Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/beBbpXbLh0IG7ObrIvyCVmUN9KI.roa
File:                     beBbpXbLh0IG7ObrIvyCVmUN9KI.roa (raw, json)
Hash identifier:          ub51lRxgDD9tcrZruar0iSBq/ED+28OVgekmWddRfXE=
Subject key identifier:   6D:E0:5B:A5:76:CB:87:42:06:EC:E6:EB:22:FC:82:56:65:0D:F4:A2
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       04C51EFE
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/beBbpXbLh0IG7ObrIvyCVmUN9KI.roa
Signing time:             Fri 20 May 2022 18:38:25 +0000
ROA not before:           Fri 20 May 2022 18:38:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        141.11.161.0/24 maxlen: 24
                          141.11.185.0/24 maxlen: 24
                          141.11.19.0/24 maxlen: 24
                          141.11.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80027390 (0x4c51efe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: May 20 18:38:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6de05ba576cb874206ece6eb22fc8256650df4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:7f:8f:e1:8f:8f:05:81:83:d6:03:46:f6:
                    1b:18:c9:cb:f6:a5:e0:eb:33:d5:ad:33:e1:7d:ce:
                    66:b7:c6:94:b9:a5:83:92:27:df:eb:12:30:a6:fa:
                    66:9f:95:b8:0e:39:e3:f4:eb:e0:57:7f:a3:a2:55:
                    07:68:00:78:1c:a6:b1:44:27:82:92:47:f2:f5:3a:
                    20:0d:7f:66:d2:26:9c:b6:6a:15:e5:38:19:a9:16:
                    ae:d5:45:09:c9:9d:97:d2:a6:b3:a9:90:cc:26:ab:
                    b5:8e:c5:12:71:fd:54:9d:58:96:a1:05:7e:f2:8e:
                    2a:61:e8:39:4a:76:aa:35:bc:ee:70:88:f0:91:c5:
                    99:5c:17:c4:a5:0d:db:d5:a3:2e:7d:e4:bb:82:d6:
                    c5:de:90:ec:17:85:6f:24:84:b0:83:43:35:1e:cb:
                    bf:9e:2e:a2:2d:19:59:a6:f8:07:89:6a:51:c5:a7:
                    54:d8:bc:e4:6f:f5:6f:cf:e9:03:a8:c3:5a:d0:b0:
                    8c:c1:f2:3e:22:31:6e:54:b7:e0:e9:03:e3:ef:74:
                    0c:74:6a:63:89:5d:c4:f0:b1:9e:97:65:4c:c7:a7:
                    38:22:1f:52:d8:27:e5:d3:ff:24:1b:47:db:b6:7e:
                    65:02:18:1b:cb:c1:6c:59:44:9a:92:83:2e:b3:69:
                    8f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E0:5B:A5:76:CB:87:42:06:EC:E6:EB:22:FC:82:56:65:0D:F4:A2
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/beBbpXbLh0IG7ObrIvyCVmUN9KI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.19.0/24
                  141.11.21.0/24
                  141.11.161.0/24
                  141.11.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:00:44:f7:4d:d8:ee:d6:86:11:b8:72:c3:f5:2d:f0:b3:
         47:c2:f6:1d:a3:53:d0:94:c3:d8:01:6e:73:97:d7:4a:88:d4:
         9c:24:5d:49:4e:7c:d9:51:58:f6:f3:a3:b0:5d:b2:ae:d5:04:
         04:ee:3b:48:d8:53:17:1f:d1:75:41:46:a1:3a:02:9c:67:ff:
         c8:35:58:39:b1:be:ca:6f:ca:09:f3:36:02:88:7e:d8:40:3f:
         1d:6d:cb:f2:83:5d:85:09:00:82:8a:61:a8:89:49:53:8c:fe:
         23:50:20:e5:18:e6:f0:a7:a2:e5:6f:7c:ce:9c:2a:17:f6:4a:
         92:9b:1d:fe:68:34:76:84:5c:58:f7:81:a2:2f:0b:0e:c0:4f:
         9f:ee:d3:e8:08:b9:84:e6:16:4d:f0:88:eb:c5:2c:c2:29:65:
         41:26:29:a6:71:87:bb:c7:bb:30:b9:36:ba:af:e2:ae:ae:8f:
         34:85:22:7e:1a:92:30:81:f4:0d:74:9e:d4:71:e1:be:b5:c0:
         09:b0:0c:bd:92:83:ae:10:29:aa:fb:07:5a:2f:d2:35:af:da:
         0a:71:d0:cd:e6:4c:d4:a5:a0:0b:e4:fd:e3:07:fc:82:a6:05:
         a6:9d:6d:46:fd:e1:59:56:98:a8:1f:fa:38:5d:cc:31:a0:f7:
         13:7f:df:92
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBMUe/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzRjNzk4NmIxODJlY2MzNmFkNzRjNTM1YmVhZTcyOTliMzVjZTkyMB4XDTIyMDUy
MDE4MzgyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmRlMDViYTU3NmNi
ODc0MjA2ZWNlNmViMjJmYzgyNTY2NTBkZjRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKtif4/hj48FgYPWA0b2GxjJy/al4Osz1a0z4X3OZrfGlLml
g5In3+sSMKb6Zp+VuA454/Tr4Fd/o6JVB2gAeBymsUQngpJH8vU6IA1/ZtImnLZq
FeU4GakWrtVFCcmdl9Kms6mQzCartY7FEnH9VJ1YlqEFfvKOKmHoOUp2qjW87nCI
8JHFmVwXxKUN29WjLn3ku4LWxd6Q7BeFbySEsINDNR7Lv54uoi0ZWab4B4lqUcWn
VNi85G/1b8/pA6jDWtCwjMHyPiIxblS34OkD4+90DHRqY4ldxPCxnpdlTMenOCIf
Utgn5dP/JBtH27Z+ZQIYG8vBbFlEmpKDLrNpj48CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRt4FuldsuHQgbs5usi/IJWZQ30ojAfBgNVHSMEGDAWgBRsTHmGsYLsw2rX
TFNb6ucpmzXOkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JFeDVockdDN01OcTEweFRXLXJuS1pzMXpwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWYvYzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8x
L2JlQmJwWGJMaDBJRzdPYnJJdnlDVm1VTjlLSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYv
YzRlNWNhLThhYTUtNGU2NC1hMDIyLTI2Y2ExNDhkMDdhZi8xL2JFeDVockdDN01O
cTEweFRXLXJuS1pzMXpwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAI0LEwMEAI0LFQMEAI0LoQMEAI0L
uTANBgkqhkiG9w0BAQsFAAOCAQEAErAARPdN2O7WhhG4csP1LfCzR8L2HaNT0JTD
2AFuc5fXSojUnCRdSU582VFY9vOjsF2yrtUEBO47SNhTFx/RdUFGoToCnGf/yDVY
ObG+ym/KCfM2Aoh+2EA/HW3L8oNdhQkAgophqIlJU4z+I1Ag5Rjm8Kei5W98zpwq
F/ZKkpsd/mg0doRcWPeBoi8LDsBPn+7T6Ai5hOYWTfCI68UswillQSYppnGHu8e7
MLk2uq/irq6PNIUifhqSMIH0DXSe1HHhvrXACbAMvZKDrhApqvsHWi/SNa/aCnHQ
zeZM1KWgC+T94wf8gqYFpp1tRv3hWVaYqB/6OF3MMaD3E3/fkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org