Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/zmQgjsgGMuAjtfB1hi3cGEZbrgM.roa
File:                     zmQgjsgGMuAjtfB1hi3cGEZbrgM.roa (raw, json)
Hash identifier:          j5Goa1pnTk3mVYw5AR+U8L3NnOGkRmHC8MB4vaa7yuQ=
Subject key identifier:   CE:64:20:8E:C8:06:32:E0:23:B5:F0:75:86:2D:DC:18:46:5B:AE:03
Certificate issuer:       /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial:       018562FA32A329902F45D067EA50AE899C03
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/zmQgjsgGMuAjtfB1hi3cGEZbrgM.roa
Signing time:             Fri 30 Dec 2022 12:20:42 +0000
ROA not before:           Fri 30 Dec 2022 12:20:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        185.170.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:fa:32:a3:29:90:2f:45:d0:67:ea:50:ae:89:9c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
        Validity
            Not Before: Dec 30 12:20:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ce64208ec80632e023b5f075862ddc18465bae03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:1c:ef:ec:62:00:46:84:bf:2c:db:1e:e2:
                    91:56:2d:bc:0d:1a:af:23:71:a5:9e:4b:e8:e5:b8:
                    6c:0c:65:a5:3a:c1:99:bc:ab:3b:0f:3a:51:23:e8:
                    d7:1e:39:31:4a:69:f7:b6:1f:af:a1:a5:99:89:67:
                    55:e0:bb:df:79:ab:db:a6:aa:99:89:ee:59:41:07:
                    ee:19:a5:0a:4b:61:a4:cb:86:ab:5b:d8:cf:be:80:
                    3d:ad:bf:67:58:02:2c:7b:1c:35:a9:3a:f4:35:cd:
                    98:1f:5a:e5:ba:13:27:8c:c3:09:27:a5:16:a3:81:
                    a4:4b:63:74:b2:a5:3f:33:b8:6d:76:3b:7d:5b:16:
                    58:b3:13:61:80:cf:26:63:48:47:7c:ae:25:7b:d3:
                    9c:7b:98:0a:20:b4:b5:a0:05:53:d8:48:6e:18:a0:
                    7d:b2:4f:ad:86:27:b9:30:ed:f8:f5:dd:6d:4d:80:
                    8f:1b:99:63:b4:56:49:1e:94:56:52:d5:97:61:4b:
                    77:8a:50:bb:ba:8b:3b:9b:1c:df:fe:15:a9:f0:ef:
                    b6:cb:db:57:a0:b9:69:e5:2a:ef:6d:4b:e7:ed:8d:
                    cb:f6:24:fa:9b:7f:fe:77:70:51:04:73:b8:51:69:
                    a7:12:d5:98:ad:f4:69:37:b5:c8:0e:b0:a1:20:3b:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:20:8E:C8:06:32:E0:23:B5:F0:75:86:2D:DC:18:46:5B:AE:03
            X509v3 Authority Key Identifier:
                keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/zmQgjsgGMuAjtfB1hi3cGEZbrgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9f:b9:9f:11:e8:2c:23:c9:70:eb:cc:62:8b:d3:12:31:8f:
         ba:06:77:f7:b8:3d:ca:ad:a7:60:54:7a:03:b8:97:06:de:c0:
         c7:cd:7f:09:47:e1:72:02:ce:14:bb:eb:bb:da:a6:0b:5f:a8:
         78:5f:c7:1f:ea:ab:18:53:c8:06:bc:e3:23:47:d0:db:b1:d9:
         6a:ff:0a:f3:f6:2a:9a:74:b6:b3:0a:d4:70:d5:a4:9e:7c:88:
         ca:d5:16:e7:0c:97:10:af:41:4e:7f:8d:51:db:9d:9e:ae:d4:
         81:84:a1:62:17:eb:0f:24:a0:cb:6e:20:33:1e:f2:e4:ae:1f:
         61:5b:8b:52:a3:ec:01:b4:15:9a:67:e3:fb:6a:80:38:54:b6:
         db:bf:ec:2a:72:d6:c5:63:da:98:b4:1a:09:d6:b8:73:f6:1a:
         09:a4:2d:03:7b:01:67:54:6e:0e:7d:aa:fe:41:fe:e3:c8:8e:
         97:02:f8:18:25:40:7d:54:14:21:6d:a0:e9:e4:9f:ef:7b:72:
         bb:ee:86:0f:1e:14:d8:bb:34:b2:62:9a:6a:6f:9e:0a:e6:99:
         54:a3:9c:ce:94:0f:6b:9e:af:41:2f:ef:5b:6b:8c:07:a0:f2:
         a9:c1:9d:c8:d7:5a:02:f4:77:5c:b5:fb:a0:d5:58:c4:64:36:
         c8:de:ef:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVi+jKjKZAvRdBn6lCuiZwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmIyZDJmYThiY2Y1ZjgzNjIxMGI5ZjQ5MjExZWU2ZDA5
NGQwZDIwHhcNMjIxMjMwMTIyMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTY0MjA4ZWM4MDYzMmUwMjNiNWYwNzU4NjJkZGMxODQ2NWJhZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfIc7+xiAEaEvyzbHuKRVi28DRqv
I3Glnkvo5bhsDGWlOsGZvKs7DzpRI+jXHjkxSmn3th+voaWZiWdV4LvfeavbpqqZ
ie5ZQQfuGaUKS2Gky4arW9jPvoA9rb9nWAIsexw1qTr0Nc2YH1rluhMnjMMJJ6UW
o4GkS2N0sqU/M7htdjt9WxZYsxNhgM8mY0hHfK4le9Oce5gKILS1oAVT2EhuGKB9
sk+thie5MO349d1tTYCPG5ljtFZJHpRWUtWXYUt3ilC7uos7mxzf/hWp8O+2y9tX
oLlp5SrvbUvn7Y3L9iT6m3/+d3BRBHO4UWmnEtWYrfRpN7XIDrChIDsxYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM5kII7IBjLgI7XwdYYt3BhGW64DMB8GA1UdIwQY
MBaAFBIrLS+ovPX4NiELn0khHubQlNDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWIt
M2U3N2Q1NjdjY2M4LzEvem1RZ2pzZ0dNdUFqdGZCMWhpM2NHRVpicmdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4
LzEvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuapBMA0G
CSqGSIb3DQEBCwUAA4IBAQARn7mfEegsI8lw68xii9MSMY+6Bnf3uD3KradgVHoD
uJcG3sDHzX8JR+FyAs4Uu+u72qYLX6h4X8cf6qsYU8gGvOMjR9Dbsdlq/wrz9iqa
dLazCtRw1aSefIjK1RbnDJcQr0FOf41R252ertSBhKFiF+sPJKDLbiAzHvLkrh9h
W4tSo+wBtBWaZ+P7aoA4VLbbv+wqctbFY9qYtBoJ1rhz9hoJpC0DewFnVG4Ofar+
Qf7jyI6XAvgYJUB9VBQhbaDp5J/ve3K77oYPHhTYuzSyYppqb54K5plUo5zOlA9r
nq9BL+9ba4wHoPKpwZ3I11oC9Hdctfug1VjEZDbI3u9P
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org