Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa
File:                     w-n989jjTlDf5MUgKsjewMtXUDI.roa (raw, json)
Hash identifier:          wPJ7KbnJR8p2ekXqpvAYMlqfMd5+w+edbJ261qR43f4=
Subject key identifier:   C3:E9:FD:F3:D8:E3:4E:50:DF:E4:C5:20:2A:C8:DE:C0:CB:57:50:32
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       01856D788308F72AA17CFBD54AEC5F1F69D9
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa
Signing time:             Sun 01 Jan 2023 13:14:52 +0000
ROA not before:           Sun 01 Jan 2023 13:14:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        185.170.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:83:08:f7:2a:a1:7c:fb:d5:4a:ec:5f:1f:69:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Jan  1 13:14:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c3e9fdf3d8e34e50dfe4c5202ac8dec0cb575032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:00:81:c6:f4:2a:34:67:26:05:67:d5:c2:
                    32:88:ac:2b:fc:f9:03:d6:40:d8:c1:94:e6:2d:2b:
                    0f:12:80:7a:7b:b3:3c:bb:b7:4e:8d:86:e7:9d:db:
                    be:43:f9:1d:6d:ec:f1:2c:e0:1a:1b:d6:69:d0:05:
                    57:48:52:0d:2b:d5:da:58:23:e8:ff:9c:52:6e:63:
                    21:fa:55:74:56:cd:b4:f6:a1:44:a1:ab:ee:95:82:
                    72:76:e8:fb:e7:19:60:ff:a3:d0:6a:5d:61:0b:17:
                    0e:c8:f2:e3:9c:67:8b:c5:89:58:b8:da:1e:90:a7:
                    91:9e:47:5a:bc:1e:3c:99:82:f2:9f:13:f0:92:83:
                    b4:64:34:6f:49:96:8d:77:f4:6a:49:15:40:69:88:
                    a1:18:20:f8:c9:c4:1b:bb:5b:b7:16:37:1a:e4:d2:
                    a2:57:c3:25:32:f0:fd:e7:4f:25:c5:7d:4b:ec:12:
                    29:79:c4:ba:96:a0:42:b8:4b:02:b9:d4:6e:0a:ca:
                    a4:c1:eb:8b:83:c8:5e:3e:ac:d0:fc:03:07:2b:67:
                    9c:4a:d6:ac:34:b8:3f:17:1d:03:10:d3:bb:47:d6:
                    96:21:4a:26:e8:5f:19:ea:18:1c:d7:54:8c:50:42:
                    ea:b5:62:b9:8c:57:17:3c:cb:3b:3c:f8:ca:aa:72:
                    9f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:FD:F3:D8:E3:4E:50:DF:E4:C5:20:2A:C8:DE:C0:CB:57:50:32
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/w-n989jjTlDf5MUgKsjewMtXUDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:9c:c3:92:dd:06:1e:cb:b4:ca:3b:33:83:ba:ce:7e:a0:
         f7:ba:7d:82:17:e6:68:ad:06:78:41:3d:ae:3b:b4:23:d0:cc:
         21:ad:d1:2a:cd:60:26:65:a1:3a:a0:30:5f:6c:9c:0d:cd:c8:
         c4:0f:ef:d0:00:92:ba:e1:47:90:7d:83:7b:d9:e9:d1:79:b0:
         00:c6:03:f9:f9:64:0c:c0:11:14:ae:df:36:8c:d1:ea:c0:a0:
         14:10:8f:a8:65:3d:54:e2:fb:0d:a1:78:62:52:7c:20:b2:14:
         f7:37:cb:d0:8f:58:cd:01:97:a8:f4:f4:59:71:30:61:35:87:
         c5:48:c3:94:fa:87:a0:de:23:0d:37:92:29:84:57:86:4c:28:
         2b:59:3b:59:f6:d2:a2:37:7a:08:87:e6:0f:1b:4f:99:87:56:
         c1:e5:e8:0c:52:c3:dc:04:a5:78:61:0d:a5:85:8f:c9:f3:7d:
         4d:ca:31:d5:14:3d:96:ae:65:10:a9:d1:79:08:c9:55:ad:3a:
         25:bd:fe:12:3c:9d:28:fe:50:44:60:70:28:60:11:af:ae:b5:
         ff:cc:1f:d6:6b:48:da:06:cb:a7:89:09:ec:13:53:4d:8b:e7:
         02:4b:56:cb:9c:e2:30:00:65:e7:31:87:42:f3:72:4a:f7:29:
         77:b4:a9:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteIMI9yqhfPvVSuxfH2nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmIyZDJmYThiY2Y1ZjgzNjIxMGI5ZjQ5MjExZWU2ZDA5
NGQwZDIwHhcNMjMwMTAxMTMxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2U5ZmRmM2Q4ZTM0ZTUwZGZlNGM1MjAyYWM4ZGVjMGNiNTc1MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxEAgcb0KjRnJgVn1cIyiKwr/PkD
1kDYwZTmLSsPEoB6e7M8u7dOjYbnndu+Q/kdbezxLOAaG9Zp0AVXSFINK9XaWCPo
/5xSbmMh+lV0Vs209qFEoavulYJyduj75xlg/6PQal1hCxcOyPLjnGeLxYlYuNoe
kKeRnkdavB48mYLynxPwkoO0ZDRvSZaNd/RqSRVAaYihGCD4ycQbu1u3Fjca5NKi
V8MlMvD9508lxX1L7BIpecS6lqBCuEsCudRuCsqkweuLg8hePqzQ/AMHK2ecStas
NLg/Fx0DENO7R9aWIUom6F8Z6hgc11SMUELqtWK5jFcXPMs7PPjKqnKf0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMPp/fPY405Q3+TFICrI3sDLV1AyMB8GA1UdIwQY
MBaAFBIrLS+ovPX4NiELn0khHubQlNDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWIt
M2U3N2Q1NjdjY2M4LzEvdy1uOTg5ampUbERmNU1VZ0tzamV3TXRYVURJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4
LzEvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuapBMA0G
CSqGSIb3DQEBCwUAA4IBAQBD+pzDkt0GHsu0yjszg7rOfqD3un2CF+ZorQZ4QT2u
O7Qj0MwhrdEqzWAmZaE6oDBfbJwNzcjED+/QAJK64UeQfYN72enRebAAxgP5+WQM
wBEUrt82jNHqwKAUEI+oZT1U4vsNoXhiUnwgshT3N8vQj1jNAZeo9PRZcTBhNYfF
SMOU+oeg3iMNN5IphFeGTCgrWTtZ9tKiN3oIh+YPG0+Zh1bB5egMUsPcBKV4YQ2l
hY/J831NyjHVFD2WrmUQqdF5CMlVrTolvf4SPJ0o/lBEYHAoYBGvrrX/zB/Wa0ja
BsuniQnsE1NNi+cCS1bLnOIwAGXnMYdC83JK9yl3tKkO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org