Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/05r51dY1iBNfOUoESwuMDvoHl8o.roa
File:                     05r51dY1iBNfOUoESwuMDvoHl8o.roa (raw, json)
Hash identifier:          ajkiOqbxNkWxCw8rpHzhOz8JOd2glThxUQO8b8Pdbq0=
Subject key identifier:   D3:9A:F9:D5:D6:35:88:13:5F:39:4A:04:4B:0B:8C:0E:FA:07:97:CA
Certificate issuer:       /CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
Certificate serial:       01882086757DB5CD28C73B481620C96C39F6
Authority key identifier: EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/05r51dY1iBNfOUoESwuMDvoHl8o.roa
Signing time:             Mon 15 May 2023 17:47:42 +0000
ROA not before:           Mon 15 May 2023 17:47:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7393
IP address blocks:        146.19.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:86:75:7d:b5:cd:28:c7:3b:48:16:20:c9:6c:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff57861da5eaf3ccf0f18c1f101bbf4def3ad82
        Validity
            Not Before: May 15 17:47:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d39af9d5d63588135f394a044b0b8c0efa0797ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:6c:6b:a6:34:4c:5c:dc:23:3c:a1:0b:9a:
                    c5:e1:e6:e1:6f:25:b7:f8:92:4a:c8:e6:d0:76:26:
                    a4:99:a0:98:b7:c0:03:64:8d:15:20:1b:25:1e:e1:
                    10:47:95:0a:8b:47:34:d2:4a:19:10:63:64:8e:a7:
                    fb:14:47:4e:0b:ac:6d:ea:32:9f:db:33:4f:b6:37:
                    7a:06:7c:11:8b:f8:2b:ae:39:78:c2:56:b2:fd:70:
                    8f:c1:69:1a:20:e5:2a:06:d2:b3:25:78:e8:98:9a:
                    d5:70:54:08:ba:bd:76:03:b0:6d:fe:f9:58:7b:39:
                    a7:d9:dc:f3:91:bf:ac:f5:6e:dd:52:8b:42:10:9a:
                    ed:76:1c:8b:24:69:c6:c2:93:2a:9d:75:49:d7:ca:
                    4a:77:d2:36:88:15:ff:f6:bd:5c:dd:50:6d:d0:52:
                    af:53:5a:1d:30:6d:fd:10:88:5e:3b:0f:57:15:0a:
                    be:e1:50:c1:20:c5:9c:9a:0a:86:01:a8:fa:ae:f8:
                    ff:a0:31:37:b7:57:ab:2a:e4:18:06:c5:94:43:2e:
                    d8:75:6d:d1:f2:7d:2f:87:81:75:ad:21:89:bf:2f:
                    1a:3b:90:65:15:73:fe:00:c2:dc:3c:ec:25:77:83:
                    83:37:18:ad:d7:f9:aa:aa:ff:5a:73:06:0e:6e:51:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9A:F9:D5:D6:35:88:13:5F:39:4A:04:4B:0B:8C:0E:FA:07:97:CA
            X509v3 Authority Key Identifier:
                keyid:EF:F5:78:61:DA:5E:AF:3C:CF:0F:18:C1:F1:01:BB:F4:DE:F3:AD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_V4YdperzzPDxjB8QG79N7zrYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/05r51dY1iBNfOUoESwuMDvoHl8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c111c8-7248-46bc-994c-4e4766ad9ca2/1/7_V4YdperzzPDxjB8QG79N7zrYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:80:b6:f4:ce:11:a5:4b:f2:5e:3a:71:a5:7b:44:13:c0:
