Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/EU8hovVDkrHspTs9aiG7AQTHZRQ.roa
File:                     EU8hovVDkrHspTs9aiG7AQTHZRQ.roa (raw, json)
Hash identifier:          ai54iiqrgVKVcjYDOpmBAs0pZswwBZD2N7vEW9uSaNQ=
Subject key identifier:   11:4F:21:A2:F5:43:92:B1:EC:A5:3B:3D:6A:21:BB:01:04:C7:65:14
Certificate issuer:       /CN=484baf40cf33749c68514828159e6f0d36103585
Certificate serial:       499CD5
Authority key identifier: 48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/EU8hovVDkrHspTs9aiG7AQTHZRQ.roa
Signing time:             Sat 01 Jan 2022 02:59:26 +0000
ROA not before:           Sat 01 Jan 2022 02:59:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211252
IP address blocks:        146.19.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4824277 (0x499cd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484baf40cf33749c68514828159e6f0d36103585
        Validity
            Not Before: Jan  1 02:59:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=114f21a2f54392b1eca53b3d6a21bb0104c76514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:38:42:09:7c:46:0f:19:04:8d:74:ba:38:
                    8d:02:2b:ee:e5:d4:6e:d6:58:a5:bc:57:a4:56:23:
                    20:2c:bf:6e:b9:5f:1d:81:7a:cb:ba:a0:94:ab:eb:
                    79:fc:97:00:6b:d4:9b:6d:d9:87:26:b3:b1:9e:e3:
                    86:2c:3a:d3:3f:fb:e6:86:54:e2:c4:36:fb:54:7b:
                    90:55:ed:75:33:4d:09:c1:3c:ee:72:a8:ef:e9:b4:
                    c8:24:e6:d5:60:c8:95:0b:ec:74:8f:c6:b3:8f:52:
                    8f:f2:e3:cb:2f:d4:0c:b0:ce:e3:29:55:cf:0f:8f:
                    72:79:64:5e:9b:26:33:7f:8d:e3:8f:84:53:38:da:
                    95:7f:9f:0a:03:a0:20:51:60:34:7b:0a:e7:a7:8e:
                    1e:08:0c:48:1d:4a:f4:b7:f0:3d:e5:8a:32:34:e9:
                    17:34:1a:c7:d2:b4:53:6f:66:1a:cb:40:a0:32:47:
                    80:0c:82:82:82:6a:81:2a:64:0f:18:ef:a7:82:48:
                    3b:55:73:ff:ad:62:13:b1:ae:25:63:b9:a1:45:c5:
                    1b:bd:23:ce:7d:f2:30:d7:1b:ec:8e:e1:65:a2:9c:
                    80:6d:1e:1b:a0:11:d0:df:24:36:77:11:08:1e:89:
                    a9:cb:7d:58:e7:9d:41:c4:c8:e1:aa:e7:14:f7:99:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4F:21:A2:F5:43:92:B1:EC:A5:3B:3D:6A:21:BB:01:04:C7:65:14
            X509v3 Authority Key Identifier:
                keyid:48:4B:AF:40:CF:33:74:9C:68:51:48:28:15:9E:6F:0D:36:10:35:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/EU8hovVDkrHspTs9aiG7AQTHZRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/762c8a-2ea0-4fc7-8099-df17d95b1dd6/1/SEuvQM8zdJxoUUgoFZ5vDTYQNYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:f9:6b:32:35:34:66:49:75:09:0f:f0:58:0a:e8:c7:11:
