Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa
File:                     tQoZ3k915cvBuohyXTBA2mONmo4.roa (raw, json)
Hash identifier:          sVwc1hN/cdnt7UEgOmnXY1Et6n7cmOylr7AlaetTr8Y=
Subject key identifier:   B5:0A:19:DE:4F:75:E5:CB:C1:BA:88:72:5D:30:40:DA:63:8D:9A:8E
Certificate issuer:       /CN=a1234bb888ec5734f579747455363171eefb1a43
Certificate serial:       0182F829743ABDD12AEBEFA61BD21A24777E
Authority key identifier: A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa
Signing time:             Thu 01 Sep 2022 08:27:22 +0000
ROA not before:           Thu 01 Sep 2022 08:27:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        146.19.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f8:29:74:3a:bd:d1:2a:eb:ef:a6:1b:d2:1a:24:77:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1234bb888ec5734f579747455363171eefb1a43
        Validity
            Not Before: Sep  1 08:27:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b50a19de4f75e5cbc1ba88725d3040da638d9a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:2b:56:99:c9:2c:02:bf:b4:88:45:4a:3a:
                    fa:76:bc:d4:96:a1:1c:6d:5f:d7:53:80:57:b0:39:
                    0d:43:dc:f9:64:90:19:96:06:03:b6:06:e4:ca:ba:
                    1f:87:0c:13:64:8c:bb:da:fe:a0:4a:12:df:6f:0b:
                    c5:41:e0:2b:7f:17:15:c9:bc:b3:47:8c:1e:35:b4:
                    cd:d5:2f:1e:6e:89:7c:ac:d7:59:5c:de:24:77:39:
                    53:aa:32:42:d2:50:6d:e9:81:8a:f8:10:86:c8:b8:
                    43:a7:b0:6d:56:88:ef:a0:7f:1c:ab:94:40:a6:a0:
                    2a:91:bb:9f:ff:b0:ed:cb:b8:51:03:59:5c:70:a5:
                    c1:28:d8:44:88:22:a8:9e:82:da:d9:02:a8:62:5a:
                    a3:3e:08:83:f0:48:b9:d4:7d:7c:26:b0:76:de:06:
                    8e:84:5f:f1:46:ed:d7:a6:8d:91:ad:5e:d6:9e:da:
                    bb:9b:22:67:2e:f7:d3:80:d0:43:a6:d5:d3:49:4f:
                    81:e6:b4:81:4f:04:53:d4:34:05:c5:4f:e9:15:bd:
                    89:d7:c2:f2:8c:65:45:d2:52:bd:38:d0:8a:de:5e:
                    fa:1d:1e:e1:6c:fb:90:ac:3c:31:42:28:af:61:e0:
                    49:9e:6b:26:c6:ae:eb:53:59:c0:68:46:f5:ed:00:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:19:DE:4F:75:E5:CB:C1:BA:88:72:5D:30:40:DA:63:8D:9A:8E
            X509v3 Authority Key Identifier:
                keyid:A1:23:4B:B8:88:EC:57:34:F5:79:74:74:55:36:31:71:EE:FB:1A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSNLuIjsVzT1eXR0VTYxce77GkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/tQoZ3k915cvBuohyXTBA2mONmo4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/501ada-7c30-4501-8111-9ceb070c7e05/1/oSNLuIjsVzT1eXR0VTYxce77GkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:6d:6b:ad:d1:23:2d:e1:fd:5b:2c:a1:10:3b:0c:3b:d0:
         ea:6c:49:7b:0a:72:82:71:27:57:f9:b9:7f:02:1d:a7:8d:47:
         da:8c:46:e9:61:aa:b4:6d:ac:f3:27:79:df:45:a8:1e:75:32:
         c8:d3:67:32:1c:70:c8:11:9b:14:75:3e:bb:6c:aa:60:f8:f2:
         6e:91:f9:7d:9a:d6:3a:0e:87:45:0c:92:6f:36:56:06:17:31:
         82:94:5d:21:39:d1:a4:0d:a8:05:27:9f:6b:44:3c:a0:50:d6:
         0d:51:a7:97:1a:15:a9:5d:4e:80:96:35:05:67:b7:87:99:1a:
         bc:98:ae:06:10:d3:1b:88:15:e5:83:32:b7:94:3b:04:e0:8d:
         ce:e7:35:44:6d:b4:20:5d:34:4d:f0:ef:53:22:ba:2c:eb:a3:
         57:96:35:fe:e2:b4:34:8c:2c:25:a7:14:fd:6b:cb:de:58:14:
         3a:29:2b:1d:a7:b0:11:d2:da:06:d7:90:35:08:6a:72:56:bd:
         bd:62:4a:63:53:38:5d:aa:3b:0e:12:c5:30:73:61:d0:90:77:
         9d:e3:f1:5b:7c:fa:5a:bc:1a:31:83:33:f5:f2:0b:c3:c0:db:
         27:de:f6:68:61:1f:26:3d:d4:f3:08:52:03:94:6b:aa:91:79:
         1e:2e:75:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL4KXQ6vdEq6++mG9IaJHd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMjM0YmI4ODhlYzU3MzRmNTc5NzQ3NDU1MzYzMTcxZWVm
YjFhNDMwHhcNMjIwOTAxMDgyNzIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTBhMTlkZTRmNzVlNWNiYzFiYTg4NzI1ZDMwNDBkYTYzOGQ5YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfsrVpnJLAK/tIhFSjr6drzUlqEc
bV/XU4BXsDkNQ9z5ZJAZlgYDtgbkyrofhwwTZIy72v6gShLfbwvFQeArfxcVybyz
R4weNbTN1S8ebol8rNdZXN4kdzlTqjJC0lBt6YGK+BCGyLhDp7BtVojvoH8cq5RA
pqAqkbuf/7Dty7hRA1lccKXBKNhEiCKonoLa2QKoYlqjPgiD8Ei51H18JrB23gaO
hF/xRu3Xpo2RrV7Wntq7myJnLvfTgNBDptXTSU+B5rSBTwRT1DQFxU/pFb2J18Ly
jGVF0lK9ONCK3l76HR7hbPuQrDwxQiivYeBJnmsmxq7rU1nAaEb17QA4pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUKGd5PdeXLwbqIcl0wQNpjjZqOMB8GA1UdIwQY
MBaAFKEjS7iI7Fc09Xl0dFU2MXHu+xpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1NOTHVJanNWelQxZVhSMFZUWXhjZTc3R2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81MDFhZGEtN2MzMC00NTAxLTgxMTEt
OWNlYjA3MGM3ZTA1LzEvdFFvWjNrOTE1Y3ZCdW9oeVhUQkEybU9ObW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81MDFhZGEtN2MzMC00NTAxLTgxMTEtOWNlYjA3MGM3ZTA1
LzEvb1NOTHVJanNWelQxZVhSMFZUWXhjZTc3R2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPtMA0G
CSqGSIb3DQEBCwUAA4IBAQCIzW1rrdEjLeH9WyyhEDsMO9DqbEl7CnKCcSdX+bl/
Ah2njUfajEbpYaq0bazzJ3nfRagedTLI02cyHHDIEZsUdT67bKpg+PJukfl9mtY6
DodFDJJvNlYGFzGClF0hOdGkDagFJ59rRDygUNYNUaeXGhWpXU6AljUFZ7eHmRq8
mK4GENMbiBXlgzK3lDsE4I3O5zVEbbQgXTRN8O9TIros66NXljX+4rQ0jCwlpxT9
a8veWBQ6KSsdp7AR0toG15A1CGpyVr29YkpjUzhdqjsOEsUwc2HQkHed4/FbfPpa
vBoxgzP18gvDwNsn3vZoYR8mPdTzCFIDlGuqkXkeLnV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:36 2024 by rpki-client on console-fra.rpki-client.org