Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5LAxyqqfGJfVdW8-Ela-4JeHu4.roa
File:                     F5LAxyqqfGJfVdW8-Ela-4JeHu4.roa (raw, json)
Hash identifier:          csbO0MasqmFyKUkDVausc1RPmx12WrgtiVUPRxhhn5Y=
Subject key identifier:   17:92:C0:C7:2A:AA:7C:62:5F:55:D5:BC:F8:49:5A:FB:82:5E:1E:EE
Certificate issuer:       /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial:       9222B267
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5LAxyqqfGJfVdW8-Ela-4JeHu4.roa
Signing time:             Sun 03 Jul 2022 21:10:25 +0000
ROA not before:           Sun 03 Jul 2022 21:10:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2451747431 (0x9222b267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
        Validity
            Not Before: Jul  3 21:10:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1792c0c72aaa7c625f55d5bcf8495afb825e1eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:c2:d9:d4:a8:e6:1e:4a:85:17:2a:32:c8:
                    70:c2:53:67:48:7a:bb:af:2a:a6:ee:72:03:cf:36:
                    72:fe:6b:90:b0:c7:32:53:4c:66:0d:ec:3a:f3:36:
                    6b:cb:1c:f1:bb:2f:ef:f5:2d:4b:9f:ca:4d:f5:de:
                    1f:69:78:2e:a6:d4:90:1e:e4:71:15:c9:b3:fd:dc:
                    69:79:19:44:b1:c9:46:44:1b:5c:a8:dc:0d:b1:67:
                    85:a5:e1:e0:29:67:43:e4:a1:cb:60:ca:25:70:35:
                    2f:5b:17:9f:47:35:2a:94:e8:98:94:17:d2:5f:bf:
                    24:9d:9b:19:2e:4e:0c:3e:c4:5d:93:76:4b:08:3b:
                    d6:92:fe:0d:22:b6:a9:cd:fa:9c:e6:19:ea:05:e1:
                    cf:51:04:5a:37:06:46:b9:ad:5a:6f:c6:a6:c0:dc:
                    85:06:0d:ff:b6:42:c2:32:5d:e3:37:17:70:b8:b9:
                    e5:b0:70:d0:9c:f6:e3:9d:21:ed:2c:2c:af:71:a8:
                    61:e2:1b:86:ce:4e:27:34:8c:74:29:b1:30:f5:cf:
                    9c:1b:92:d7:a1:ac:cf:6b:78:0c:bf:8b:98:3c:71:
                    75:06:8c:ff:c0:27:79:45:f4:e2:f1:88:27:67:a6:
                    c8:dc:8a:2a:8c:4f:c1:62:22:59:fb:5d:6c:ac:74:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:92:C0:C7:2A:AA:7C:62:5F:55:D5:BC:F8:49:5A:FB:82:5E:1E:EE
            X509v3 Authority Key Identifier:
                keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/F5LAxyqqfGJfVdW8-Ela-4JeHu4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:dd:5f:a7:0f:c2:8b:50:fd:fc:63:48:2d:df:ad:0b:0a:
         8b:da:32:be:af:92:fa:dc:d8:94:17:51:5c:fd:79:13:b8:fd:
         c3:cb:7d:81:8f:8f:62:7c:83:75:5e:2f:bd:c1:cc:00:82:e7:
         be:47:8c:65:d8:8c:f3:a8:c6:78:7f:04:1d:bc:62:69:b7:30:
         e5:ee:a0:94:e3:78:2a:8b:f8:a3:51:7b:5d:3d:6d:e9:aa:49:
         67:9f:79:3b:d8:4d:f6:47:24:dd:b7:2f:41:db:7d:bd:be:35:
         b3:91:c0:0b:4d:b0:4d:81:c0:76:40:c6:5d:c9:0f:51:06:00:
         2a:7b:a4:80:8d:b2:99:a6:e0:39:6e:a6:86:c9:bd:25:52:56:
         1b:3b:4c:9f:3e:55:01:f9:34:52:43:87:51:ae:62:36:41:98:
         28:a5:ef:44:13:97:a6:6f:33:7f:7e:85:19:08:17:24:70:87:
         21:dc:2c:c1:ee:23:33:1e:a1:f4:af:34:f0:2b:c7:bb:81:c5:
         88:07:98:9d:0e:c6:23:df:e8:df:77:0c:a1:79:76:08:26:8e:
         94:67:92:5a:f1:f7:f6:04:94:c4:fb:f0:bf:71:f9:9a:82:4d:
         af:12:f4:4c:4c:5c:c0:b4:ae:43:9b:e5:d0:89:e1:de:01:78:
         69:b1:2b:32
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJIismcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDMyMTEwMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE3OTJjMGM3MmFh
YTdjNjI1ZjU1ZDViY2Y4NDk1YWZiODI1ZTFlZWUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCO5cLZ1KjmHkqFFyoyyHDCU2dIeruvKqbucgPPNnL+a5Cw
xzJTTGYN7DrzNmvLHPG7L+/1LUufyk313h9peC6m1JAe5HEVybP93Gl5GUSxyUZE
G1yo3A2xZ4Wl4eApZ0PkoctgyiVwNS9bF59HNSqU6JiUF9JfvySdmxkuTgw+xF2T
dksIO9aS/g0itqnN+pzmGeoF4c9RBFo3Bka5rVpvxqbA3IUGDf+2QsIyXeM3F3C4
ueWwcNCc9uOdIe0sLK9xqGHiG4bOTic0jHQpsTD1z5wbktehrM9reAy/i5g8cXUG
jP/AJ3lF9OLxiCdnpsjciiqMT8FiIln7XWysdGk5AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUF5LAxyqqfGJfVdW8+Ela+4JeHu4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9GNUxBeHlxcWZHSmZWZFc4LUVsYS00SmVIdTQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAbPvdX6cPwotQ/fxjSC3frQsKi9oyvq+S+tzY
lBdRXP15E7j9w8t9gY+PYnyDdV4vvcHMAILnvkeMZdiM86jGeH8EHbxiabcw5e6g
lON4Kov4o1F7XT1t6apJZ595O9hN9kck3bcvQdt9vb41s5HAC02wTYHAdkDGXckP
UQYAKnukgI2ymabgOW6mhsm9JVJWGztMnz5VAfk0UkOHUa5iNkGYKKXvRBOXpm8z
f36FGQgXJHCHIdwswe4jMx6h9K808CvHu4HFiAeYnQ7GI9/o33cMoXl2CCaOlGeS
WvH39gSUxPvwv3H5moJNrxL0TExcwLSuQ5vl0Inh3gF4abErMg==
-----END CERTIFICATE-----
Generated at Sat May 3 23:04:27 2025 by rpki-client