Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/FIOlxEyQ5idrvjTfQfvyLVvXlYE.roa
File:                     FIOlxEyQ5idrvjTfQfvyLVvXlYE.roa (raw, json)
Hash identifier:          JAXX8K8ZBO3kXrphFQHqYrfGEYf7CPerp6JluIq7eFo=
Subject key identifier:   14:83:A5:C4:4C:90:E6:27:6B:BE:34:DF:41:FB:F2:2D:5B:D7:95:81
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       01938B0D12A9C2FFB98D871E1FFCD6D484B1
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/FIOlxEyQ5idrvjTfQfvyLVvXlYE.roa
Signing time:             Tue 03 Dec 2024 05:45:09 +0000
ROA not before:           Tue 03 Dec 2024 05:45:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     36352
IP address blocks:        74.122.24.0/23 maxlen: 23
                          74.122.26.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:0d:12:a9:c2:ff:b9:8d:87:1e:1f:fc:d6:d4:84:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: Dec  3 05:45:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1483a5c44c90e6276bbe34df41fbf22d5bd79581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c2:2d:14:da:92:83:d4:6d:4d:ee:b1:3f:73:
                    19:27:65:1d:5a:76:6d:b3:99:c4:fb:4c:52:a3:b5:
                    0e:83:20:6c:f4:1e:ed:de:18:34:de:d9:e8:2d:4e:
                    22:8f:0e:15:b7:a5:5c:f2:3c:5a:f9:fa:1f:da:5b:
                    c1:85:20:41:05:29:da:0a:d1:1e:b4:aa:f2:fb:5c:
                    60:82:e3:33:45:37:01:53:9e:cf:92:3f:34:6d:b6:
                    b0:6d:c5:ca:cc:bd:f5:89:5e:4a:d1:ea:15:f1:f3:
                    97:92:62:c3:d7:82:bd:eb:bb:c5:e6:9c:6b:84:d5:
                    c3:ce:db:6d:f7:80:3b:26:74:99:d0:32:6b:c6:f3:
                    78:64:21:b7:71:c0:d2:46:d7:f1:05:e8:92:f2:e4:
                    82:31:0e:e2:2d:e0:7f:10:39:79:31:9f:50:05:a3:
                    bb:4d:85:8d:9d:37:a1:5f:5b:dd:bc:cb:ae:6f:7f:
                    3e:58:ed:c2:e4:3b:e5:16:30:ff:f4:3d:73:a9:56:
                    cc:c1:ce:00:13:88:74:eb:1f:00:fd:c3:68:5e:68:
                    ab:a2:6b:f1:48:0e:1d:3a:93:a0:7c:b6:cd:1d:d2:
                    cc:ec:3e:f0:6b:d9:c3:e3:d3:37:c3:de:6d:88:df:
                    f6:6c:47:c6:7e:e3:e6:b5:1b:6e:59:c8:08:dd:5c:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:83:A5:C4:4C:90:E6:27:6B:BE:34:DF:41:FB:F2:2D:5B:D7:95:81
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/FIOlxEyQ5idrvjTfQfvyLVvXlYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:69:56:21:e3:ec:da:f1:aa:ea:fa:d5:f1:60:53:b9:8e:c3:
         ed:a7:62:da:98:ad:c4:bd:fe:a4:81:1e:01:72:f6:4c:11:65:
         7f:78:ef:da:e0:e0:24:c7:fe:b4:ba:1d:60:ca:8d:c8:79:56:
         f6:38:5f:a1:1d:fd:64:88:b8:e2:21:6b:c9:9b:26:12:ed:d5:
         19:f4:de:a4:8f:82:a2:5e:27:2a:10:9b:f3:68:8f:36:bf:0c:
         21:f3:b6:4c:81:ef:84:90:e8:5c:4c:89:0e:d0:1b:07:82:a2:
         eb:dd:aa:5f:cb:57:7d:6f:6b:ed:5b:f3:b8:82:f0:04:3d:d1:
         29:78:d1:9e:a8:61:1e:18:f4:8f:c8:50:41:ad:73:b5:fa:da:
         2f:e6:e8:44:d8:b9:a7:15:36:52:7e:85:2b:98:0f:0f:5b:1c:
         f2:8f:d6:26:d3:c2:f1:aa:d0:3e:b2:5f:91:58:0d:66:ad:ba:
         ed:b9:33:6d:d2:8c:f3:21:86:75:f4:94:7a:7e:fe:a5:d7:1f:
         ab:50:d4:ab:a7:ec:cf:54:9a:76:7a:79:d5:61:4c:d7:cc:c0:
         b1:c2:c1:03:9a:eb:71:bd:b8:b2:48:3d:61:e7:11:da:83:b7:
         b9:23:84:b9:f6:69:1a:1b:54:62:4e:1a:57:a4:4b:bc:d9:2a:
         48:c3:c2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net