Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TinW78CVueg3o-KUu-6LoizoeEI.roa
File:                     TinW78CVueg3o-KUu-6LoizoeEI.roa (raw, json)
Hash identifier:          V8DYlJ/FeXGyb4ha64aPCP8+/wWt4rNoYESxwmTR2ds=
Subject key identifier:   4E:29:D6:EF:C0:95:B9:E8:37:A3:E2:94:BB:EE:8B:A2:2C:E8:78:42
Certificate issuer:       /CN=4354d70a988e257ec57c3408159dc8b504f5723a
Certificate serial:       081D6748
Authority key identifier: 43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TinW78CVueg3o-KUu-6LoizoeEI.roa
Signing time:             Sat 01 Jan 2022 15:58:35 +0000
ROA not before:           Sat 01 Jan 2022 15:58:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50214
IP address blocks:        185.233.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136144712 (0x81d6748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354d70a988e257ec57c3408159dc8b504f5723a
        Validity
            Not Before: Jan  1 15:58:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4e29d6efc095b9e837a3e294bbee8ba22ce87842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b2:32:38:37:93:fd:6e:ad:21:8e:f9:ad:4d:
                    79:32:d2:14:98:d2:71:8d:83:15:25:1c:c4:82:d9:
                    1c:2c:ce:5a:45:f0:69:21:71:e5:2e:b3:cb:fc:f8:
                    16:2b:62:1c:0f:00:20:67:7f:e3:f3:0c:0d:8f:e1:
                    76:22:cd:75:43:dc:91:3b:bd:49:ec:4c:80:c7:90:
                    de:82:7b:ef:de:86:50:64:ab:9c:e3:62:a8:1b:93:
                    60:9e:6e:9e:5e:dc:4f:e6:da:f5:8a:8d:e7:51:29:
                    d4:81:41:70:aa:52:65:00:e1:71:2d:2d:26:5e:ee:
                    c4:2a:3c:0c:8d:bc:37:08:2b:e4:1c:40:90:10:9e:
                    dd:d2:11:6c:01:8f:f1:2b:59:5f:cf:40:fc:0c:68:
                    2b:ab:af:34:d2:2f:d6:32:77:fd:f4:e2:e6:51:91:
                    cc:df:be:2a:1e:a0:20:70:13:b3:90:ae:f1:8c:e6:
                    5e:ce:36:05:43:f6:96:5d:ec:b5:38:8c:c5:dd:4b:
                    5e:ea:19:aa:cb:4c:95:7b:f9:f5:7e:18:bb:6d:bd:
                    e7:a1:46:5b:cc:8f:81:9b:20:27:29:f0:43:25:40:
                    87:d0:9f:79:34:13:81:10:5d:1f:4e:ec:3f:9d:b2:
                    23:c9:53:df:6a:aa:65:68:1e:0a:1a:6f:a0:d7:0b:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:29:D6:EF:C0:95:B9:E8:37:A3:E2:94:BB:EE:8B:A2:2C:E8:78:42
            X509v3 Authority Key Identifier:
                keyid:43:54:D7:0A:98:8E:25:7E:C5:7C:34:08:15:9D:C8:B5:04:F5:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/TinW78CVueg3o-KUu-6LoizoeEI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c5c016-4f1c-4f33-acf0-27498f874d4f/1/Q1TXCpiOJX7FfDQIFZ3ItQT1cjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:f8:61:a0:5a:8e:4b:20:4e:c3:29:1b:5e:29:9f:91:63:d6:
