Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G_ISCdw7aKJfKl00c7f6ywa5sRE.roa
File:                     G_ISCdw7aKJfKl00c7f6ywa5sRE.roa (raw, json)
Hash identifier:          BNdUCGGKsxKtJ7xP3aYBohw1KIqiuK4CB8q+CFQ4ymI=
Subject key identifier:   1B:F2:12:09:DC:3B:68:A2:5F:2A:5D:34:73:B7:FA:CB:06:B9:B1:11
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       047DA74C
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G_ISCdw7aKJfKl00c7f6ywa5sRE.roa
Signing time:             Mon 09 May 2022 10:53:43 +0000
ROA not before:           Mon 09 May 2022 10:53:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        141.11.232.0/22 maxlen: 24
                          141.11.228.0/23 maxlen: 24
                          141.11.230.0/23 maxlen: 24
                          141.11.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75343692 (0x47da74c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May  9 10:53:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bf21209dc3b68a25f2a5d3473b7facb06b9b111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:db:77:a9:47:98:4f:38:14:a3:f8:67:2c:
                    03:52:06:e0:6e:a8:de:bf:7a:e7:ea:49:46:dc:28:
                    c5:d5:e3:37:e5:75:b1:01:ac:20:93:b0:87:99:bf:
                    ab:9f:65:2f:de:16:05:e3:fa:8d:e6:a5:3f:77:00:
                    c7:7b:80:75:cd:a6:c7:ad:8d:72:12:6e:da:eb:23:
                    06:75:ed:12:02:4b:24:26:98:1e:f6:7d:c8:24:67:
                    6c:11:7a:8f:53:64:2c:07:00:ca:5b:38:1c:5d:10:
                    1f:38:3b:6e:fc:48:cd:8d:63:a4:9a:26:1a:ee:60:
                    22:9e:c5:14:b4:ff:63:6d:77:8b:ad:2c:a1:ae:84:
                    06:4b:ca:b0:52:49:af:51:5c:f5:9a:da:86:6f:d2:
                    bf:f3:61:86:0d:05:d3:cb:fe:a0:df:7f:e1:e9:de:
                    a1:bf:8d:ee:f2:8a:a7:bd:7d:60:e1:9c:58:0b:ca:
                    59:39:b7:4f:2e:b6:71:89:13:b6:56:78:01:3a:1c:
                    8b:91:d8:aa:b0:9b:55:58:b3:9e:8c:71:97:ba:b3:
                    b1:4b:d6:53:98:f0:45:74:bf:a0:fe:26:87:03:72:
                    db:bc:ad:fb:cc:cc:50:18:80:9d:98:ae:b4:43:59:
                    b0:3a:f0:e2:7e:d9:e2:95:06:89:ee:e8:50:e4:60:
                    0a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F2:12:09:DC:3B:68:A2:5F:2A:5D:34:73:B7:FA:CB:06:B9:B1:11
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/G_ISCdw7aKJfKl00c7f6ywa5sRE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.228.0-141.11.239.255

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:83:0a:03:b8:25:8f:c5:5e:9b:c8:49:22:a8:f7:05:4c:
         27:33:67:ed:ad:6a:f8:25:61:c6:a6:6c:54:cc:ec:e1:cd:5e:
         ff:28:a1:78:b6:73:8f:97:f3:71:4f:d6:df:1e:1b:43:b3:fa:
         82:c5:ed:ca:5f:66:64:1b:87:59:38:32:08:8e:c7:23:ea:28:
         6d:73:bb:af:fe:1a:00:75:3b:48:fa:93:1c:74:89:26:f0:a5:
         55:b6:76:a8:d3:c6:3a:92:f8:06:c6:6c:08:78:ef:15:73:e0:
         bd:3c:38:d9:5b:9a:09:4b:46:d6:3b:0a:30:1b:18:30:88:73:
         04:d9:a2:d7:ba:73:05:53:06:00:f9:37:de:13:f9:13:95:04:
         5a:dc:4d:27:08:21:68:18:8b:ff:bb:a0:a0:ee:9d:64:06:8e:
         7e:b4:29:8d:fc:b2:b6:01:fa:2f:0f:be:ce:0c:d7:cc:84:c5:
         01:8a:a8:84:aa:ec:1e:a8:bc:ad:ed:16:32:72:61:a4:f1:f1:
         a7:e2:8d:7b:b6:c5:87:61:66:7f:c4:fb:79:c7:cb:3e:05:7b:
         bb:3b:2f:f1:b8:eb:6f:de:f9:c9:0a:b1:42:ee:b3:3d:26:75:
         c6:18:eb:d1:52:cb:23:48:77:90:d8:a4:0b:14:de:75:f0:9a:
         9d:18:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org