         1e:09:cd:39:d6:4d:61:71:b4:3a:55:50:bb:59:11:6c:d0:99:
         58:57:15:21:a8:ca:74:fa:c7:60:93:4f:21:2c:55:51:79:59:
         6b:f3:5a:b9:2f:00:14:bc:cc:7a:b2:65:0b:49:cb:8a:c0:4d:
         40:59:84:16:e3:22:59:b6:a5:f7:9a:11:5e:ba:f3:c3:35:95:
         85:b4:3d:a0:95:36:1e:9c:b3:9b:4a:8c:dd:9b:5b:43:ca:ac:
         6b:b8:97:87:2f:f6:e0:d9:07:bc:10:2e:c1:7f:37:1d:5a:48:
         22:59:54:50:e4:f6:f3:31:8b:bd:2f:8e:46:f9:8e:08:95:56:
         da:1f:d8:00:cc:ea:58:a2:f8:22:fa:98:36:bc:17:b0:27:27:
         68:d1:71:d2:d4:7a:fb:f7:75:4d:05:d6:bf:b9:9f:81:d2:ba:
         f5:fa:b4:03:8e:3b:07:76:a0:25:37:72:88:af:b4:66:b4:62:
         78:65:6e:4f:44:2d:8b:40:9a:45:7c:83:0d:ae:f0:26:d5:bb:
         a1:45:c8:1d:4a:5b:02:3d:46:de:5d:f5:bf:18:cd:5d:0c:8d:
         93:3a:42:9b:33:d3:55:59:00:51:3f:36:18:11:03:8c:0f:8f:
         6d:f6:02:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgghnV9tc0oxztIFiDJbDn2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjU3ODYxZGE1ZWFmM2NjZjBmMThjMWYxMDFiYmY0ZGVm
M2FkODIwHhcNMjMwNTE1MTc0NzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzlhZjlkNWQ2MzU4ODEzNWYzOTRhMDQ0YjBiOGMwZWZhMDc5N2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9sa6Y0TFzcIzyhC5rF4ebhbyW3
+JJKyObQdiakmaCYt8ADZI0VIBslHuEQR5UKi0c00koZEGNkjqf7FEdOC6xt6jKf
2zNPtjd6BnwRi/grrjl4wlay/XCPwWkaIOUqBtKzJXjomJrVcFQIur12A7Bt/vlY
ezmn2dzzkb+s9W7dUotCEJrtdhyLJGnGwpMqnXVJ18pKd9I2iBX/9r1c3VBt0FKv
U1odMG39EIheOw9XFQq+4VDBIMWcmgqGAaj6rvj/oDE3t1erKuQYBsWUQy7YdW3R
8n0vh4F1rSGJvy8aO5BlFXP+AMLcPOwld4ODNxit1/mqqv9acwYOblHREQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOa+dXWNYgTXzlKBEsLjA76B5fKMB8GA1UdIwQY
MBaAFO/1eGHaXq88zw8YwfEBu/Te862CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19WNFlkcGVyenpQRHhqQjhRRzc5Tjd6cllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMTExYzgtNzI0OC00NmJjLTk5NGMt
NGU0NzY2YWQ5Y2EyLzEvMDVyNTFkWTFpQk5mT1VvRVN3dU1Edm9IbDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMTExYzgtNzI0OC00NmJjLTk5NGMtNGU0NzY2YWQ5Y2Ey
LzEvN19WNFlkcGVyenpQRHhqQjhRRzc5Tjd6cllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhMeMA0G
CSqGSIb3DQEBCwUAA4IBAQARuYC29M4RpUvyXjpxpXtEE8AeCc051k1hcbQ6VVC7
WRFs0JlYVxUhqMp0+sdgk08hLFVReVlr81q5LwAUvMx6smULScuKwE1AWYQW4yJZ
tqX3mhFeuvPDNZWFtD2glTYenLObSozdm1tDyqxruJeHL/bg2Qe8EC7BfzcdWkgi
WVRQ5PbzMYu9L45G+Y4IlVbaH9gAzOpYovgi+pg2vBewJydo0XHS1Hr793VNBda/
uZ+B0rr1+rQDjjsHdqAlN3KIr7RmtGJ4ZW5PRC2LQJpFfIMNrvAm1buhRcgdSlsC
PUbeXfW/GM1dDI2TOkKbM9NVWQBRPzYYEQOMD49t9gJ3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org