9WCkV+DWiAwkmMKagyk+lrx/pY21VQDtZY=
Subject key identifier:   A9:53:E5:92:5E:8C:74:3D:9D:B8:F5:59:F9:11:5A:44:2B:8A:4F:2B
Certificate issuer:       /CN=9990e74e57375cfb6218d52dc0601416fee1f328
Certificate serial:       02E4FD55
Authority key identifier: 99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/qVPlkl6MdD2duPVZ-RFaRCuKTys.roa
Signing time:             Fri 15 Apr 2022 06:38:00 +0000
ROA not before:           Fri 15 Apr 2022 06:38:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200019
IP address blocks:        5.181.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48561493 (0x2e4fd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9990e74e57375cfb6218d52dc0601416fee1f328
        Validity
            Not Before: Apr 15 06:38:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a953e5925e8c743d9db8f559f9115a442b8a4f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:3a:ba:e7:1c:9f:bf:8f:de:13:59:49:8a:
                    79:b3:23:22:05:1d:5b:63:cf:35:0b:a1:9b:5e:88:
                    2f:6a:58:b5:d3:77:58:c5:84:13:02:c8:0e:54:da:
                    01:20:f8:81:61:7d:b4:0b:b1:10:e6:56:84:c6:fc:
                    09:e9:41:c0:7d:da:b2:e5:40:cf:f9:4c:7d:ea:75:
                    75:b2:4a:22:ce:6f:49:7a:07:dc:8b:7c:0b:58:79:
                    11:57:d9:a9:76:42:82:8a:da:53:ef:93:0d:ec:1b:
                    e2:fc:07:ac:65:28:be:59:d8:d8:8b:98:23:2b:fc:
                    a5:9e:cc:18:da:f6:e1:ea:39:00:41:59:d2:d1:fd:
                    74:97:b4:29:de:3a:ed:5d:18:b6:f5:56:66:5c:c8:
                    53:dd:d0:9c:2d:8f:3f:9c:39:bc:fd:7a:c3:91:90:
                    5f:a7:f4:48:d7:d2:f5:61:a9:9c:1b:e5:a1:d1:a2:
                    0a:a1:0c:50:31:f3:f5:1a:a2:36:b2:b4:9f:11:77:
                    9e:9e:4c:b6:ca:b3:8c:6e:8f:9c:b1:52:31:f1:75:
                    12:9d:6e:c4:b6:a3:c5:5a:5a:b8:13:71:e3:75:53:
                    3d:8a:84:58:03:93:85:de:3d:4b:61:a2:fd:02:64:
                    e7:cd:15:1f:0d:61:f8:d3:ff:bb:30:4d:0a:bf:74:
                    7f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:53:E5:92:5E:8C:74:3D:9D:B8:F5:59:F9:11:5A:44:2B:8A:4F:2B
            X509v3 Authority Key Identifier:
                keyid:99:90:E7:4E:57:37:5C:FB:62:18:D5:2D:C0:60:14:16:FE:E1:F3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZDnTlc3XPtiGNUtwGAUFv7h8yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/qVPlkl6MdD2duPVZ-RFaRCuKTys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/275755-b3d2-4cfc-8382-fac5e7642865/1/mZDnTlc3XPtiGNUtwGAUFv7h8yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:3d:f2:c0:e4:ad:ae:77:71:b7:48:16:92:80:41:fa:8e:
