Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/vhUZO5EsqwO-FYsMZZ9feoC6jh4.roa
File:                     vhUZO5EsqwO-FYsMZZ9feoC6jh4.roa (raw, json)
Hash identifier:          ZbcOSuRgsPFURLuuszPK8MYvX6I33j+yD/d3S50DJXY=
Subject key identifier:   BE:15:19:3B:91:2C:AB:03:BE:15:8B:0C:65:9F:5F:7A:80:BA:8E:1E
Certificate issuer:       /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial:       34B005B7
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/vhUZO5EsqwO-FYsMZZ9feoC6jh4.roa
Signing time:             Thu 26 May 2022 07:55:15 +0000
ROA not before:           Thu 26 May 2022 07:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57567
IP address blocks:        103.39.41.0/24 maxlen: 24
                          103.39.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883951031 (0x34b005b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
        Validity
            Not Before: May 26 07:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be15193b912cab03be158b0c659f5f7a80ba8e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:51:e7:02:c2:8d:ca:02:07:c4:17:51:7b:
                    33:ec:3e:9a:0e:09:d9:92:00:17:0a:97:b3:d4:53:
                    72:69:92:bf:d8:c7:06:55:36:77:8d:f5:37:8a:55:
                    fe:b4:40:50:33:78:ca:28:fa:55:1d:27:08:46:eb:
                    00:94:b3:b3:12:6b:3a:6c:30:6c:46:e1:77:dd:84:
                    be:af:bd:92:68:c7:62:a3:94:1e:1a:ba:2b:63:3d:
                    9f:eb:37:21:5a:15:a8:c5:7a:5e:3a:a9:2c:71:06:
                    b7:47:a2:28:4c:45:71:ef:1c:66:11:cd:e3:fd:3a:
                    51:9d:9d:74:95:40:c0:82:77:1e:2a:a8:4e:54:76:
                    9e:f5:b5:38:af:09:34:8f:43:5c:43:e5:4d:49:a3:
                    7e:f1:18:85:24:54:a6:19:2f:cf:96:52:ac:18:7a:
                    dd:15:3b:9b:9f:61:eb:20:22:77:68:10:31:03:6e:
                    aa:34:d9:cd:8c:26:cf:3a:db:84:ae:51:43:23:50:
                    fc:2f:db:5b:fe:1d:0d:0f:42:dd:2d:ba:bb:35:24:
                    97:5a:8a:6d:95:16:af:2a:20:de:d3:16:a8:68:62:
                    c5:bb:60:4e:e8:18:e4:58:f4:45:c0:22:a9:94:49:
                    d4:2d:27:b7:55:2c:32:86:72:4d:20:1e:bb:be:6e:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:15:19:3B:91:2C:AB:03:BE:15:8B:0C:65:9F:5F:7A:80:BA:8E:1E
            X509v3 Authority Key Identifier:
                keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/vhUZO5EsqwO-FYsMZZ9feoC6jh4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:13:81:d2:d7:a1:55:16:c6:bf:85:37:a3:92:a2:92:71:
         f0:ff:41:d1:3e:d8:0d:a2:3c:9a:da:29:ed:01:59:bf:8d:70:
         dd:3c:37:57:54:ba:ab:15:40:11:00:be:b8:02:80:d4:9d:7c:
         83:07:03:1b:ad:95:9d:f3:3e:43:62:dc:cf:99:b3:c4:99:bf:
         e3:2e:d6:6a:dd:28:30:cd:93:6d:88:0b:69:47:ba:be:4a:cc:
         30:81:ae:55:10:e9:50:21:14:bc:fb:33:fd:8c:de:bf:18:b9:
         f2:c9:02:7c:48:68:b8:6c:7d:43:47:bb:6c:85:7b:05:c7:4a:
         19:27:99:fb:9c:ed:48:d4:44:d7:af:27:a3:bc:76:b9:b0:30:
         2d:6d:95:31:d2:6f:d3:88:dc:c1:c4:5e:b1:b8:d4:aa:c6:64:
         bb:e8:0e:a1:68:94:f5:4e:57:a4:fa:47:be:f4:b1:83:d7:7b:
         05:a9:17:cf:7b:94:96:1f:cb:dd:fe:54:c5:74:bc:ca:35:8e:
         bf:7c:3d:3a:5c:be:f8:85:0c:df:5f:7e:2c:73:80:93:5f:f6:
         c2:5d:e6:cc:90:6e:ea:97:00:04:7e:54:f5:77:ff:d1:d4:eb:
         3b:ee:13:35:22:75:25:b0:22:c3:0c:c5:9b:d4:f9:92:8d:10:
         39:77:89:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENLAFtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWJlYWZkNTU2NTk1ZTg4NDBjYThlYmQxOWJiZDJhYzU5MWI0Y2E4MB4XDTIyMDUy
NjA3NTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmUxNTE5M2I5MTJj
YWIwM2JlMTU4YjBjNjU5ZjVmN2E4MGJhOGUxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMj2UecCwo3KAgfEF1F7M+w+mg4J2ZIAFwqXs9RTcmmSv9jH
BlU2d431N4pV/rRAUDN4yij6VR0nCEbrAJSzsxJrOmwwbEbhd92Evq+9kmjHYqOU
Hhq6K2M9n+s3IVoVqMV6XjqpLHEGt0eiKExFce8cZhHN4/06UZ2ddJVAwIJ3Hiqo
TlR2nvW1OK8JNI9DXEPlTUmjfvEYhSRUphkvz5ZSrBh63RU7m59h6yAid2gQMQNu
qjTZzYwmzzrbhK5RQyNQ/C/bW/4dDQ9C3S26uzUkl1qKbZUWryog3tMWqGhixbtg
TugY5Fj0RcAiqZRJ1C0nt1UsMoZyTSAeu75ucHsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS+FRk7kSyrA74Viwxln196gLqOHjAfBgNVHSMEGDAWgBQKvq/VVlleiEDK
jr0Zu9KsWRtMqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NyNnYxVlpaWG9oQXlvNjlHYnZTckZrYlRLZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWIvOTIxNTM2LWVlNDYtNGU4MC1hNTFmLWI2NjdlYzBkNmQwZi8x
L3ZoVVpPNUVzcXdPLUZZc01aWjlmZW9DNmpoNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIv
OTIxNTM2LWVlNDYtNGU4MC1hNTFmLWI2NjdlYzBkNmQwZi8xL0NyNnYxVlpaWG9o
QXlvNjlHYnZTckZrYlRLZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcnKDANBgkqhkiG9w0BAQsFAAOC
AQEAIEoTgdLXoVUWxr+FN6OSopJx8P9B0T7YDaI8mtop7QFZv41w3Tw3V1S6qxVA
EQC+uAKA1J18gwcDG62VnfM+Q2Lcz5mzxJm/4y7Wat0oMM2TbYgLaUe6vkrMMIGu
VRDpUCEUvPsz/Yzevxi58skCfEhouGx9Q0e7bIV7BcdKGSeZ+5ztSNRE168no7x2
ubAwLW2VMdJv04jcwcResbjUqsZku+gOoWiU9U5XpPpHvvSxg9d7BakXz3uUlh/L
3f5UxXS8yjWOv3w9Oly++IUM319+LHOAk1/2wl3mzJBu6pcABH5U9Xf/0dTrO+4T
NSJ1JbAiwwzFm9T5ko0QOXeJRA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:51 2024 by rpki-client on console-ams.rpki-client.org