Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/x0FLa0QOflwPAPZKQopCLuiC8ik.roa
File:                     x0FLa0QOflwPAPZKQopCLuiC8ik.roa (raw, json)
Hash identifier:          gT68Qd8TIjBr+4HIECovmlq3qJKc0BlatFVD9Cml514=
Subject key identifier:   C7:41:4B:6B:44:0E:7E:5C:0F:00:F6:4A:42:8A:42:2E:E8:82:F2:29
Certificate issuer:       /CN=a61db78c7f21285866dab4a45a544dce559f43da
Certificate serial:       02BF7089
Authority key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/x0FLa0QOflwPAPZKQopCLuiC8ik.roa
Signing time:             Thu 28 Apr 2022 04:54:44 +0000
ROA not before:           Thu 28 Apr 2022 04:54:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200845
IP address blocks:        193.32.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46100617 (0x2bf7089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61db78c7f21285866dab4a45a544dce559f43da
        Validity
            Not Before: Apr 28 04:54:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7414b6b440e7e5c0f00f64a428a422ee882f229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:d9:99:3a:13:35:98:17:f5:ae:1a:14:5b:
                    f2:96:5a:f0:f2:3f:fa:44:f5:c7:30:5a:f1:8c:41:
                    cd:46:95:96:35:de:be:86:ff:b6:b5:f7:7c:10:0c:
                    35:3d:d5:ba:50:28:f5:80:54:a7:e7:36:ae:d4:10:
                    ce:18:b2:2d:b0:7e:0b:9d:7c:d6:1c:db:5e:41:d2:
                    ae:31:da:95:a7:2b:92:dd:6a:f5:a1:cd:f5:c1:e6:
                    17:1e:79:8f:5e:18:06:ce:3b:cc:06:f6:7f:d1:41:
                    28:00:89:7e:7f:4d:05:e0:e8:ec:10:9b:2b:2d:57:
                    99:51:a3:93:c4:3a:1b:d7:f2:1b:4a:74:11:c5:e5:
                    1f:6b:de:4b:fe:59:64:90:8e:f3:67:51:b2:cf:4a:
                    f7:a3:4c:6f:43:fb:5b:95:e1:68:30:de:00:ad:5d:
                    0c:fe:6c:7b:a6:fc:5d:f2:c4:9e:d4:a1:dc:07:74:
                    21:fe:db:0c:4b:21:34:5a:58:c4:35:af:8d:8c:73:
                    82:3b:6e:45:68:8b:ab:e0:f0:54:0e:3c:2d:7f:89:
                    04:29:9a:75:0a:7b:38:ac:cf:6c:be:3b:69:f1:b2:
                    64:a4:5a:1c:27:a4:41:45:e8:15:ad:27:68:dd:51:
                    dc:5e:95:8b:61:a2:87:46:76:34:64:53:62:e7:f0:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:4B:6B:44:0E:7E:5C:0F:00:F6:4A:42:8A:42:2E:E8:82:F2:29
            X509v3 Authority Key Identifier:
                keyid:A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/x0FLa0QOflwPAPZKQopCLuiC8ik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:76:82:94:9d:1f:20:d6:64:1c:73:2f:dd:01:eb:36:2f:
         b2:62:87:8d:bb:97:4e:38:30:77:71:de:b6:0c:51:70:be:bc:
         a3:01:7b:b1:06:58:32:4a:92:73:99:3a:ee:6d:64:b4:e3:6f:
         5b:cd:54:ea:6d:8b:72:28:ad:f0:ae:35:07:a0:06:ed:33:5a:
         25:60:1f:6a:93:0a:65:6f:d1:72:62:fd:bf:bd:3a:56:4a:04:
         e4:12:cb:e0:ee:76:89:b8:36:d4:39:71:6a:2c:b4:a3:09:31:
         25:56:2d:6e:3c:61:5d:65:e8:e9:60:c2:00:d8:0c:a9:0b:d9:
         ae:e9:4c:3a:c9:8d:ea:d3:d7:a3:24:be:90:03:ae:71:1b:3b:
         81:1b:7b:f0:3c:12:76:8c:70:61:d5:2e:58:b3:17:91:24:11:
         7d:b5:0b:82:bd:c7:0a:94:d5:4a:74:12:b9:34:c4:1e:2a:b4:
         0d:e4:b4:33:b9:c8:97:53:14:66:ac:1d:0b:43:a8:a8:24:55:
         9b:2c:5a:72:a6:27:b2:d6:8d:c2:39:16:c5:aa:87:78:87:83:
         9b:b3:93:34:bd:35:dc:58:06:68:d4:01:8d:b0:dd:4b:4f:01:
         1d:02:db:e2:37:fb:ce:c7:ff:ff:ec:60:f1:4c:ed:76:db:f3:
         08:87:21:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAr9wiTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjFkYjc4YzdmMjEyODU4NjZkYWI0YTQ1YTU0NGRjZTU1OWY0M2RhMB4XDTIyMDQy
ODA0NTQ0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzc0MTRiNmI0NDBl
N2U1YzBmMDBmNjRhNDI4YTQyMmVlODgyZjIyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3m2Zk6EzWYF/WuGhRb8pZa8PI/+kT1xzBa8YxBzUaVljXe
vob/trX3fBAMNT3VulAo9YBUp+c2rtQQzhiyLbB+C5181hzbXkHSrjHalacrkt1q
9aHN9cHmFx55j14YBs47zAb2f9FBKACJfn9NBeDo7BCbKy1XmVGjk8Q6G9fyG0p0
EcXlH2veS/5ZZJCO82dRss9K96NMb0P7W5XhaDDeAK1dDP5se6b8XfLEntSh3Ad0
If7bDEshNFpYxDWvjYxzgjtuRWiLq+DwVA48LX+JBCmadQp7OKzPbL47afGyZKRa
HCekQUXoFa0naN1R3F6Vi2Gih0Z2NGRTYufwfacCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTHQUtrRA5+XA8A9kpCikIu6ILyKTAfBgNVHSMEGDAWgBSmHbeMfyEoWGba
tKRaVE3OVZ9D2jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BoMjNqSDhoS0ZobTJyU2tXbFJOemxXZlE5by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8x
L3gwRkxhMFFPZmx3UEFQWktRb3BDTHVpQzhpay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NTUwNTdiLWEyN2EtNDg3Ni1hNmM1LWMxNTBkZmZmZjdkNi8xL3BoMjNqSDhoS0Zo
bTJyU2tXbFJOemxXZlE5by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsEg7DANBgkqhkiG9w0BAQsFAAOC
AQEApWp2gpSdHyDWZBxzL90B6zYvsmKHjbuXTjgwd3HetgxRcL68owF7sQZYMkqS
c5k67m1ktONvW81U6m2Lciit8K41B6AG7TNaJWAfapMKZW/RcmL9v706VkoE5BLL
4O52ibg21Dlxaiy0owkxJVYtbjxhXWXo6WDCANgMqQvZrulMOsmN6tPXoyS+kAOu
cRs7gRt78DwSdoxwYdUuWLMXkSQRfbULgr3HCpTVSnQSuTTEHiq0DeS0M7nIl1MU
ZqwdC0OoqCRVmyxacqYnstaNwjkWxaqHeIeDm7OTNL013FgGaNQBjbDdS08BHQLb
4jf7zsf//+xg8UztdtvzCIch5A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org