Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ym8ZTLG9rRRmEYsQFioaQSJaxeo.roa
File:                     ym8ZTLG9rRRmEYsQFioaQSJaxeo.roa (raw, json)
Hash identifier:          0+VeSLtZztXk9WHIEfRfibXo8mJke2YNjfCK6mkrCmc=
Subject key identifier:   CA:6F:19:4C:B1:BD:AD:14:66:11:8B:10:16:2A:1A:41:22:5A:C5:EA
Certificate issuer:       /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial:       0DA6AD6A
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ym8ZTLG9rRRmEYsQFioaQSJaxeo.roa
Signing time:             Sat 01 Jan 2022 08:59:33 +0000
ROA not before:           Sat 01 Jan 2022 08:59:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     26114
IP address blocks:        212.119.8.0/24 maxlen: 24
                          213.198.53.0/24 maxlen: 24
                          83.231.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229027178 (0xda6ad6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
        Validity
            Not Before: Jan  1 08:59:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ca6f194cb1bdad1466118b10162a1a41225ac5ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:4d:15:4f:02:21:8f:ca:5b:3d:59:c7:c5:
                    0a:1c:05:ed:fc:3c:68:51:28:78:1f:ca:38:7f:ff:
                    ea:57:e4:97:6b:20:86:b6:f0:1a:12:65:d3:11:4e:
                    85:79:c3:67:b0:c7:dd:b9:fc:1b:ed:3d:2f:f4:6a:
                    4a:a5:ba:5d:1a:fc:7f:8c:b7:30:5b:0e:f1:16:a4:
                    df:da:5b:42:bc:f5:74:65:96:f5:a1:ac:5c:3b:47:
                    33:30:e1:5a:3b:11:00:2b:5e:18:63:af:30:dc:14:
                    1e:01:ed:16:97:12:bb:27:8b:73:07:70:94:2f:01:
                    2b:ba:29:0c:8b:27:c5:b9:11:06:8f:ef:a9:42:fc:
                    6b:0c:aa:49:64:a4:71:a8:b9:52:70:f3:c2:d5:e9:
                    e9:68:89:74:5a:cd:93:ba:40:00:94:cd:4a:ac:e9:
                    8e:a6:2d:69:56:ac:7e:b9:f5:a0:a8:d5:5b:8f:de:
                    ce:08:7c:67:14:d6:27:e2:1b:b9:5d:22:3e:e8:cf:
                    65:b7:98:d7:94:b4:a7:36:a3:c1:f7:62:23:2e:04:
                    de:f6:ae:a1:16:8c:70:4a:54:18:ae:4a:21:b7:3d:
                    ba:8b:12:a4:6c:ea:e1:95:7a:81:54:18:63:b2:7e:
                    e6:db:3c:78:f5:4a:bd:2f:1a:51:a6:98:1a:d7:a6:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6F:19:4C:B1:BD:AD:14:66:11:8B:10:16:2A:1A:41:22:5A:C5:EA
            X509v3 Authority Key Identifier:
                keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/ym8ZTLG9rRRmEYsQFioaQSJaxeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.153.0/24
                  212.119.8.0/24
                  213.198.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:63:80:6f:d8:6b:9e:95:15:76:0f:1c:0d:c0:07:0b:d9:15:
         7d:d9:3c:bf:f3:13:be:e2:75:cd:c5:67:af:d5:f2:2c:a6:bb:
         80:10:fe:8c:3a:bf:b8:b9:1f:64:bd:bf:b9:77:bf:40:01:17:
         2c:25:9a:b6:85:db:f9:ca:f0:c6:ae:83:39:b3:95:4e:3f:bc:
         14:dc:41:17:09:d2:eb:2d:98:a3:85:ed:ab:8c:5c:ec:98:f9:
         36:d6:3e:53:12:aa:09:b8:91:33:63:94:08:4c:39:82:5b:43:
         70:21:9b:63:7a:9a:c9:0a:e4:44:ad:db:23:da:01:5f:10:71:
         41:34:8c:72:89:5d:14:ad:e0:9e:0b:f2:64:49:84:0e:fc:d8:
         bc:72:a2:46:ff:3d:9e:27:c1:64:13:44:e6:75:85:5b:18:93:
         68:20:82:83:5e:53:c4:4b:dd:d1:16:96:14:82:a1:dc:3e:1e:
         90:cf:af:21:71:69:41:bd:7f:9b:28:1c:4c:ce:85:93:b7:ee:
         c1:9a:32:72:9b:e3:5c:6d:4d:73:bc:f3:0a:e3:5e:8a:26:9e:
         ca:8a:3f:fc:f0:b0:be:f4:5d:80:c4:ec:9f:85:00:3f:c6:81:
         49:85:ea:60:55:78:f9:df:66:e4:0e:2a:1c:b2:5a:a2:e1:71:
         33:ee:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org