Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/JrbkrxXGC_ao_tJj-ZXjD9ko8YE.roa
File:                     JrbkrxXGC_ao_tJj-ZXjD9ko8YE.roa (raw, json)
Hash identifier:          iM5/WwNckV4MDXQu/GIRpEUo1xD+oecqK67HFa7RS7g=
Subject key identifier:   26:B6:E4:AF:15:C6:0B:F6:A8:FE:D2:63:F9:95:E3:0F:D9:28:F1:81
Certificate issuer:       /CN=8808434c82a25c8840445ae870d887ca2ff23475
Certificate serial:       0367C3E6
Authority key identifier: 88:08:43:4C:82:A2:5C:88:40:44:5A:E8:70:D8:87:CA:2F:F2:34:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iAhDTIKiXIhARFrocNiHyi_yNHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/JrbkrxXGC_ao_tJj-ZXjD9ko8YE.roa
Signing time:             Sat 01 Jan 2022 13:07:36 +0000
ROA not before:           Sat 01 Jan 2022 13:07:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57271
IP address blocks:        45.142.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57132006 (0x367c3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8808434c82a25c8840445ae870d887ca2ff23475
        Validity
            Not Before: Jan  1 13:07:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=26b6e4af15c60bf6a8fed263f995e30fd928f181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:a1:31:35:96:01:d8:bd:8d:04:c8:10:03:
                    b3:39:8b:1f:ab:c0:e0:22:c8:b8:05:c8:a3:bf:08:
                    44:d7:c6:fc:af:b5:e9:4e:c5:79:6f:f2:05:ef:d6:
                    68:5e:92:29:a0:dd:c7:74:86:f7:08:02:74:b1:7e:
                    e1:a1:f3:11:e0:26:6e:3d:2b:ae:9b:ea:44:34:91:
                    29:47:73:69:54:7b:f1:96:fe:38:4a:ee:9a:a8:eb:
                    89:ff:fa:f4:92:ee:01:ac:7f:45:e3:45:f3:fd:a7:
                    b4:c2:69:cb:2c:7e:a8:80:53:74:c3:4d:f0:8f:f9:
                    8d:d0:b6:48:42:ee:96:1a:99:19:92:9a:97:3d:35:
                    20:0a:b9:f4:15:f0:f0:ea:7a:29:75:33:fa:40:0d:
                    9e:27:51:47:be:6b:72:92:6d:3f:78:d7:0f:cb:c0:
                    fd:c6:1c:0b:28:84:c3:86:45:d6:86:55:9c:05:dd:
                    1f:5e:a6:f4:17:e3:68:37:3c:38:0b:63:df:4d:73:
                    f1:d4:9d:14:78:1c:d3:bf:fa:a2:2c:11:20:dd:cf:
                    d7:8d:93:ea:8f:c1:bb:f8:c0:08:ea:7a:c8:22:ba:
                    8b:10:d8:e2:2d:96:a2:c2:68:40:aa:18:21:b7:e3:
                    1f:2a:64:cc:e2:db:59:8b:c7:10:84:c2:8a:01:1d:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:E4:AF:15:C6:0B:F6:A8:FE:D2:63:F9:95:E3:0F:D9:28:F1:81
            X509v3 Authority Key Identifier:
                keyid:88:08:43:4C:82:A2:5C:88:40:44:5A:E8:70:D8:87:CA:2F:F2:34:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iAhDTIKiXIhARFrocNiHyi_yNHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/JrbkrxXGC_ao_tJj-ZXjD9ko8YE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aac361-5a22-4993-908c-699f4ac0f31c/1/iAhDTIKiXIhARFrocNiHyi_yNHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:26:fc:b9:18:a3:ba:37:80:dc:35:04:f4:e5:db:04:69:98:
