Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/hArjCY6uLAkxV1JiV9vJXkyTNpE.roa
File:                     hArjCY6uLAkxV1JiV9vJXkyTNpE.roa (raw, json)
Hash identifier:          r1s2RZbXg2WgUAVWyGQUjnKE+OeaSQO1yft+n2zCFOA=
Subject key identifier:   84:0A:E3:09:8E:AE:2C:09:31:57:52:62:57:DB:C9:5E:4C:93:36:91
Certificate issuer:       /CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
Certificate serial:       A800FE
Authority key identifier: D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/hArjCY6uLAkxV1JiV9vJXkyTNpE.roa
Signing time:             Sun 29 May 2022 12:48:13 +0000
ROA not before:           Sun 29 May 2022 12:48:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134526
IP address blocks:        37.140.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11010302 (0xa800fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d52865e83b701b8ba934101c34c11ebdf3fa83bb
        Validity
            Not Before: May 29 12:48:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=840ae3098eae2c093157526257dbc95e4c933691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:7e:cc:5a:d5:c5:33:f3:0a:de:27:fd:f7:
                    30:57:2a:4c:a3:5c:62:01:af:95:fc:95:70:65:b5:
                    13:13:66:b0:3b:34:89:4d:14:26:49:b7:9e:7a:c3:
                    44:47:40:cf:ed:c0:8b:2a:d7:6b:78:49:27:40:c2:
                    cb:d1:ab:9b:17:f5:c5:b6:25:07:4e:72:42:db:e8:
                    7a:f5:05:46:d0:3a:aa:b1:d5:45:a2:46:c5:99:66:
                    7b:14:d7:e1:f2:4d:7a:0f:a3:78:b2:57:ee:bb:8b:
                    3a:53:0c:f3:75:2e:30:db:e8:82:dd:fd:57:e2:3e:
                    b8:54:e0:0e:8d:46:42:f9:9f:3e:e5:67:4f:bb:71:
                    b0:29:3a:0b:d2:4d:38:92:ed:01:4f:06:ef:b9:9c:
                    7c:a6:9a:85:18:8c:0d:2c:bd:1c:c1:02:eb:4a:ab:
                    cf:4e:4a:0d:db:19:0c:87:ad:56:22:f0:e8:12:dc:
                    da:bb:70:9e:f0:98:63:a2:1e:3e:b0:b1:10:d8:aa:
                    99:7a:d3:ac:74:f3:3e:f0:78:a3:15:0b:10:f3:10:
                    e9:a8:40:b7:d1:98:dd:e8:63:56:59:d5:0c:67:70:
                    73:23:ca:4b:41:45:31:9a:2d:87:d0:d5:de:4d:11:
                    9e:6e:82:53:0e:e4:b4:ee:83:e6:db:7e:ac:fd:b1:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0A:E3:09:8E:AE:2C:09:31:57:52:62:57:DB:C9:5E:4C:93:36:91
            X509v3 Authority Key Identifier:
                keyid:D5:28:65:E8:3B:70:1B:8B:A9:34:10:1C:34:C1:1E:BD:F3:FA:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Shl6DtwG4upNBAcNMEevfP6g7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/hArjCY6uLAkxV1JiV9vJXkyTNpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5c565e-0427-4097-bc12-eb70ba1bde7b/1/1Shl6DtwG4upNBAcNMEevfP6g7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:a3:ec:28:d9:ce:b2:fa:1d:d1:75:97:41:49:fa:7a:61:
         6b:b0:93:ee:36:5c:51:c1:f2:70:d4:8b:33:5e:01:ed:98:9d:
         20:72:43:02:b3:33:9e:2f:2f:97:15:8e:5b:ea:94:42:c1:07:
         81:de:1b:6d:6d:ae:18:ec:d5:21:6a:25:7b:2a:47:cf:f4:4b:
         3e:dc:20:50:e2:92:03:96:58:36:09:2d:c3:88:65:bc:45:26:
         f1:93:f7:67:02:b3:75:d1:55:47:17:ab:46:73:71:ff:ca:ba:
         34:42:c4:28:71:14:32:0c:4b:80:01:71:fd:57:80:b6:ae:49:
         d6:70:a4:87:25:45:88:36:b0:93:d7:be:af:5e:15:c3:1d:71:
         0e:b9:03:24:df:ef:1d:f5:84:e8:b7:dd:a3:55:a4:ad:6f:62:
         ee:8a:fc:f4:10:5a:96:c2:b7:a2:c9:37:d1:e9:c9:e4:70:55:
         86:e4:2a:76:66:4e:c7:ba:96:fb:52:e8:37:3a:0e:96:83:0d:
         df:02:48:e4:5f:ee:8e:4c:99:c5:6b:f8:2e:14:52:a3:85:e4:
         e2:08:c2:09:f8:5e:fb:70:1d:01:dc:4b:9c:02:bb:77:4e:36:
         fc:39:a2:21:7a:5f:1d:11:4a:e4:f8:db:56:f7:e4:33:e6:7c:
         c6:f8:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org