Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/Y57m8x-b-eD6h2dOIlB5GWPde_o.roa
File:                     Y57m8x-b-eD6h2dOIlB5GWPde_o.roa (raw, json)
Hash identifier:          deVEzUYORwbUAPiU5bYErw8jtE4Ey4Ydho/MbVZHjcs=
Subject key identifier:   63:9E:E6:F3:1F:9B:F9:E0:FA:87:67:4E:22:50:79:19:63:DD:7B:FA
Certificate issuer:       /CN=65e597f3ace516d6cf57ceff1606bbedaa382151
Certificate serial:       0182401487B4638AEA58D2E651033C9167BE
Authority key identifier: 65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeWX86zlFtbPV87_Fga77ao4IVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/Y57m8x-b-eD6h2dOIlB5GWPde_o.roa
Signing time:             Wed 27 Jul 2022 14:34:23 +0000
ROA not before:           Wed 27 Jul 2022 14:34:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43624
IP address blocks:        185.218.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:40:14:87:b4:63:8a:ea:58:d2:e6:51:03:3c:91:67:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e597f3ace516d6cf57ceff1606bbedaa382151
        Validity
            Not Before: Jul 27 14:34:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=639ee6f31f9bf9e0fa87674e2250791963dd7bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:be:06:4b:b2:47:b9:c4:53:b5:96:03:40:
                    51:a8:cc:7b:b0:9a:97:ba:80:b7:17:d9:63:27:84:
                    1b:ff:37:7c:fc:97:2b:61:e1:af:60:f1:2d:22:85:
                    ef:f4:4f:49:ec:f2:e9:1a:0b:29:01:24:4c:37:ec:
                    3e:97:3f:e4:7e:c9:2f:34:d7:ba:a4:bd:55:42:39:
                    0b:fb:36:de:d9:f6:f0:31:99:78:2d:37:91:66:e5:
                    c9:df:07:ac:60:1c:bd:6c:07:4a:d4:47:5e:74:f5:
                    1d:ea:b0:5c:5e:8e:3d:1c:29:71:92:00:07:98:09:
                    3e:b0:4a:9a:a4:33:2b:50:61:05:48:68:b1:2e:79:
                    ea:99:96:15:cd:b0:bf:48:81:15:43:a2:85:85:8d:
                    37:b3:a8:2d:06:c4:a4:0c:c1:b0:1f:21:16:36:5b:
                    e1:0f:38:f6:5e:f3:46:dc:ab:c1:a0:d7:15:bd:87:
                    98:74:94:cb:d2:7a:d7:c9:6d:c5:dc:fd:a0:c4:20:
                    5c:13:18:50:e3:d6:fa:fa:cc:be:7a:d6:88:52:d3:
                    77:49:53:a8:60:2f:95:17:a7:b3:a7:6b:ff:f2:fa:
                    4f:0f:d1:cf:26:49:b6:09:0c:d4:a8:a6:4e:33:d1:
                    9c:f1:d4:76:43:29:6c:4a:55:5e:dc:8b:8b:e0:7d:
                    4a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:E6:F3:1F:9B:F9:E0:FA:87:67:4E:22:50:79:19:63:DD:7B:FA
            X509v3 Authority Key Identifier:
                keyid:65:E5:97:F3:AC:E5:16:D6:CF:57:CE:FF:16:06:BB:ED:AA:38:21:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeWX86zlFtbPV87_Fga77ao4IVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/Y57m8x-b-eD6h2dOIlB5GWPde_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d4652d-9d7d-451f-a58b-2e7dd2cf6f51/1/ZeWX86zlFtbPV87_Fga77ao4IVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:2c:d3:a7:33:f7:04:d6:6d:4b:5e:e9:8d:78:ef:30:d9:
