Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6an-E1E_0TgUDZmLlJXGgOwDIt0.roa
File:                     6an-E1E_0TgUDZmLlJXGgOwDIt0.roa (raw, json)
Hash identifier:          xu83EvGDrcOXEKC+sDNlwoLhLZpG2k9VSuuxQEfrw6A=
Subject key identifier:   E9:A9:FE:13:51:3F:D1:38:14:0D:99:8B:94:95:C6:80:EC:03:22:DD
Certificate issuer:       /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial:       01934643D57FD5E835FD9A2ED2F35826188B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6an-E1E_0TgUDZmLlJXGgOwDIt0.roa
Signing time:             Tue 19 Nov 2024 21:11:10 +0000
ROA not before:           Tue 19 Nov 2024 21:11:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        46.3.8.0/22 maxlen: 22
                          46.3.28.0/23 maxlen: 24
                          46.3.40.0/21 maxlen: 24
                          46.3.89.0/24 maxlen: 24
                          46.3.90.0/24 maxlen: 24
                          46.3.91.0/24 maxlen: 24
                          46.3.120.0/21 maxlen: 24
                          46.3.134.0/24 maxlen: 24
                          46.3.160.0/24 maxlen: 24
                          46.3.161.0/24 maxlen: 24
                          46.3.162.0/24 maxlen: 24
                          46.3.163.0/24 maxlen: 24
                          46.3.184.0/22 maxlen: 24
                          46.3.188.0/24 maxlen: 24
                          46.3.206.0/23 maxlen: 24
                          46.3.208.0/22 maxlen: 24
                          46.3.212.0/22 maxlen: 24
                          46.3.228.0/23 maxlen: 24
                          46.3.236.0/23 maxlen: 24
                          46.3.243.0/24 maxlen: 24
                          46.3.244.0/24 maxlen: 24
                          46.3.246.0/24 maxlen: 24
                          46.3.248.0/24 maxlen: 24
                          46.3.251.0/24 maxlen: 24
                          46.3.253.0/24 maxlen: 24
                          46.3.254.0/24 maxlen: 24
                          46.3.255.0/24 maxlen: 24
                          46.232.0.0/22 maxlen: 24
                          46.232.16.0/23 maxlen: 24
                          46.232.18.0/23 maxlen: 24
                          46.232.64.0/24 maxlen: 24
                          46.232.65.0/24 maxlen: 24
                          46.232.66.0/24 maxlen: 24
                          46.232.68.0/24 maxlen: 24
                          46.232.116.0/23 maxlen: 24
                          46.232.118.0/23 maxlen: 24
                          46.232.124.0/23 maxlen: 24
                          46.232.126.0/23 maxlen: 24
                          149.126.193.0/24 maxlen: 24
                          149.126.196.0/24 maxlen: 24
                          149.126.226.0/24 maxlen: 24
                          149.126.228.0/24 maxlen: 24
                          149.126.231.0/24 maxlen: 24
                          149.126.242.0/24 maxlen: 24
                          149.126.244.0/24 maxlen: 24
                          149.126.245.0/24 maxlen: 24
                          149.126.247.0/24 maxlen: 24
                          149.126.248.0/24 maxlen: 24
                          149.126.249.0/24 maxlen: 24
                          149.126.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:43:d5:7f:d5:e8:35:fd:9a:2e:d2:f3:58:26:18:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
        Validity
            Not Before: Nov 19 21:11:10 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e9a9fe13513fd138140d998b9495c680ec0322dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:46:92:e8:0e:8c:ca:90:d3:7a:78:13:c4:
                    ed:ca:cd:0f:7b:7a:a9:15:ba:4b:a1:ae:ea:d2:91:
                    0b:15:33:a5:15:cb:7f:12:33:9d:dc:a7:af:f2:5b:
                    a1:8a:90:8b:9f:73:de:e9:01:d0:2b:87:54:2d:6e:
                    49:82:27:7b:43:5c:ca:d3:48:5d:c2:34:03:74:b3:
                    39:77:01:fc:73:ff:07:2a:b1:28:b3:e4:f3:9b:b7:
                    b2:ce:74:e1:cb:82:58:5c:d9:b3:76:77:ca:ad:66:
                    8c:46:81:26:05:53:63:b5:05:c0:ef:aa:d5:55:40:
                    cd:0f:2c:9e:eb:ce:3e:92:ef:90:6d:3d:88:6d:bf:
                    1c:b6:f2:f3:e8:45:8f:f5:e4:af:bf:9a:52:e1:6b:
                    a7:db:ce:29:2a:76:fb:12:ed:5b:d8:c5:26:79:06:
                    7e:3b:c1:d7:08:6f:a2:72:48:f7:d4:87:6e:56:fc:
                    94:63:31:16:d6:e2:45:75:cc:18:b1:5f:b2:4b:75:
                    a8:ea:33:1a:6a:14:02:11:db:76:02:67:34:23:90:
                    dd:94:63:cd:9b:9f:c5:60:07:76:d5:0d:94:18:1f:
                    c6:a0:9a:e0:e7:7c:4c:60:b6:3b:ee:3c:1a:6c:6c:
                    eb:a1:23:31:f3:ec:6d:16:d6:8d:e2:67:6b:5d:76:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:FE:13:51:3F:D1:38:14:0D:99:8B:94:95:C6:80:EC:03:22:DD
            X509v3 Authority Key Identifier:
                keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/6an-E1E_0TgUDZmLlJXGgOwDIt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.3.8.0/22
                  46.3.28.0/23
                  46.3.40.0/21
                  46.3.89.0-46.3.91.255
                  46.3.120.0/21
                  46.3.134.0/24
                  46.3.160.0/22
                  46.3.184.0-46.3.188.255
                  46.3.206.0-46.3.215.255
                  46.3.228.0/23
                  46.3.236.0/23
                  46.3.243.0-46.3.244.255
                  46.3.246.0/24
                  46.3.248.0/24
                  46.3.251.0/24
                  46.3.253.0-46.3.255.255
                  46.232.0.0/22
                  46.232.16.0/22
                  46.232.64.0-46.232.66.255
                  46.232.68.0/24
                  46.232.116.0/22
                  46.232.124.0/22
                  149.126.193.0/24
                  149.126.196.0/24
                  149.126.226.0/24
                  149.126.228.0/24
                  149.126.231.0/24
                  149.126.242.0/24
                  149.126.244.0/23
                  149.126.247.0-149.126.250.255

    Signature Algorithm: sha256WithRSAEncryption
         5d:89:80:50:be:d1:72:94:bf:71:ac:13:b8:ec:28:34:25:a1:
         4e:cf:86:ae:84:2b:37:5c:cd:4d:10:04:7b:46:fc:cf:d7:18:
         bf:2a:11:aa:02:2b:b3:a7:56:05:e4:3d:91:2f:03:f4:68:ec:
         da:7a:48:3f:2d:8b:02:df:56:e0:e3:47:09:00:64:b0:95:71:
         9e:eb:59:6d:34:84:34:0d:14:9e:22:62:7e:a2:6d:8c:5c:e0:
         84:0d:e4:7f:e9:59:b9:ee:22:ca:76:36:f4:d1:85:b0:35:86:
         bd:a8:74:e1:a9:2d:9f:d1:af:46:d7:d0:f6:db:9a:ce:b6:7e:
         a3:ef:cd:de:b3:67:2e:89:ab:01:93:2c:f5:9f:35:53:dc:bc:
         3d:62:62:0f:6b:7a:3a:52:32:17:9e:53:31:e3:46:8d:13:64:
         a2:b8:dd:7f:b0:1b:55:f2:92:88:02:fd:6f:14:ae:d6:14:d3:
         09:fd:6e:e3:1e:26:05:86:0f:a0:02:44:da:65:1c:c8:0c:4d:
         34:2f:d2:dd:5d:48:f2:a7:89:b0:0d:3c:fb:ec:e5:c1:7f:da:
         3a:0a:6f:e7:de:81:5c:be:86:42:9e:a7:2f:20:ec:6e:c5:4d:
         c2:8e:58:02:60:cd:16:64:f8:c3:17:bb:e3:63:0d:86:52:5d:
         13:ae:c5:f0
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZNGQ9V/1eg1/Zou0vNYJhiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQxMTE5MjExMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWE5ZmUxMzUxM2ZkMTM4MTQwZDk5OGI5NDk1YzY4MGVjMDMyMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvylGkugOjMqQ03p4E8Ttys0Pe3qp
FbpLoa7q0pELFTOlFct/EjOd3Kev8luhipCLn3Pe6QHQK4dULW5Jgid7Q1zK00hd
wjQDdLM5dwH8c/8HKrEos+Tzm7eyznThy4JYXNmzdnfKrWaMRoEmBVNjtQXA76rV
VUDNDyye684+ku+QbT2Ibb8ctvLz6EWP9eSvv5pS4Wun284pKnb7Eu1b2MUmeQZ+
O8HXCG+ickj31IduVvyUYzEW1uJFdcwYsV+yS3Wo6jMaahQCEdt2Amc0I5DdlGPN
m5/FYAd21Q2UGB/GoJrg53xMYLY77jwabGzroSMx8+xtFtaN4mdrXXYQ7QIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFOmp/hNRP9E4FA2Zi5SVxoDsAyLdMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvNmFuLUUxRV8wVGdVRFptTGxKWEdnT3dESXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgABMIHrAwQC
LgMIAwQBLgMcAwQDLgMoMAwDBAAuA1kDBAIuA1gDBAMuA3gDBAAuA4YDBAIuA6Aw
DAMEAy4DuAMEAC4DvDAMAwQBLgPOAwQDLgPQAwQBLgPkAwQBLgPsMAwDBAAuA/MD
BAAuA/QDBAAuA/YDBAAuA/gDBAAuA/swCwMEAC4D/QMDAi4AAwQCLugAAwQCLugQ
MAwDBAYu6EADBAAu6EIDBAAu6EQDBAIu6HQDBAIu6HwDBACVfsEDBACVfsQDBACV
fuIDBACVfuQDBACVfucDBACVfvIDBAGVfvQwDAMEAJV+9wMEAJV++jANBgkqhkiG
9w0BAQsFAAOCAQEAXYmAUL7RcpS/cawTuOwoNCWhTs+GroQrN1zNTRAEe0b8z9cY
vyoRqgIrs6dWBeQ9kS8D9Gjs2npIPy2LAt9W4ONHCQBksJVxnutZbTSENA0UniJi
fqJtjFzghA3kf+lZue4iynY29NGFsDWGvah04aktn9GvRtfQ9tuazrZ+o+/N3rNn
LomrAZMs9Z81U9y8PWJiD2t6OlIyF55TMeNGjRNkorjdf7AbVfKSiAL9bxSu1hTT
Cf1u4x4mBYYPoAJE2mUcyAxNNC/S3V1I8qeJsA08++zlwX/aOgpv596BXL6GQp6n
LyDsbsVNwo5YAmDNFmT4wxe742MNhlJdE67F8A==
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:17 2024 by rpki-client on console.sobornost.net