Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kqFPWAIdxQVqCYreDshIr_Vlm2Y.roa
File:                     kqFPWAIdxQVqCYreDshIr_Vlm2Y.roa (raw, json)
Hash identifier:          qZRSA5GZrl9qE5mWTmaMFbJma9T45rAFH0+rbPD86Zo=
Subject key identifier:   92:A1:4F:58:02:1D:C5:05:6A:09:8A:DE:0E:C8:48:AF:F5:65:9B:66
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       026E30EA
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kqFPWAIdxQVqCYreDshIr_Vlm2Y.roa
Signing time:             Sat 01 Jan 2022 08:03:24 +0000
ROA not before:           Sat 01 Jan 2022 08:03:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139660
IP address blocks:        141.11.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40775914 (0x26e30ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Jan  1 08:03:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=92a14f58021dc5056a098ade0ec848aff5659b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:63:50:ca:db:9c:a9:12:d0:19:1a:4f:35:
                    0c:a8:b4:02:62:86:81:22:a0:52:63:f3:23:c4:c1:
                    8c:e5:bf:a8:ed:ef:ab:46:2b:8e:da:21:80:42:bd:
                    3e:20:cb:89:99:a8:af:2e:fe:ea:aa:ec:aa:4b:73:
                    77:0b:45:36:9b:b0:79:1b:8f:b6:b7:a3:b5:2c:6a:
                    fc:92:5b:9a:f2:17:75:7a:67:85:2a:98:54:f9:87:
                    55:e7:eb:04:70:d7:2b:dc:75:32:09:16:f7:ba:c6:
                    6b:2e:4e:99:12:6d:e1:7e:75:03:f3:c2:08:eb:35:
                    d6:56:69:ae:ed:47:4f:62:7d:db:1f:97:f6:56:e5:
                    89:ef:af:9f:33:c4:59:57:a2:22:41:0e:5e:c2:de:
                    49:b0:32:59:9c:7d:37:85:ed:97:82:e4:3f:96:d9:
                    77:88:9e:3f:f2:06:81:12:33:84:e6:f0:92:e9:fb:
                    5a:4c:a1:c7:a7:c8:9e:6c:62:4c:ed:72:a3:4d:b6:
                    ea:2e:44:cf:e0:0a:78:8e:6a:15:5d:16:ae:3f:3a:
                    51:19:d1:42:ba:e2:a2:62:82:da:d4:10:1f:7d:56:
                    e9:5c:15:9c:f3:25:71:92:77:92:43:98:23:8a:60:
                    b5:8e:e5:b8:f1:ab:ec:72:c5:9f:cb:c2:9f:4b:93:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:4F:58:02:1D:C5:05:6A:09:8A:DE:0E:C8:48:AF:F5:65:9B:66
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/kqFPWAIdxQVqCYreDshIr_Vlm2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2c:1e:bd:7d:76:68:a1:10:a7:73:6f:4b:7a:1c:ee:3a:83:
         50:93:01:a6:a6:19:2f:b1:91:b2:dc:e0:19:60:2d:86:26:4b:
         d7:a7:1d:15:c0:b7:07:67:5d:96:8e:dd:fc:2c:15:a7:a2:7c:
         5d:d9:27:71:e5:e5:7e:41:ae:35:a3:c2:ee:6c:b6:f7:44:0f:
         f5:aa:9f:b5:97:8d:e2:cf:71:88:0c:26:b4:05:be:de:6f:20:
         d2:f0:d9:34:79:f6:76:8e:73:ee:67:02:2a:bd:a3:2d:5b:eb:
         77:d7:1e:ef:cc:cf:02:aa:5e:53:60:36:8c:68:09:ba:0e:9b:
         01:1e:1b:d4:e9:6f:bf:9e:c6:e6:62:56:6a:80:a0:50:97:e8:
         e8:e6:14:88:b9:ca:b4:89:ca:ab:62:1f:fa:ad:be:79:f0:0b:
         91:15:01:e1:69:3c:c3:c7:3c:21:69:cb:78:ad:c5:e2:5f:ed:
         bf:a2:3c:3a:15:99:30:cd:fb:05:7e:11:5d:6f:0f:fd:10:6b:
         42:d9:02:99:aa:15:e5:54:b1:36:bb:c7:ed:0f:2c:5e:24:df:
         e1:13:47:36:87:d1:62:88:ad:b0:73:89:50:7b:18:a7:bf:3a:
         df:df:a7:34:98:d3:4f:1e:4b:e6:a1:1b:bc:d0:1f:93:ee:22:
         6f:d3:2e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:33 2024 by rpki-client on console-ams.rpki-client.org