         32:0b:19:8c:82:af:3d:e8:e4:09:39:fe:dc:10:87:40:af:4f:
         98:2f:73:b5:90:7c:9d:02:24:53:c1:35:59:87:59:19:0c:ee:
         f8:c1:13:eb:cf:21:29:c5:9d:cc:7c:68:b3:b0:d8:3c:ec:57:
         18:fd:70:da:fd:72:47:41:89:c2:4c:41:d1:79:9a:0a:4a:fa:
         8c:7f:05:5c:eb:3f:5a:e8:66:12:5f:f7:62:12:1f:71:18:f1:
         0d:68:5d:66:31:18:9a:8f:ec:54:d1:6c:88:83:64:30:83:71:
         b8:d8:b2:d5:e9:71:55:ba:2d:de:9c:db:22:66:57:81:d8:88:
         95:4e:b8:b9:3f:1d:dd:58:53:91:ba:1a:06:6d:78:a6:78:10:
         48:19:b9:89:a7:2a:c0:53:1e:ac:84:1e:6e:3f:dd:cc:07:e5:
         cb:23:68:ad:07:06:1b:e6:e2:dc:1c:4e:91:08:1f:8b:e2:7b:
         d9:72:a1:07:2d:a6:a1:b6:4b:df:e5:4e:7a:66:ee:bd:0e:71:
         d9:ef:4e:a3:39:d7:5c:32:23:0a:39:8c:4f:a2:a5:61:ae:05:
         41:1b:57:d7:2d:81:d7:2b:23:01:5a:8c:c2:e7:2e:12:7b:e3:
         82:26:1e:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJAFIe0Y4rqWNLmUQM8kWe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTU5N2YzYWNlNTE2ZDZjZjU3Y2VmZjE2MDZiYmVkYWEz
ODIxNTEwHhcNMjIwNzI3MTQzNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzllZTZmMzFmOWJmOWUwZmE4NzY3NGUyMjUwNzkxOTYzZGQ3YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0a+BkuyR7nEU7WWA0BRqMx7sJqX
uoC3F9ljJ4Qb/zd8/JcrYeGvYPEtIoXv9E9J7PLpGgspASRMN+w+lz/kfskvNNe6
pL1VQjkL+zbe2fbwMZl4LTeRZuXJ3wesYBy9bAdK1EdedPUd6rBcXo49HClxkgAH
mAk+sEqapDMrUGEFSGixLnnqmZYVzbC/SIEVQ6KFhY03s6gtBsSkDMGwHyEWNlvh
Dzj2XvNG3KvBoNcVvYeYdJTL0nrXyW3F3P2gxCBcExhQ49b6+sy+etaIUtN3SVOo
YC+VF6ezp2v/8vpPD9HPJkm2CQzUqKZOM9Gc8dR2QylsSlVe3IuL4H1K2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGOe5vMfm/ng+odnTiJQeRlj3Xv6MB8GA1UdIwQY
MBaAFGXll/Os5RbWz1fO/xYGu+2qOCFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVXWDg2emxGdGJQVjg3X0ZnYTc3YW80SVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDY1MmQtOWQ3ZC00NTFmLWE1OGIt
MmU3ZGQyY2Y2ZjUxLzEvWTU3bTh4LWItZUQ2aDJkT0lsQjVHV1BkZV9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9kNDY1MmQtOWQ3ZC00NTFmLWE1OGItMmU3ZGQyY2Y2ZjUx
LzEvWmVXWDg2emxGdGJQVjg3X0ZnYTc3YW80SVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudoDMA0G
CSqGSIb3DQEBCwUAA4IBAQBDfyzTpzP3BNZtS17pjXjvMNkyCxmMgq896OQJOf7c
EIdAr0+YL3O1kHydAiRTwTVZh1kZDO74wRPrzyEpxZ3MfGizsNg87FcY/XDa/XJH
QYnCTEHReZoKSvqMfwVc6z9a6GYSX/diEh9xGPENaF1mMRiaj+xU0WyIg2Qwg3G4
2LLV6XFVui3enNsiZleB2IiVTri5Px3dWFORuhoGbXimeBBIGbmJpyrAUx6shB5u
P93MB+XLI2itBwYb5uLcHE6RCB+L4nvZcqEHLaahtkvf5U56Zu69DnHZ706jOddc
MiMKOYxPoqVhrgVBG1fXLYHXKyMBWozC5y4Se+OCJh6W
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org