Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/oY2xONyFzzqvzrxOZnPDk1gmdIE.roa
File:                     oY2xONyFzzqvzrxOZnPDk1gmdIE.roa (raw, json)
Hash identifier:          Uxs0APJOifYrjhOBA1PJE5JZdo3tHxvuv183JUuP6wE=
Subject key identifier:   A1:8D:B1:38:DC:85:CF:3A:AF:CE:BC:4E:66:73:C3:93:58:26:74:81
Certificate issuer:       /CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
Certificate serial:       010079BC
Authority key identifier: 7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/oY2xONyFzzqvzrxOZnPDk1gmdIE.roa
Signing time:             Sat 01 Jan 2022 06:03:59 +0000
ROA not before:           Sat 01 Jan 2022 06:03:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207046
IP address blocks:        46.31.68.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16808380 (0x10079bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dcfb7e0cbb8d78112d1e7df9261d20ebee5bee2
        Validity
            Not Before: Jan  1 06:03:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a18db138dc85cf3aafcebc4e6673c39358267481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:5a:9d:f4:50:26:db:01:ff:4f:90:19:8d:
                    85:5e:2f:74:c2:7f:17:95:47:7c:d8:69:52:76:34:
                    c4:05:05:49:1a:04:b6:d0:42:16:a4:b4:8b:5b:fa:
                    7b:03:d9:cb:b6:93:5f:fc:96:c2:f4:aa:09:12:f6:
                    9a:a3:39:a4:cc:c7:9a:57:3e:4e:2e:b8:9a:3a:90:
                    07:95:55:48:83:8d:e9:0a:69:2a:fd:f8:12:c9:9d:
                    d8:46:0e:81:0d:c3:bb:d1:d7:2c:f4:41:b5:1e:9f:
                    b1:ce:e9:fe:62:0b:dc:fc:47:e8:38:e0:ad:f8:f4:
                    2b:a5:88:bc:05:fc:83:2e:c1:82:14:83:10:1e:27:
                    65:af:3f:28:28:39:53:70:03:5a:f3:47:a8:80:ce:
                    cd:35:f7:71:4c:e5:c0:60:40:d3:29:99:f8:bb:40:
                    c5:c3:b8:00:90:c5:20:b6:53:4d:42:ae:e8:c0:52:
                    67:95:e2:b0:9b:13:e2:72:48:b7:a3:dd:ae:2e:2c:
                    1c:28:c3:19:ba:c4:c6:2e:90:c4:83:ff:87:53:86:
                    8d:16:dc:0a:fb:db:0c:07:d5:97:77:a3:8a:97:d3:
                    2a:dc:b5:86:c2:9d:08:7c:c9:36:8c:85:96:e5:1b:
                    83:a8:35:2b:21:ef:32:d6:68:cb:63:50:f9:e1:d0:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:B1:38:DC:85:CF:3A:AF:CE:BC:4E:66:73:C3:93:58:26:74:81
            X509v3 Authority Key Identifier:
                keyid:7D:CF:B7:E0:CB:B8:D7:81:12:D1:E7:DF:92:61:D2:0E:BE:E5:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc-34Mu414ES0effkmHSDr7lvuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/oY2xONyFzzqvzrxOZnPDk1gmdIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7f3ef6-9c8c-4144-bafd-449b82bb18ea/1/fc-34Mu414ES0effkmHSDr7lvuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a7:f7:b5:2d:31:79:93:36:a7:27:e1:ad:6a:92:7d:53:ab:
         1b:4b:82:07:30:50:a6:21:ab:8e:b2:2e:6c:a7:b4:50:20:f6:
         8e:84:1e:34:98:38:5d:1c:1c:90:fb:f3:3e:7e:d6:a6:1a:5d:
         1e:a6:4b:01:de:05:54:db:92:7a:f9:01:1d:9a:1e:71:6b:9b:
         f3:33:28:10:91:67:09:21:a0:29:ae:9e:01:66:1c:1a:63:df:
         8d:bc:84:b5:b6:94:46:ec:4d:21:30:b1:fa:d3:5a:fc:f7:1f:
         f8:ab:a6:6e:78:84:2e:8a:f2:71:f6:93:75:a7:ed:9b:89:40:
         88:fb:6c:c1:fe:a3:ff:c7:8b:4d:d8:e3:9c:89:bc:32:21:63:
         0c:92:ef:1a:11:39:14:db:af:88:27:8d:48:20:53:be:1a:75:
         cb:c4:c0:ce:a9:49:93:cb:3d:35:26:a2:54:15:fa:3e:e8:fa:
         9d:4f:14:84:77:2b:c7:59:04:c0:0b:1d:0d:20:f3:e1:48:37:
         c0:29:45:dd:3a:4c:97:47:cd:26:c3:63:4f:b2:c9:79:ff:42:
         8f:77:31:b0:55:89:68:ad:3f:88:c4:f5:07:4d:21:c4:0d:de:
         5d:ed:c8:93:36:df:96:52:0d:85:61:90:60:15:eb:b8:d5:50:
         74:4a:f3:70
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAQB5vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZGNmYjdlMGNiYjhkNzgxMTJkMWU3ZGY5MjYxZDIwZWJlZTViZWUyMB4XDTIyMDEw
MTA2MDM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTE4ZGIxMzhkYzg1
Y2YzYWFmY2ViYzRlNjY3M2MzOTM1ODI2NzQ4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMuIWp30UCbbAf9PkBmNhV4vdMJ/F5VHfNhpUnY0xAUFSRoE
ttBCFqS0i1v6ewPZy7aTX/yWwvSqCRL2mqM5pMzHmlc+Ti64mjqQB5VVSION6Qpp
Kv34Esmd2EYOgQ3Du9HXLPRBtR6fsc7p/mIL3PxH6Djgrfj0K6WIvAX8gy7BghSD
EB4nZa8/KCg5U3ADWvNHqIDOzTX3cUzlwGBA0ymZ+LtAxcO4AJDFILZTTUKu6MBS
Z5XisJsT4nJIt6Pdri4sHCjDGbrExi6QxIP/h1OGjRbcCvvbDAfVl3ejipfTKty1
hsKdCHzJNoyFluUbg6g1KyHvMtZoy2NQ+eHQmTkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBShjbE43IXPOq/OvE5mc8OTWCZ0gTAfBgNVHSMEGDAWgBR9z7fgy7jXgRLR
59+SYdIOvuW+4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZjLTM0TXU0MTRFUzBlZmZrbUhTRHI3bHZ1SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTMvN2YzZWY2LTljOGMtNDE0NC1iYWZkLTQ0OWI4MmJiMThlYS8x
L29ZMnhPTnlGenpxdnpyeE9ablBEazFnbWRJRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMv
N2YzZWY2LTljOGMtNDE0NC1iYWZkLTQ0OWI4MmJiMThlYS8xL2ZjLTM0TXU0MTRF
UzBlZmZrbUhTRHI3bHZ1SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC4fRDANBgkqhkiG9w0BAQsFAAOC
AQEAPqf3tS0xeZM2pyfhrWqSfVOrG0uCBzBQpiGrjrIubKe0UCD2joQeNJg4XRwc
kPvzPn7WphpdHqZLAd4FVNuSevkBHZoecWub8zMoEJFnCSGgKa6eAWYcGmPfjbyE
tbaURuxNITCx+tNa/Pcf+KumbniELorycfaTdaftm4lAiPtswf6j/8eLTdjjnIm8
MiFjDJLvGhE5FNuviCeNSCBTvhp1y8TAzqlJk8s9NSaiVBX6Puj6nU8UhHcrx1kE
wAsdDSDz4Ug3wClF3TpMl0fNJsNjT7LJef9Cj3cxsFWJaK0/iMT1B00hxA3eXe3I
kzbfllINhWGQYBXruNVQdErzcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:18 2024 by rpki-client on console-ams.rpki-client.org