Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/Oe1hSiKeH7Ed74mnpM-s_0vxdNM.roa
File:                     Oe1hSiKeH7Ed74mnpM-s_0vxdNM.roa (raw, json)
Hash identifier:          4/dKiryl0hSVqqNdiBxAAamIJsfMQhscJbxkCyYqY0g=
Subject key identifier:   39:ED:61:4A:22:9E:1F:B1:1D:EF:89:A7:A4:CF:AC:FF:4B:F1:74:D3
Certificate issuer:       /CN=7825451c356ba49190f71eab158a73d38cac559f
Certificate serial:       6293E8
Authority key identifier: 78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/Oe1hSiKeH7Ed74mnpM-s_0vxdNM.roa
Signing time:             Sat 01 Jan 2022 03:58:01 +0000
ROA not before:           Sat 01 Jan 2022 03:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        146.19.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6460392 (0x6293e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7825451c356ba49190f71eab158a73d38cac559f
        Validity
            Not Before: Jan  1 03:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39ed614a229e1fb11def89a7a4cfacff4bf174d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:51:1f:b8:e0:e3:77:63:78:01:49:76:5b:
                    b3:2e:24:b3:60:2e:ab:e1:c4:d4:d3:fc:23:cd:81:
                    0b:9f:e6:4b:b1:c9:3e:6e:78:c2:3c:98:b4:7d:36:
                    06:86:87:03:30:1b:33:2e:50:8b:13:25:3c:30:45:
                    06:37:fc:0f:03:9f:4f:f1:ed:93:ae:3a:82:7b:3f:
                    df:02:b3:bd:37:75:4e:33:3f:7b:50:bb:4d:9d:67:
                    62:03:13:90:43:92:b0:cb:97:42:6a:70:e6:80:a1:
                    f1:79:9d:aa:13:34:0b:10:4b:53:65:d9:72:29:80:
                    ab:79:02:39:2e:ae:80:5a:92:2e:0d:99:c7:d9:ab:
                    c3:61:49:a3:14:b5:a5:18:47:dc:93:4c:5f:c4:a8:
                    4a:9f:44:9e:0d:1a:68:33:ba:93:1c:00:31:50:e8:
                    f3:53:12:d1:3c:9a:e6:87:1d:9f:4b:9a:38:7a:55:
                    d9:f2:1d:0d:64:df:ff:5f:6d:c6:89:22:59:df:09:
                    1a:e4:5e:28:ac:e3:2c:05:5a:e5:8d:d9:a0:64:83:
                    8e:a4:49:88:fa:b1:1f:e0:db:6a:09:6c:05:f0:d9:
                    d6:88:f0:bb:cd:53:ad:32:1d:28:36:4a:4f:99:72:
                    d8:bb:f1:af:b4:30:67:61:89:b0:a5:d7:bf:f2:40:
                    7a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:61:4A:22:9E:1F:B1:1D:EF:89:A7:A4:CF:AC:FF:4B:F1:74:D3
            X509v3 Authority Key Identifier:
                keyid:78:25:45:1C:35:6B:A4:91:90:F7:1E:AB:15:8A:73:D3:8C:AC:55:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/Oe1hSiKeH7Ed74mnpM-s_0vxdNM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9b6677-bb9a-496f-a128-ac2ee5c66806/1/eCVFHDVrpJGQ9x6rFYpz04ysVZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:5d:a3:dc:3d:0d:cf:45:4e:ae:21:7b:22:57:94:f1:f6:f2:
         df:74:62:c8:16:2c:a5:a3:6d:75:9a:d7:72:c2:00:58:cf:35:
         6f:94:0c:0b:3b:c3:76:f7:bc:7a:bb:d6:ae:ce:e1:32:9c:1b:
         e0:c8:51:2d:1e:9b:d2:cc:34:5d:bf:64:62:6d:b2:c2:29:81:
         c3:69:e8:61:78:6d:c1:30:38:17:59:71:fe:43:5a:79:f7:7d:
         2e:bb:ab:a8:50:19:4a:9d:39:d3:b7:96:a4:ec:a3:db:5d:74:
         fb:67:3b:a7:16:46:b5:42:95:4d:7d:65:f3:14:33:5c:c7:a0:
         b2:2d:f8:eb:43:18:76:64:8e:fa:20:43:05:90:f7:c8:da:e6:
         84:65:0d:15:a0:4e:d3:71:20:26:1f:72:9b:c6:87:3c:2a:d9:
         78:2a:5d:66:ad:31:43:04:18:5e:aa:57:d4:a3:f6:72:a6:17:
         48:05:88:ff:b8:d9:66:24:0f:b6:66:0f:f7:1a:96:15:23:63:
         39:ac:56:35:97:cb:d2:32:f7:54:2b:6f:f2:88:23:43:12:f0:
         05:10:76:0f:8d:62:b7:24:f0:e2:b2:fa:87:7b:6b:9f:08:57:
         9b:78:99:87:da:48:51:6c:ab:90:cc:af:2b:c7:76:1d:70:30:
         74:fa:85:95
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDYpPoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc4
MjU0NTFjMzU2YmE0OTE5MGY3MWVhYjE1OGE3M2QzOGNhYzU1OWYwHhcNMjIwMTAx
MDM1ODAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzOWVkNjE0YTIyOWUx
ZmIxMWRlZjg5YTdhNGNmYWNmZjRiZjE3NGQzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4AZRH7jg43djeAFJdluzLiSzYC6r4cTU0/wjzYELn+ZLsck+
bnjCPJi0fTYGhocDMBszLlCLEyU8MEUGN/wPA59P8e2TrjqCez/fArO9N3VOMz97
ULtNnWdiAxOQQ5Kwy5dCanDmgKHxeZ2qEzQLEEtTZdlyKYCreQI5Lq6AWpIuDZnH
2avDYUmjFLWlGEfck0xfxKhKn0SeDRpoM7qTHAAxUOjzUxLRPJrmhx2fS5o4elXZ
8h0NZN//X23GiSJZ3wka5F4orOMsBVrljdmgZIOOpEmI+rEf4NtqCWwF8NnWiPC7
zVOtMh0oNkpPmXLYu/GvtDBnYYmwpde/8kB6lQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDntYUoinh+xHe+Jp6TPrP9L8XTTMB8GA1UdIwQYMBaAFHglRRw1a6SRkPce
qxWKc9OMrFWfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
ZUNWRkhEVnJwSkdROXg2ckZZcHowNHlzVlo4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iYy85YjY2NzctYmI5YS00OTZmLWExMjgtYWMyZWU1YzY2ODA2LzEv
T2UxaFNpS2VIN0VkNzRtbnBNLXNfMHZ4ZE5NLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85
YjY2NzctYmI5YS00OTZmLWExMjgtYWMyZWU1YzY2ODA2LzEvZUNWRkhEVnJwSkdR
OXg2ckZZcHowNHlzVlo4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhN4MA0GCSqGSIb3DQEBCwUAA4IB
AQAbXaPcPQ3PRU6uIXsiV5Tx9vLfdGLIFiylo211mtdywgBYzzVvlAwLO8N297x6
u9auzuEynBvgyFEtHpvSzDRdv2RibbLCKYHDaehheG3BMDgXWXH+Q1p5930uu6uo
UBlKnTnTt5ak7KPbXXT7ZzunFka1QpVNfWXzFDNcx6CyLfjrQxh2ZI76IEMFkPfI
2uaEZQ0VoE7TcSAmH3Kbxoc8Ktl4Kl1mrTFDBBheqlfUo/ZyphdIBYj/uNlmJA+2
Zg/3GpYVI2M5rFY1l8vSMvdUK2/yiCNDEvAFEHYPjWK3JPDisvqHe2ufCFebeJmH
2khRbKuQzK8rx3YdcDB0+oWV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:49 2024 by rpki-client on console-fra.rpki-client.org