         73:e8:0d:36:bf:44:3b:e7:ec:b3:c4:b1:f9:86:74:51:8b:f6:
         d2:a8:65:3a:8d:d2:92:20:a1:44:9a:7e:ab:2d:33:c2:ea:4f:
         7d:d8:9f:08:66:b0:d4:45:ce:1c:09:83:33:27:2b:4d:6b:cb:
         42:e8:0c:e5:de:8c:7c:9c:3e:71:41:41:24:fd:9c:ed:97:63:
         da:40:5e:fd:75:bb:03:6f:46:e3:f4:e9:45:35:8e:45:e3:b9:
         04:e1:3b:ce:94:b6:e3:be:82:cd:44:0e:b6:5f:36:f9:c1:09:
         b6:3b:ee:a5:27:2e:42:87:ec:aa:1f:c5:69:af:fa:1b:15:2b:
         db:82:41:9f:f9:5d:26:6c:73:75:c0:a8:e2:fc:82:64:93:af:
         c0:5f:da:e0:bf:3b:6d:81:e3:9e:5a:f7:09:a4:c6:12:10:cc:
         f0:4e:6a:fa:57:dc:c5:57:86:4d:e8:9b:95:45:39:3d:d7:68:
         f9:5f:9d:15:4b:30:19:97:ed:f9:a7:0c:d5:b3:75:34:8e:03:
         30:22:86:72:72:cc:23:b6:76:14:c8:57:85:52:23:b6:44:f9:
         38:fa:af:c5:ce:47:d4:5c:63:a9:f3:16:ac:89:c9:a6:7a:fc:
         b7:f9:bd:5d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAuT9VTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTkwZTc0ZTU3Mzc1Y2ZiNjIxOGQ1MmRjMDYwMTQxNmZlZTFmMzI4MB4XDTIyMDQx
NTA2MzgwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTk1M2U1OTI1ZThj
NzQzZDlkYjhmNTU5ZjkxMTVhNDQyYjhhNGYyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMfzOrrnHJ+/j94TWUmKebMjIgUdW2PPNQuhm16IL2pYtdN3
WMWEEwLIDlTaASD4gWF9tAuxEOZWhMb8CelBwH3asuVAz/lMfep1dbJKIs5vSXoH
3It8C1h5EVfZqXZCgoraU++TDewb4vwHrGUovlnY2IuYIyv8pZ7MGNr24eo5AEFZ
0tH9dJe0Kd467V0YtvVWZlzIU93QnC2PP5w5vP16w5GQX6f0SNfS9WGpnBvlodGi
CqEMUDHz9RqiNrK0nxF3np5MtsqzjG6PnLFSMfF1Ep1uxLajxVpauBNx43VTPYqE
WAOThd49S2Gi/QJk580VHw1h+NP/uzBNCr90fyECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSpU+WSXox0PZ249Vn5EVpEK4pPKzAfBgNVHSMEGDAWgBSZkOdOVzdc+2IY
1S3AYBQW/uHzKDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21aRG5UbGMzWFB0aUdOVXR3R0FVRnY3aDh5Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvMjc1NzU1LWIzZDItNGNmYy04MzgyLWZhYzVlNzY0Mjg2NS8x
L3FWUGxrbDZNZEQyZHVQVlotUkZhUkN1S1R5cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
Mjc1NzU1LWIzZDItNGNmYy04MzgyLWZhYzVlNzY0Mjg2NS8xL21aRG5UbGMzWFB0
aUdOVXR3R0FVRnY3aDh5Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW1ozANBgkqhkiG9w0BAQsFAAOC
AQEAHgM98sDkra53cbdIFpKAQfqOc+gNNr9EO+fss8Sx+YZ0UYv20qhlOo3SkiCh
RJp+qy0zwupPfdifCGaw1EXOHAmDMycrTWvLQugM5d6MfJw+cUFBJP2c7Zdj2kBe
/XW7A29G4/TpRTWOReO5BOE7zpS2476CzUQOtl82+cEJtjvupScuQofsqh/Faa/6
GxUr24JBn/ldJmxzdcCo4vyCZJOvwF/a4L87bYHjnlr3CaTGEhDM8E5q+lfcxVeG
TeiblUU5Pddo+V+dFUswGZft+acM1bN1NI4DMCKGcnLMI7Z2FMhXhVIjtkT5OPqv
xc5H1FxjqfMWrInJpnr8t/m9XQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:24 2024 by rpki-client on console-fra.rpki-client.org