Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/RiKnmERlUHBlwrkQSXN-qFSBIIU.roa
File:                     RiKnmERlUHBlwrkQSXN-qFSBIIU.roa (raw, json)
Hash identifier:          Px5grDHiTprsgKhDKptFBg7ymeokNqNPPQmZotgfQEg=
Subject key identifier:   46:22:A7:98:44:65:50:70:65:C2:B9:10:49:73:7E:A8:54:81:20:85
Certificate issuer:       /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial:       01841E27D27557BBB22CCEDE6177BEBBEB40
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/RiKnmERlUHBlwrkQSXN-qFSBIIU.roa
Signing time:             Fri 28 Oct 2022 10:33:56 +0000
ROA not before:           Fri 28 Oct 2022 10:33:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     63023
IP address blocks:        89.116.144.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1e:27:d2:75:57:bb:b2:2c:ce:de:61:77:be:bb:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
        Validity
            Not Before: Oct 28 10:33:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4622a7984465507065c2b91049737ea854812085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:1b:b9:b8:fc:5c:0f:9b:43:2d:9c:a7:f3:
                    97:6b:2f:fb:6b:ff:8b:06:0e:3e:d5:ba:b0:3d:f4:
                    7e:b7:5d:88:20:0d:fd:a1:68:51:fa:8a:0e:da:68:
                    cc:5f:f7:84:c6:68:4d:62:6d:0f:08:09:cd:9e:0d:
                    0c:39:f8:70:5e:5b:22:29:6e:11:ab:ef:82:2a:ae:
                    ba:19:8d:be:b8:51:68:63:96:61:d0:39:8b:e4:6f:
                    e4:bd:16:4d:0e:3d:8c:32:f6:9b:71:3e:20:e5:d6:
                    7f:80:f4:c8:94:5b:70:64:b0:9d:65:bb:d1:1d:ec:
                    33:61:97:c4:56:eb:0f:e6:3b:0a:38:ed:c3:35:6b:
                    9e:5c:d9:30:ef:bb:a3:6f:c0:15:14:1c:20:95:2c:
                    e2:1c:21:df:a1:56:a7:1b:4b:2a:71:be:e7:22:ac:
                    84:59:1c:b5:d3:61:8a:20:8e:6d:c6:8d:c2:8b:43:
                    e1:9c:6f:4b:f4:fb:98:58:00:56:6d:05:75:32:47:
                    a8:ff:41:ef:41:b7:d7:94:b5:67:1d:23:f8:50:39:
                    96:7b:06:27:f2:0c:f6:fc:c7:31:88:d1:73:52:b6:
                    3e:c8:7b:80:fc:20:2b:a8:bd:56:14:6e:ce:0f:92:
                    56:88:43:c4:24:07:82:68:26:13:ff:8e:23:b8:4d:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:22:A7:98:44:65:50:70:65:C2:B9:10:49:73:7E:A8:54:81:20:85
            X509v3 Authority Key Identifier:
                keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/RiKnmERlUHBlwrkQSXN-qFSBIIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:3c:4d:13:1a:7c:af:5b:24:0f:fa:16:10:3a:74:d5:35:
         d6:d5:39:1e:99:b5:b8:04:cb:3b:ce:47:ae:b6:be:d9:87:e5:
         66:4f:e8:c3:98:10:c3:e7:a3:a3:0b:22:cf:15:fa:d4:f7:26:
         8f:30:63:4d:3d:1e:f0:36:a7:74:84:ae:59:de:93:02:8a:21:
         63:c3:f3:31:03:53:bf:f2:4b:c1:86:63:54:14:5d:e0:53:36:
         e3:22:50:c4:48:7e:cc:2c:be:73:f1:87:db:73:35:21:64:30:
         ef:09:b2:94:c7:7a:2a:07:e4:cd:30:02:a8:f7:24:70:8f:40:
         6b:b1:9f:01:79:bc:c7:ea:f9:6b:b0:1c:7d:47:fd:81:17:fa:
         d8:30:55:a8:58:32:40:33:6c:62:71:3e:6f:d9:ba:f0:fc:68:
         f3:a4:11:3d:5a:b5:a1:1c:50:70:34:ce:8a:23:d3:bc:53:71:
         ef:6a:79:72:a7:d6:ed:d5:ce:f2:3a:93:2c:5c:4a:ab:ec:08:
         bd:6e:45:57:db:31:b5:c0:cb:57:c2:5b:be:5c:da:d5:a3:54:
         02:5b:4d:ed:e7:17:c6:a1:12:84:b6:a4:3f:e8:dd:bd:2a:10:
         53:c0:64:ea:fb:c3:1e:ca:51:8a:ae:be:d0:06:a8:ec:b3:8f:
         04:f5:df:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ9J1V7uyLM7eYXe+u+tAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjIyYTc5ODQ0NjU1MDcwNjVjMmI5MTA0OTczN2VhODU0ODEyMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0Abubj8XA+bQy2cp/OXay/7a/+L
Bg4+1bqwPfR+t12IIA39oWhR+ooO2mjMX/eExmhNYm0PCAnNng0MOfhwXlsiKW4R
q++CKq66GY2+uFFoY5Zh0DmL5G/kvRZNDj2MMvabcT4g5dZ/gPTIlFtwZLCdZbvR
HewzYZfEVusP5jsKOO3DNWueXNkw77ujb8AVFBwglSziHCHfoVanG0sqcb7nIqyE
WRy102GKII5txo3Ci0PhnG9L9PuYWABWbQV1Mkeo/0HvQbfXlLVnHSP4UDmWewYn
8gz2/McxiNFzUrY+yHuA/CArqL1WFG7OD5JWiEPEJAeCaCYT/44juE1k9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEYip5hEZVBwZcK5EElzfqhUgSCFMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvUmlLbm1FUmxVSEJsd3JrUVNYTi1xRlNCSUlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSQMA0G
CSqGSIb3DQEBCwUAA4IBAQAfkzxNExp8r1skD/oWEDp01TXW1TkembW4BMs7zkeu
tr7Zh+VmT+jDmBDD56OjCyLPFfrU9yaPMGNNPR7wNqd0hK5Z3pMCiiFjw/MxA1O/
8kvBhmNUFF3gUzbjIlDESH7MLL5z8YfbczUhZDDvCbKUx3oqB+TNMAKo9yRwj0Br
sZ8BebzH6vlrsBx9R/2BF/rYMFWoWDJAM2xicT5v2brw/GjzpBE9WrWhHFBwNM6K
I9O8U3Hvanlyp9bt1c7yOpMsXEqr7Ai9bkVX2zG1wMtXwlu+XNrVo1QCW03t5xfG
oRKEtqQ/6N29KhBTwGTq+8MeylGKrr7QBqjss48E9d/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org