Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa
File:                     b9gv9iCbOomTtUCQCnufWWFVSJs.roa (raw, json)
Hash identifier:          nGTUhHV44N981rqD4jp55zB+TGGixaywH6kuW1Ql3Pg=
Subject key identifier:   6F:D8:2F:F6:20:9B:3A:89:93:B5:40:90:0A:7B:9F:59:61:55:48:9B
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       01856EC1F1A1954DFA70FC30CB473A96ED83
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa
Signing time:             Sun 01 Jan 2023 19:14:42 +0000
ROA not before:           Sun 01 Jan 2023 19:14:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14315
IP address blocks:        45.155.226.0/24 maxlen: 24
                          45.155.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:c1:f1:a1:95:4d:fa:70:fc:30:cb:47:3a:96:ed:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Jan  1 19:14:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fd82ff6209b3a8993b540900a7b9f596155489b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a6:42:ce:58:25:c8:c4:bb:7a:c7:d0:a9:40:
                    61:d3:2b:d6:83:34:cf:b2:a1:19:22:0d:1e:2f:20:
                    56:f2:b2:ed:3d:60:4b:9f:8d:6c:44:e0:92:3e:40:
                    6e:53:62:13:5b:3d:d9:c6:3f:70:e4:08:9a:ed:f9:
                    b7:c5:5e:fd:95:22:36:90:64:3f:00:57:dd:5a:c1:
                    0a:85:d5:38:2f:74:43:72:a4:fe:16:89:92:c3:e5:
                    31:90:08:31:e9:e9:e1:44:d4:36:b5:13:81:5e:c8:
                    34:a1:84:2d:90:94:32:0e:cc:96:c3:41:96:8c:e2:
                    1c:ed:27:41:c1:56:51:8c:a7:ff:b1:41:29:30:b3:
                    c7:1d:f7:7a:dd:a8:7c:61:30:d6:c9:81:ff:15:12:
                    0c:4f:b5:d8:9c:02:66:56:9b:d8:f6:a4:b4:5b:49:
                    d9:4a:5e:d8:b5:53:b3:88:0f:28:d1:16:b6:4c:1b:
                    c3:85:61:22:10:cc:01:78:3a:e2:7e:a3:03:aa:02:
                    9b:c1:41:68:2c:44:42:d2:f6:9d:4b:4a:0e:3c:77:
                    68:b9:6e:b0:f5:3d:23:d7:28:58:b8:42:5d:a1:38:
                    cc:bc:a5:0c:1f:d2:83:8a:5e:6a:e7:51:82:e1:96:
                    5e:87:9b:42:11:9b:34:3f:43:ae:90:64:ca:6d:e0:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:2F:F6:20:9B:3A:89:93:B5:40:90:0A:7B:9F:59:61:55:48:9B
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.224.0/24
                  45.155.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:09:67:97:85:49:c6:40:0f:2e:03:dd:b5:62:1a:94:10:
         6d:75:59:31:b7:15:7a:4b:a8:b9:e6:ec:eb:71:32:a6:74:43:
         53:b8:1e:75:04:54:54:e7:09:97:65:65:91:71:52:b4:f2:3e:
         cf:4b:5a:d9:db:57:83:1f:50:81:41:ee:1d:06:12:ef:21:ab:
         73:09:67:24:ac:19:79:4f:be:09:2e:6d:f2:66:f8:54:14:25:
         46:cf:36:58:a1:c5:1d:c6:67:92:8b:a5:c1:90:e3:a5:65:66:
         b1:f9:f0:ae:b8:96:08:1a:ed:b6:1d:b7:e8:bc:ad:40:6c:47:
         de:0c:ea:e6:02:5a:9d:2e:58:5c:8d:c6:ee:e5:e8:f1:10:c2:
         76:97:7a:95:21:cb:b3:55:9c:f4:d1:71:a2:10:8b:54:e5:cd:
         ba:98:cd:32:7e:79:ff:54:04:a2:ba:f3:66:f9:2e:e5:4b:33:
         5f:7d:09:8b:7b:29:a0:8e:20:78:c1:a3:9f:ee:2e:09:20:ab:
         bf:78:7f:b5:f3:a2:95:7b:a1:b1:8a:20:81:7c:f5:5a:9f:c8:
         c3:71:52:42:12:21:fc:1a:3a:1d:7f:66:ab:f0:71:2b:43:35:
         6b:11:40:b1:bf:f3:87:db:7a:6f:ff:df:92:59:71:ee:99:2f:
         b1:04:29:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuwfGhlU36cPwwy0c6lu2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjMwMTAxMTkxNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ4MmZmNjIwOWIzYTg5OTNiNTQwOTAwYTdiOWY1OTYxNTU0ODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6ZCzlglyMS7esfQqUBh0yvWgzTP
sqEZIg0eLyBW8rLtPWBLn41sROCSPkBuU2ITWz3Zxj9w5Aia7fm3xV79lSI2kGQ/
AFfdWsEKhdU4L3RDcqT+FomSw+UxkAgx6enhRNQ2tROBXsg0oYQtkJQyDsyWw0GW
jOIc7SdBwVZRjKf/sUEpMLPHHfd63ah8YTDWyYH/FRIMT7XYnAJmVpvY9qS0W0nZ
Sl7YtVOziA8o0Ra2TBvDhWEiEMwBeDrifqMDqgKbwUFoLERC0vadS0oOPHdouW6w
9T0j1yhYuEJdoTjMvKUMH9KDil5q51GC4ZZeh5tCEZs0P0OukGTKbeDFIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/YL/YgmzqJk7VAkAp7n1lhVUibMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvYjlndjlpQ2JPb21UdFVDUUNudWZXV0ZWU0pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvgAwQA
LZviMA0GCSqGSIb3DQEBCwUAA4IBAQCTTwlnl4VJxkAPLgPdtWIalBBtdVkxtxV6
S6i55uzrcTKmdENTuB51BFRU5wmXZWWRcVK08j7PS1rZ21eDH1CBQe4dBhLvIatz
CWckrBl5T74JLm3yZvhUFCVGzzZYocUdxmeSi6XBkOOlZWax+fCuuJYIGu22Hbfo
vK1AbEfeDOrmAlqdLlhcjcbu5ejxEMJ2l3qVIcuzVZz00XGiEItU5c26mM0yfnn/
VASiuvNm+S7lSzNffQmLeymgjiB4waOf7i4JIKu/eH+186KVe6GxiiCBfPVan8jD
cVJCEiH8Gjodf2ar8HErQzVrEUCxv/OH23pv/9+SWXHumS+xBCms
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org