         42:14:a8:4a:2f:a8:3f:05:09:4f:9d:fd:08:01:c4:d5:e1:bf:
         15:33:6c:e6:ba:47:5d:23:98:2f:3f:ba:0c:2e:38:14:02:b5:
         01:b0:b7:fb:a5:8c:f0:88:a0:55:c5:fe:c5:16:3b:55:39:5a:
         2e:3f:8c:3d:6b:ad:c0:b3:8c:5b:a0:39:b5:da:ab:3a:24:8e:
         de:1d:f8:27:fb:68:71:9d:5f:df:1d:a9:e5:57:19:cf:41:e0:
         bc:fe:fb:6b:1e:90:12:b1:55:73:51:c9:4f:19:07:ae:62:e1:
         cd:56:c4:e4:71:31:e7:31:21:82:e1:e9:80:71:2f:ae:02:ee:
         d6:01:1e:dc:82:fd:d8:5d:18:8b:27:eb:5a:20:02:c5:b5:91:
         95:44:2e:ee:11:42:ab:79:bb:41:94:8f:53:48:c6:df:39:93:
         9e:25:58:2e:43:52:50:c7:ad:9d:43:1a:a1:43:8b:a0:14:4e:
         81:de:58:81:0f:86:59:ee:bb:60:6e:0d:77:00:3a:0d:b7:04:
         7f:d0:66:39:6c:96:51:c2:a1:ab:c2:1f:0e:f7:c4:a5:87:23:
         f8:b1:a2:d1:a1:00:2a:21:5a:8e:da:2d:30:7c:1b:4c:e9:b1:
         3e:85:96:cf
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2fD5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODA4NDM0YzgyYTI1Yzg4NDA0NDVhZTg3MGQ4ODdjYTJmZjIzNDc1MB4XDTIyMDEw
MTEzMDczNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZiNmU0YWYxNWM2
MGJmNmE4ZmVkMjYzZjk5NWUzMGZkOTI4ZjE4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKpoTE1lgHYvY0EyBADszmLH6vA4CLIuAXIo78IRNfG/K+1
6U7FeW/yBe/WaF6SKaDdx3SG9wgCdLF+4aHzEeAmbj0rrpvqRDSRKUdzaVR78Zb+
OErumqjrif/69JLuAax/ReNF8/2ntMJpyyx+qIBTdMNN8I/5jdC2SELulhqZGZKa
lz01IAq59BXw8Op6KXUz+kANnidRR75rcpJtP3jXD8vA/cYcCyiEw4ZF1oZVnAXd
H16m9BfjaDc8OAtj301z8dSdFHgc07/6oiwRIN3P142T6o/Bu/jACOp6yCK6ixDY
4i2WosJoQKoYIbfjHypkzOLbWYvHEITCigEdGN0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmtuSvFcYL9qj+0mP5leMP2SjxgTAfBgNVHSMEGDAWgBSICENMgqJciEBE
Wuhw2IfKL/I0dTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lBaERUSUtpWEloQVJGcm9jTmlIeWlfeU5IVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmUvYWFjMzYxLTVhMjItNDk5My05MDhjLTY5OWY0YWMwZjMxYy8x
L0pyYmtyeFhHQ19hb190SmotWlhqRDlrbzhZRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUv
YWFjMzYxLTVhMjItNDk5My05MDhjLTY5OWY0YWMwZjMxYy8xL2lBaERUSUtpWElo
QVJGcm9jTmlIeWlfeU5IVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2O/zANBgkqhkiG9w0BAQsFAAOC
AQEAJCb8uRijujeA3DUE9OXbBGmYQhSoSi+oPwUJT539CAHE1eG/FTNs5rpHXSOY
Lz+6DC44FAK1AbC3+6WM8IigVcX+xRY7VTlaLj+MPWutwLOMW6A5tdqrOiSO3h34
J/tocZ1f3x2p5VcZz0HgvP77ax6QErFVc1HJTxkHrmLhzVbE5HEx5zEhguHpgHEv
rgLu1gEe3IL92F0YiyfrWiACxbWRlUQu7hFCq3m7QZSPU0jG3zmTniVYLkNSUMet
nUMaoUOLoBROgd5YgQ+GWe67YG4NdwA6DbcEf9BmOWyWUcKhq8IfDvfEpYcj+LGi
0aEAKiFajtotMHwbTOmxPoWWzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:05 2024 by rpki-client on console-fra.rpki-client.org