Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4Uy92Azg3x23UdpYNmhl6MM0cxY.roa
File:                     4Uy92Azg3x23UdpYNmhl6MM0cxY.roa (raw, json)
Hash identifier:          AWMkfUTEG1UrBlOwDVeMwMy68U/rjw6govhEg86OL/c=
Subject key identifier:   E1:4C:BD:D8:0C:E0:DF:1D:B7:51:DA:58:36:68:65:E8:C3:34:73:16
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04764E44
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4Uy92Azg3x23UdpYNmhl6MM0cxY.roa
Signing time:             Mon 09 May 2022 10:30:25 +0000
ROA not before:           Mon 09 May 2022 10:30:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140947
IP address blocks:        141.11.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74862148 (0x4764e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  9 10:30:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e14cbdd80ce0df1db751da58366865e8c3347316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:28:de:ed:61:6d:c1:19:17:3d:74:5d:80:
                    74:9a:4b:8a:3a:19:65:de:94:69:8b:c6:8e:a4:05:
                    c7:c0:23:fd:69:61:d9:44:37:a9:04:27:f4:f6:8c:
                    db:ba:d3:54:e5:d0:79:0d:61:f4:e7:93:07:19:63:
                    c4:3d:d6:4a:4d:d8:1b:0e:dd:6b:27:69:80:26:5f:
                    4a:18:48:84:23:07:d2:e3:62:b4:b6:da:c9:ad:a4:
                    1d:d4:4d:74:a7:c6:3a:48:3e:85:ec:ba:f4:eb:84:
                    64:28:72:8d:f0:7c:80:02:c4:b7:16:dd:8b:fb:dd:
                    04:16:05:16:09:98:7d:fb:65:96:1f:fa:54:73:67:
                    cb:a8:ab:ca:50:1c:dc:a9:0d:2b:b1:10:b8:d2:87:
                    6a:20:fe:ae:7b:d0:a3:03:94:fb:34:23:0f:08:3d:
                    a2:bc:e7:fc:f7:40:53:01:cb:40:53:37:6a:76:f7:
                    7e:a4:31:71:5d:67:1e:78:61:8e:ac:9a:e0:9e:9e:
                    90:31:f9:4f:44:91:ca:1a:73:6d:e0:e1:e1:7e:60:
                    c8:35:8f:da:11:0e:f5:11:58:10:51:7a:7d:5e:1c:
                    29:9f:dd:06:27:30:48:51:d9:93:76:a8:1f:25:98:
                    1a:60:19:34:b8:84:e0:ca:d6:c0:36:04:48:cf:1e:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4C:BD:D8:0C:E0:DF:1D:B7:51:DA:58:36:68:65:E8:C3:34:73:16
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/4Uy92Azg3x23UdpYNmhl6MM0cxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:37:92:0c:ef:a4:73:ce:83:e4:19:54:af:25:96:13:8b:
         63:9a:79:ce:e7:89:24:e8:c3:5f:bf:e5:f3:51:2a:91:8f:25:
         b1:88:68:eb:42:b1:ae:1b:dc:ed:5b:75:be:e5:5f:c2:d2:69:
         2d:be:04:7e:f2:33:3c:45:fe:6f:58:f2:04:45:c5:ed:a4:47:
         2b:4a:ec:d2:4e:ed:69:5a:1d:b7:74:97:dc:a8:21:80:c5:42:
         8d:b1:9b:26:1a:40:68:11:f9:5d:24:35:28:83:17:a5:6a:94:
         c5:b0:37:bd:cf:b6:a5:9c:6d:bc:da:1f:2f:55:97:41:fe:d0:
         2d:18:ea:2a:e4:43:97:05:b2:70:d0:f4:b2:0f:b8:21:98:51:
         d0:29:5d:bb:67:18:04:7d:90:88:35:2e:d2:79:48:e6:b1:61:
         c2:9e:e8:65:d4:60:98:a7:8d:4a:eb:ee:b0:d8:5f:01:92:f8:
         3c:cf:d6:95:0c:65:79:f9:b2:e3:b6:d7:11:82:d8:06:41:2a:
         67:aa:79:f3:3b:13:bc:5a:2b:40:91:77:9c:40:66:c2:84:9a:
         60:77:cb:b6:8f:46:e0:54:12:68:27:1d:a0:d1:bf:e7:5e:d8:
         5c:bc:b4:c8:6a:60:c0:cf:62:d3:ac:00:d7:42:0a:d4:c2:e6:
         f5:d9:b4:46
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBHZORDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUw
OTEwMzAyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTE0Y2JkZDgwY2Uw
ZGYxZGI3NTFkYTU4MzY2ODY1ZThjMzM0NzMxNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALu9KN7tYW3BGRc9dF2AdJpLijoZZd6UaYvGjqQFx8Aj/Wlh
2UQ3qQQn9PaM27rTVOXQeQ1h9OeTBxljxD3WSk3YGw7daydpgCZfShhIhCMH0uNi
tLbaya2kHdRNdKfGOkg+hey69OuEZChyjfB8gALEtxbdi/vdBBYFFgmYfftllh/6
VHNny6irylAc3KkNK7EQuNKHaiD+rnvQowOU+zQjDwg9orzn/PdAUwHLQFM3anb3
fqQxcV1nHnhhjqya4J6ekDH5T0SRyhpzbeDh4X5gyDWP2hEO9RFYEFF6fV4cKZ/d
BicwSFHZk3aoHyWYGmAZNLiE4MrWwDYESM8eAEMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBThTL3YDODfHbdR2lg2aGXowzRzFjAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
LzRVeTkyQXpnM3gyM1VkcFlObWhsNk1NMGN4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI0LBzANBgkqhkiG9w0BAQsFAAOC
AQEAC8M3kgzvpHPOg+QZVK8llhOLY5p5zueJJOjDX7/l81EqkY8lsYho60Kxrhvc
7Vt1vuVfwtJpLb4EfvIzPEX+b1jyBEXF7aRHK0rs0k7taVodt3SX3KghgMVCjbGb
JhpAaBH5XSQ1KIMXpWqUxbA3vc+2pZxtvNofL1WXQf7QLRjqKuRDlwWycND0sg+4
IZhR0Cldu2cYBH2QiDUu0nlI5rFhwp7oZdRgmKeNSuvusNhfAZL4PM/WlQxlefmy
47bXEYLYBkEqZ6p58zsTvForQJF3nEBmwoSaYHfLto9G4FQSaCcdoNG/517YXLy0
yGpgwM9i06wA10IK1MLm9dm0Rg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:48 2025 by rpki-client