         20:f9:4d:c7:85:54:67:71:9c:6e:64:e2:81:90:6c:fb:d9:cd:
         e7:c0:a0:98:28:b9:31:0e:a1:5b:1e:42:42:8f:8d:c6:2b:91:
         c6:b7:89:d2:c7:c4:e1:19:0f:25:f1:ab:50:4c:b6:ba:fc:3f:
         ba:6d:9b:f0:94:72:6d:e1:f1:04:10:cf:09:b8:81:5c:1c:8b:
         39:66:79:2a:50:ef:ec:7b:fb:df:3b:38:24:50:c8:26:ef:e4:
         cb:f3:bc:18:73:bb:f7:c2:d0:c9:56:ae:92:df:34:13:83:c0:
         8c:d7:28:c4:dd:13:3b:9c:75:f7:b0:31:f4:bc:46:c3:c0:c0:
         d9:04:a0:f0:c1:23:e4:b4:62:99:7b:a5:1b:87:19:9a:49:8d:
         ae:dc:48:ca:75:f3:e1:f8:f3:60:b4:35:02:f9:12:7f:56:0f:
         d3:a7:59:f1:69:16:6a:05:f7:85:fa:43:20:0b:d3:e1:0b:b0:
         6b:2b:44:60:fb:15:bb:ef:cd:31:4f:72:9c:99:da:c5:21:b8:
         e8:e7:23:34:18:25:4f:75:4e:6f:02:a3:fe:9f:66:f4:51:d2:
         5d:74:20:ba:9d:8d:ad:a1:0e:bf:da:43:f8:a2:14:6c:ea:73:
         9f:04:7c:0c
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECB1nSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MzU0ZDcwYTk4OGUyNTdlYzU3YzM0MDgxNTlkYzhiNTA0ZjU3MjNhMB4XDTIyMDEw
MTE1NTgzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGUyOWQ2ZWZjMDk1
YjllODM3YTNlMjk0YmJlZThiYTIyY2U4Nzg0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKeyMjg3k/1urSGO+a1NeTLSFJjScY2DFSUcxILZHCzOWkXw
aSFx5S6zy/z4FitiHA8AIGd/4/MMDY/hdiLNdUPckTu9SexMgMeQ3oJ7796GUGSr
nONiqBuTYJ5unl7cT+ba9YqN51Ep1IFBcKpSZQDhcS0tJl7uxCo8DI28Nwgr5BxA
kBCe3dIRbAGP8StZX89A/AxoK6uvNNIv1jJ3/fTi5lGRzN++Kh6gIHATs5Cu8Yzm
Xs42BUP2ll3stTiMxd1LXuoZqstMlXv59X4Yu22956FGW8yPgZsgJynwQyVAh9Cf
eTQTgRBdH07sP52yI8lT32qqZWgeChpvoNcLHV8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBROKdbvwJW56Dej4pS77ouiLOh4QjAfBgNVHSMEGDAWgBRDVNcKmI4lfsV8
NAgVnci1BPVyOjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ExVFhDcGlPSlg3RmZEUUlGWjNJdFFUMWNqby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2EvYzVjMDE2LTRmMWMtNGYzMy1hY2YwLTI3NDk4Zjg3NGQ0Zi8x
L1Rpblc3OENWdWVnM28tS1V1LTZMb2l6b2VFSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Ev
YzVjMDE2LTRmMWMtNGYzMy1hY2YwLTI3NDk4Zjg3NGQ0Zi8xL1ExVFhDcGlPSlg3
RmZEUUlGWjNJdFFUMWNqby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbnpUjANBgkqhkiG9w0BAQsFAAOC
AQEAB/hhoFqOSyBOwykbXimfkWPWIPlNx4VUZ3GcbmTigZBs+9nN58CgmCi5MQ6h
Wx5CQo+NxiuRxreJ0sfE4RkPJfGrUEy2uvw/um2b8JRybeHxBBDPCbiBXByLOWZ5
KlDv7Hv73zs4JFDIJu/ky/O8GHO798LQyVaukt80E4PAjNcoxN0TO5x197Ax9LxG
w8DA2QSg8MEj5LRimXulG4cZmkmNrtxIynXz4fjzYLQ1AvkSf1YP06dZ8WkWagX3
hfpDIAvT4QuwaytEYPsVu+/NMU9ynJnaxSG46OcjNBglT3VObwKj/p9m9FHSXXQg
up2NraEOv9pD+KIUbOpznwR8DA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org