Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Ze660wicAoJiWyLgTb4PdLeL7r0.roa
File:                     Ze660wicAoJiWyLgTb4PdLeL7r0.roa (raw, json)
Hash identifier:          +fn2tUPz58qUkCksaTXWsNIEe2gnXWLgLcuQhsL3TVk=
Subject key identifier:   65:EE:BA:D3:08:9C:02:82:62:5B:22:E0:4D:BE:0F:74:B7:8B:EE:BD
Certificate issuer:       /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial:       01BD6E5B
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Ze660wicAoJiWyLgTb4PdLeL7r0.roa
Signing time:             Thu 07 Apr 2022 01:39:01 +0000
ROA not before:           Thu 07 Apr 2022 01:39:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        217.114.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29191771 (0x1bd6e5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
        Validity
            Not Before: Apr  7 01:39:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=65eebad3089c0282625b22e04dbe0f74b78beebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:0d:80:41:b8:f5:09:26:de:1b:f4:77:97:
                    d8:04:11:94:44:24:45:5c:82:dd:ef:66:bc:e4:43:
                    6e:46:3a:f6:23:2d:ed:e5:ee:20:94:42:be:22:dc:
                    35:94:89:c3:7d:c2:23:13:3e:0a:93:5f:49:35:72:
                    cc:cb:6d:7b:ee:d3:8b:eb:bc:33:c1:aa:30:e2:71:
                    c2:06:6e:1f:2c:fe:1a:e9:0a:19:35:f3:fe:7b:fc:
                    65:e5:19:47:4b:ba:dc:74:bf:9b:e5:23:cd:57:84:
                    ae:f7:0c:9a:7e:fc:b6:fb:44:f4:8e:98:3e:0e:d4:
                    9e:9c:47:3b:27:26:a7:dd:0b:44:7d:bb:6b:57:9d:
                    a2:d7:0c:59:db:b7:c3:c5:18:ae:83:4e:fb:e0:c7:
                    b0:8f:f9:05:62:48:61:8a:e9:42:41:f3:62:1e:0e:
                    14:a0:cc:6e:17:d1:ca:61:47:db:45:d0:cc:b4:da:
                    75:68:f4:cd:10:c1:aa:51:93:1f:2a:d7:c4:56:71:
                    3e:b3:35:69:7d:30:97:12:f9:78:17:fc:77:f1:00:
                    f9:6f:37:81:9c:78:9f:cf:06:83:07:15:0d:e5:c5:
                    6f:53:c6:5b:99:56:57:f7:6c:96:37:f7:9b:28:fc:
                    1f:25:4c:0b:9b:5e:e7:34:eb:d9:30:b9:a3:dd:b3:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:BA:D3:08:9C:02:82:62:5B:22:E0:4D:BE:0F:74:B7:8B:EE:BD
            X509v3 Authority Key Identifier:
                keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/Ze660wicAoJiWyLgTb4PdLeL7r0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:9a:cf:ad:3f:95:c5:da:c7:8f:14:47:b5:ee:fe:4d:c8:09:
         ad:af:99:83:e2:c6:08:a9:5e:b0:e7:e0:b9:2e:cb:9a:93:2a:
         08:9b:d4:59:8d:08:5e:c5:d9:b7:1b:25:23:87:4b:93:3b:8d:
         05:04:04:22:57:50:3d:ed:56:9f:79:bf:7b:8f:c4:76:00:7a:
         df:45:f7:3b:9c:06:1d:0b:45:ed:f4:d2:c5:5b:6e:e5:52:a7:
         b7:8a:a3:b6:00:af:8a:71:ef:96:ac:0e:dc:60:db:bf:ea:aa:
         aa:5f:b4:38:94:94:25:e0:c8:ca:99:e7:38:a8:a7:80:62:1c:
         37:c9:32:1c:7e:88:66:bf:2e:fb:59:ce:80:e9:fe:84:ea:1a:
         c8:e0:23:51:26:79:47:fb:02:ae:a7:f4:73:c7:47:59:62:89:
         56:a2:c4:47:43:4f:ad:09:71:b9:8e:eb:fd:56:2d:a8:65:9f:
         20:14:70:02:6f:4e:ab:5b:a6:86:f7:97:0e:dd:f5:4a:b5:2c:
         20:e2:b1:3f:de:50:60:79:e3:3b:8a:b7:6e:c4:69:99:4f:29:
         3e:6b:93:fd:0a:59:29:3e:f9:a3:04:b0:9e:db:45:fa:26:ec:
         ce:c8:64:a3:ed:21:11:fc:3f:a9:34:7b:ad:a4:9e:d7:34:70:
         f2:f2:59:ad
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAb1uWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZmQxMTU4ZjllMzQwMTFjMzJhMDEwMjU2MWEzMzFkNjRkZDhhYTk2MB4XDTIyMDQw
NzAxMzkwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjVlZWJhZDMwODlj
MDI4MjYyNWIyMmUwNGRiZTBmNzRiNzhiZWViZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTXDYBBuPUJJt4b9HeX2AQRlEQkRVyC3e9mvORDbkY69iMt
7eXuIJRCviLcNZSJw33CIxM+CpNfSTVyzMtte+7Ti+u8M8GqMOJxwgZuHyz+GukK
GTXz/nv8ZeUZR0u63HS/m+UjzVeErvcMmn78tvtE9I6YPg7UnpxHOycmp90LRH27
a1edotcMWdu3w8UYroNO++DHsI/5BWJIYYrpQkHzYh4OFKDMbhfRymFH20XQzLTa
dWj0zRDBqlGTHyrXxFZxPrM1aX0wlxL5eBf8d/EA+W83gZx4n88GgwcVDeXFb1PG
W5lWV/dsljf3myj8HyVMC5te5zTr2TC5o92zhe8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRl7rrTCJwCgmJbIuBNvg90t4vuvTAfBgNVHSMEGDAWgBSf0RWPnjQBHDKg
ECVhozHWTdiqljAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L245RVZqNTQwQVJ3eW9CQWxZYU14MWszWXFwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDQvYzk1NDgwLTJlMjYtNDY2Mi1hN2M0LTcwYzhhNGJjYWIwZC8x
L1plNjYwd2ljQW9KaVd5TGdUYjRQZExlTDdyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQv
Yzk1NDgwLTJlMjYtNDY2Mi1hN2M0LTcwYzhhNGJjYWIwZC8xL245RVZqNTQwQVJ3
eW9CQWxZYU14MWszWXFwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANlyLjANBgkqhkiG9w0BAQsFAAOC
AQEAIJrPrT+VxdrHjxRHte7+TcgJra+Zg+LGCKlesOfguS7LmpMqCJvUWY0IXsXZ
txslI4dLkzuNBQQEIldQPe1Wn3m/e4/EdgB630X3O5wGHQtF7fTSxVtu5VKnt4qj
tgCvinHvlqwO3GDbv+qqql+0OJSUJeDIypnnOKingGIcN8kyHH6IZr8u+1nOgOn+
hOoayOAjUSZ5R/sCrqf0c8dHWWKJVqLER0NPrQlxuY7r/VYtqGWfIBRwAm9Oq1um
hveXDt31SrUsIOKxP95QYHnjO4q3bsRpmU8pPmuT/QpZKT75owSwnttF+ibszshk
o+0hEfw/qTR7raSe1zRw8vJZrQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:28 2023 by rpki-client on console.sobornost.net