Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/T2WyIR3Fva2Jp8aShGpB_JMCylA.roa
File:                     T2WyIR3Fva2Jp8aShGpB_JMCylA.roa (raw, json)
Hash identifier:          YVdwBFqZ4KVSwHQiiTKZwyoqIzL32P9yp+g8w+lWzuo=
Subject key identifier:   4F:65:B2:21:1D:C5:BD:AD:89:A7:C6:92:84:6A:41:FC:93:02:CA:50
Certificate issuer:       /CN=9de68c02854f9dc6785912249522ab7509937e48
Certificate serial:       018354AC65E92C7CDCFFD6ABE29DDE01B1AA
Authority key identifier: 9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/T2WyIR3Fva2Jp8aShGpB_JMCylA.roa
Signing time:             Mon 19 Sep 2022 07:35:27 +0000
ROA not before:           Mon 19 Sep 2022 07:35:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        212.23.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:54:ac:65:e9:2c:7c:dc:ff:d6:ab:e2:9d:de:01:b1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de68c02854f9dc6785912249522ab7509937e48
        Validity
            Not Before: Sep 19 07:35:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4f65b2211dc5bdad89a7c692846a41fc9302ca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:cd:c6:5f:55:e2:da:c2:88:9d:67:c5:e2:
                    ec:34:c5:22:d1:7f:41:29:2d:b3:7e:eb:0c:62:04:
                    4f:4d:f7:d7:b8:9a:73:66:3b:31:8d:66:af:12:c8:
                    0a:1e:e7:7d:a5:a3:ca:0f:a4:f4:f0:8b:7d:5a:6a:
                    a1:6f:5d:1d:d9:e4:96:eb:8c:6d:6b:f0:df:9d:bd:
                    e3:4f:1f:ee:71:c8:4a:30:36:4c:41:46:f1:49:6c:
                    e2:81:90:b8:a7:fd:92:55:eb:fb:36:ff:fc:70:59:
                    f5:42:0a:8e:71:ec:43:d2:2a:f0:40:fb:5e:32:df:
                    6a:d5:7e:06:06:b9:f4:ce:a8:81:52:fc:d3:df:a2:
                    91:bb:1e:f4:ad:14:9b:07:17:51:d1:58:48:7b:c4:
                    d9:66:fd:65:c3:9c:a3:e5:4f:40:a4:65:eb:9e:95:
                    f9:db:5b:06:2b:59:d3:e7:49:bd:25:7c:22:dd:e4:
                    77:fd:6b:15:e4:1f:e6:60:f4:70:d0:e9:9c:3b:15:
                    eb:c9:3c:11:c9:c6:11:2a:12:db:76:0f:d6:eb:ab:
                    2f:7a:f3:c5:6d:2a:8a:08:77:9b:14:3e:17:ab:68:
                    50:3c:20:c4:dd:99:3c:2c:fb:46:19:2d:81:fd:e7:
                    c2:bd:ac:10:c1:b4:9d:87:7d:3e:f0:4a:ef:c4:11:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:65:B2:21:1D:C5:BD:AD:89:A7:C6:92:84:6A:41:FC:93:02:CA:50
            X509v3 Authority Key Identifier:
                keyid:9D:E6:8C:02:85:4F:9D:C6:78:59:12:24:95:22:AB:75:09:93:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neaMAoVPncZ4WRIklSKrdQmTfkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/T2WyIR3Fva2Jp8aShGpB_JMCylA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/5be0bd-695b-453c-9bf4-a6ecb89918b4/1/neaMAoVPncZ4WRIklSKrdQmTfkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:53:27:9e:a9:a1:6b:a8:83:b0:fb:ba:23:a7:85:10:61:84:
