Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa
File:                     EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa (raw, json)
Hash identifier:          sPqHrEpFIB4pLP4CnnwAudvTtduSTQq+hWUXb0qMfQg=
Subject key identifier:   10:5D:84:06:1E:68:9F:04:CE:20:EC:74:B0:B5:07:63:39:59:EE:7D
Certificate issuer:       /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial:       0182F38C6D482F5A768CF72623233A7CC6E4
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa
Signing time:             Wed 31 Aug 2022 10:57:22 +0000
ROA not before:           Wed 31 Aug 2022 10:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210122
IP address blocks:        141.11.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f3:8c:6d:48:2f:5a:76:8c:f7:26:23:23:3a:7c:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
        Validity
            Not Before: Aug 31 10:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=105d84061e689f04ce20ec74b0b507633959ee7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:c1:92:84:29:b9:87:f6:d0:d8:d7:26:57:
                    f2:6c:16:cc:6f:0e:1f:cd:eb:d2:2e:a0:09:1b:8c:
                    b8:da:e8:61:8a:ab:22:33:41:6b:06:60:c2:d1:52:
                    95:03:32:63:f0:2b:22:df:34:06:31:d4:8e:23:cb:
                    0b:d4:53:82:f7:28:8e:f1:c9:e6:b4:53:09:b0:4f:
                    52:44:37:c1:e6:36:66:fd:62:f0:76:81:fb:3f:d8:
                    c3:e3:57:f8:a6:5d:bb:91:45:51:57:87:7d:d6:53:
                    66:06:c0:f6:91:46:7a:36:45:35:13:1f:0b:91:72:
                    99:2e:28:11:65:0b:f3:3a:52:bd:7a:51:80:50:00:
                    7b:14:26:1d:2c:d4:6e:11:b5:03:db:3a:5b:7d:f2:
                    a0:38:e5:8c:0c:b5:2b:ed:b1:19:be:3c:87:c2:0c:
                    38:f4:05:36:ef:d2:ff:24:8e:de:9c:46:7f:45:45:
                    4b:e4:e7:22:1a:91:83:c3:0f:31:86:23:33:1b:45:
                    a7:17:6f:0b:51:9c:03:b0:6f:22:e9:21:0d:7d:99:
                    fe:83:9a:ab:7b:2e:c9:9b:15:ad:ba:fc:17:00:32:
                    6b:bb:17:11:37:a0:1e:82:2f:5a:ff:2c:7a:e3:69:
                    cc:0f:eb:c1:92:73:47:e4:0a:c1:33:16:b1:59:7b:
                    5d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5D:84:06:1E:68:9F:04:CE:20:EC:74:B0:B5:07:63:39:59:EE:7D
            X509v3 Authority Key Identifier:
                keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/EF2EBh5onwTOIOx0sLUHYzlZ7n0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.11.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:66:06:f5:19:eb:5b:9f:be:79:63:7c:4a:0f:b4:34:88:
         12:28:6d:1c:39:0a:d0:b3:0a:52:d8:10:80:0b:c6:ca:06:23:
         56:1f:8c:33:b5:26:f5:48:a4:cd:9d:3c:de:a0:06:64:5e:b8:
         c9:50:4d:54:1e:21:a2:73:e9:41:08:f0:28:59:0b:5b:af:9e:
         f3:cf:5f:06:38:a2:95:cc:6d:f6:09:45:4b:0f:63:83:bc:35:
         1d:06:45:07:9d:bf:43:89:4a:2b:1f:4e:f4:59:ca:c0:53:36:
         ce:e7:dd:d9:56:b0:dd:f4:a5:13:b1:3f:fa:49:4f:58:65:29:
         02:8b:a6:f9:1f:9e:c4:ce:58:c1:bd:c4:a1:fd:54:ac:24:5c:
         d2:4f:b5:f3:0a:57:23:11:40:38:cf:f6:21:c9:ec:1b:b0:62:
         e3:b7:7d:6a:b4:90:63:d3:82:a3:0f:1e:bd:c5:97:b2:02:5e:
         9a:e8:e4:94:27:27:ba:19:24:44:a2:51:57:0e:e3:13:de:44:
         7c:67:82:8c:42:23:c7:e8:71:70:95:63:f8:13:03:1a:71:de:
         5e:83:cb:cd:8d:49:84:4d:17:f0:c5:73:e4:d5:b6:75:77:1b:
         7f:77:73:8f:13:b4:08:ad:63:a7:a9:2f:a2:eb:c3:b2:8b:6c:
         91:98:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:10 2023 by rpki-client on console-ams.rpki-client.org