         69:bb:36:5a:0c:31:6c:49:32:d2:49:99:12:d8:21:41:6d:31:
         00:e2:ef:11:a0:35:b4:47:06:a4:5c:2c:29:22:c0:0d:83:cd:
         97:3c:4a:c9:92:c8:b8:5f:e2:ad:4d:bb:b6:22:20:a9:ed:cb:
         0d:26:1c:1c:9e:48:29:76:0b:1e:e5:e5:43:b2:37:5e:3b:1b:
         88:cd:e1:00:56:7b:31:80:13:4c:01:41:b8:58:7e:a4:4b:9a:
         de:0c:c1:54:06:fa:94:20:61:a1:43:87:2f:4e:d0:33:f4:72:
         4b:64:e3:96:ef:94:bf:8e:90:12:7e:77:2f:bd:8e:ba:3c:98:
         d3:43:e0:97:f8:89:bc:5e:0d:aa:a7:0c:c0:c6:ab:dd:ea:08:
         57:e3:bf:4e:27:db:ed:c2:80:1c:64:68:b8:20:ec:3a:e4:3c:
         f8:92:78:08:75:68:4a:c1:37:0d:00:8b:1a:61:5d:0b:41:1f:
         5b:70:e3:a7:99:2c:d1:bd:cc:16:39:2c:b7:ba:7e:73:6e:73:
         4f:0d:b2:a2:07:7a:76:3a:5b:37:53:7f:04:e8:fb:38:ef:b3:
         b9:63:12:01:3f:e7:0a:7a:06:8f:27:06:3c:8a:06:9b:7b:a2:
         b6:11:6f:0e
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDSZzVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ4
NGJhZjQwY2YzMzc0OWM2ODUxNDgyODE1OWU2ZjBkMzYxMDM1ODUwHhcNMjIwMTAx
MDI1OTI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMTRmMjFhMmY1NDM5
MmIxZWNhNTNiM2Q2YTIxYmIwMTA0Yzc2NTE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwP04Qgl8Rg8ZBI10ujiNAivu5dRu1lilvFekViMgLL9uuV8d
gXrLuqCUq+t5/JcAa9SbbdmHJrOxnuOGLDrTP/vmhlTixDb7VHuQVe11M00JwTzu
cqjv6bTIJObVYMiVC+x0j8azj1KP8uPLL9QMsM7jKVXPD49yeWRemyYzf43jj4RT
ONqVf58KA6AgUWA0ewrnp44eCAxIHUr0t/A95YoyNOkXNBrH0rRTb2Yay0CgMkeA
DIKCgmqBKmQPGO+ngkg7VXP/rWITsa4lY7mhRcUbvSPOffIw1xvsjuFlopyAbR4b
oBHQ3yQ2dxEIHompy31Y551BxMjhqucU95mlLwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFBFPIaL1Q5Kx7KU7PWohuwEEx2UUMB8GA1UdIwQYMBaAFEhLr0DPM3ScaFFI
KBWebw02EDWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
U0V1dlFNOHpkSnhvVVVnb0ZaNXZEVFlRTllVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZi83NjJjOGEtMmVhMC00ZmM3LTgwOTktZGYxN2Q5NWIxZGQ2LzEv
RVU4aG92VkRrckhzcFRzOWFpRzdBUVRIWlJRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83
NjJjOGEtMmVhMC00ZmM3LTgwOTktZGYxN2Q5NWIxZGQ2LzEvU0V1dlFNOHpkSnhv
VVVnb0ZaNXZEVFlRTllVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPUMA0GCSqGSIb3DQEBCwUAA4IB
AQA2qPlrMjU0Zkl1CQ/wWAroxxFpuzZaDDFsSTLSSZkS2CFBbTEA4u8RoDW0Rwak
XCwpIsANg82XPErJksi4X+KtTbu2IiCp7csNJhwcnkgpdgse5eVDsjdeOxuIzeEA
VnsxgBNMAUG4WH6kS5reDMFUBvqUIGGhQ4cvTtAz9HJLZOOW75S/jpASfncvvY66
PJjTQ+CX+Im8Xg2qpwzAxqvd6ghX479OJ9vtwoAcZGi4IOw65Dz4kngIdWhKwTcN
AIsaYV0LQR9bcOOnmSzRvcwWOSy3un5zbnNPDbKiB3p2Ols3U38E6Ps477O5YxIB
P+cKegaPJwY8igabe6K2EW8O
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:02:26 2025 by rpki-client