         7d:f2:7a:fc:36:37:58:45:77:63:93:34:75:0a:c7:47:c4:f0:
         e0:d0:f5:cf:e2:99:0c:a0:e0:54:d2:d9:ed:97:60:2f:5f:fd:
         4b:cc:52:98:66:1b:8f:9a:6b:36:a6:1f:50:0f:e4:49:82:eb:
         6b:38:c5:aa:5c:2f:b6:43:a6:8a:3c:8e:e3:1a:58:64:00:99:
         cf:f8:09:74:96:84:63:bd:f1:81:35:95:5b:bd:c3:f3:39:31:
         97:f0:2d:88:a2:da:38:2a:ae:fe:24:64:f2:fa:3a:94:12:69:
         32:dc:45:47:f2:32:c4:fa:86:83:5e:26:8e:44:de:8c:96:a8:
         7a:10:8e:ef:1b:a2:ba:2b:f2:9f:82:4d:6a:85:5b:4d:b4:05:
         16:41:e3:db:99:41:e2:bb:8f:0b:3e:8a:bd:cb:72:1f:69:32:
         12:1b:0a:02:3d:80:ce:1a:1b:e5:69:2f:ff:0d:0d:9e:67:8e:
         e4:9c:24:95:35:6e:63:84:d4:47:1e:41:f6:8c:08:79:be:cb:
         1c:68:93:2e:6f:cf:9a:cc:a3:56:a2:f8:16:46:25:46:39:41:
         14:00:c0:b2:f2:ac:4a:fb:80:87:2d:2d:5e:6c:38:f6:ae:c8:
         b7:f2:4c:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNUrGXpLHzc/9ar4p3eAbGqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTY4YzAyODU0ZjlkYzY3ODU5MTIyNDk1MjJhYjc1MDk5
MzdlNDgwHhcNMjIwOTE5MDczNTI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjY1YjIyMTFkYzViZGFkODlhN2M2OTI4NDZhNDFmYzkzMDJjYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNPNxl9V4trCiJ1nxeLsNMUi0X9B
KS2zfusMYgRPTffXuJpzZjsxjWavEsgKHud9paPKD6T08It9Wmqhb10d2eSW64xt
a/Dfnb3jTx/ucchKMDZMQUbxSWzigZC4p/2SVev7Nv/8cFn1QgqOcexD0irwQPte
Mt9q1X4GBrn0zqiBUvzT36KRux70rRSbBxdR0VhIe8TZZv1lw5yj5U9ApGXrnpX5
21sGK1nT50m9JXwi3eR3/WsV5B/mYPRw0OmcOxXryTwRycYRKhLbdg/W66svevPF
bSqKCHebFD4Xq2hQPCDE3Zk8LPtGGS2B/efCvawQwbSdh30+8ErvxBF/AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE9lsiEdxb2tiafGkoRqQfyTAspQMB8GA1UdIwQY
MBaAFJ3mjAKFT53GeFkSJJUiq3UJk35IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVhTUFvVlBuY1o0V1JJa2xTS3JkUW1UZmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81YmUwYmQtNjk1Yi00NTNjLTliZjQt
YTZlY2I4OTkxOGI0LzEvVDJXeUlSM0Z2YTJKcDhhU2hHcEJfSk1DeWxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81YmUwYmQtNjk1Yi00NTNjLTliZjQtYTZlY2I4OTkxOGI0
LzEvbmVhTUFvVlBuY1o0V1JJa2xTS3JkUW1UZmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BfLMA0G
CSqGSIb3DQEBCwUAA4IBAQAEUyeeqaFrqIOw+7ojp4UQYYR98nr8NjdYRXdjkzR1
CsdHxPDg0PXP4pkMoOBU0tntl2AvX/1LzFKYZhuPmms2ph9QD+RJgutrOMWqXC+2
Q6aKPI7jGlhkAJnP+Al0loRjvfGBNZVbvcPzOTGX8C2Ioto4Kq7+JGTy+jqUEmky
3EVH8jLE+oaDXiaORN6Mlqh6EI7vG6K6K/Kfgk1qhVtNtAUWQePbmUHiu48LPoq9
y3IfaTISGwoCPYDOGhvlaS//DQ2eZ47knCSVNW5jhNRHHkH2jAh5vsscaJMub8+a
zKNWovgWRiVGOUEUAMCy8qxK+4CHLS1ebDj2rsi38kx3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org