Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/A0uP_-7fg6wXqgV-1AFU1PfvErs.roa
File:                     A0uP_-7fg6wXqgV-1AFU1PfvErs.roa (raw, json)
Hash identifier:          iGFaZwyGFqHJU4LDYq6cXHTYfR8roAg3qLygW96trDw=
Subject key identifier:   03:4B:8F:FF:EE:DF:83:AC:17:AA:05:7E:D4:01:54:D4:F7:EF:12:BB
Certificate issuer:       /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial:       0185C591201E04B02A0927DBE170D92D76B4
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/A0uP_-7fg6wXqgV-1AFU1PfvErs.roa
Signing time:             Wed 18 Jan 2023 15:48:20 +0000
ROA not before:           Wed 18 Jan 2023 15:48:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        82.118.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c5:91:20:1e:04:b0:2a:09:27:db:e1:70:d9:2d:76:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
        Validity
            Not Before: Jan 18 15:48:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=034b8fffeedf83ac17aa057ed40154d4f7ef12bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:5c:4d:57:d7:c5:46:87:d1:8f:ed:6a:8a:
                    db:a7:f3:d1:5d:18:45:3b:c0:a0:31:44:89:58:51:
                    95:3f:9d:97:d1:00:0f:fe:86:c0:50:04:77:dc:66:
                    1b:04:bd:1b:77:c0:c0:3d:6f:6b:9e:13:45:cf:e7:
                    ad:77:29:c5:b3:2a:02:6f:16:46:a3:cc:6c:cf:00:
                    c8:5a:c0:3c:28:14:ae:0b:2a:bc:10:59:87:26:92:
                    19:62:32:5a:b1:b4:4c:c2:2a:01:ea:d6:16:88:5d:
                    78:b7:7c:75:10:41:7b:89:fe:a9:05:54:88:d3:c1:
                    6b:bb:38:fd:7c:c5:20:64:51:e5:ac:fd:b7:03:85:
                    4e:fd:79:88:43:6d:79:11:7b:f8:b8:8e:c6:0c:ee:
                    7b:19:3c:23:c7:db:56:c4:6f:b5:cc:40:12:a3:6f:
                    86:b6:4e:f8:3e:4a:94:41:5c:26:7f:9d:49:39:e9:
                    2d:7c:51:6a:3a:04:6c:1d:a4:9d:1b:b2:ae:63:76:
                    41:44:bd:d0:b0:17:ed:b5:2a:b6:4f:b0:d0:ed:e9:
                    65:b0:f5:74:ac:80:ed:08:84:39:5b:63:7d:66:c1:
                    21:66:99:f7:a7:7a:e1:d9:4c:d4:cf:12:a2:33:d7:
                    1d:93:fe:fb:c2:90:83:7b:da:65:da:7d:cb:d7:5d:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:8F:FF:EE:DF:83:AC:17:AA:05:7E:D4:01:54:D4:F7:EF:12:BB
            X509v3 Authority Key Identifier:
                keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/A0uP_-7fg6wXqgV-1AFU1PfvErs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:0c:9e:51:58:c2:9a:6d:3d:99:0c:8a:c0:10:14:a5:c3:
         28:6d:9c:1c:9b:19:25:bd:2c:6d:71:e5:c4:bc:5d:e9:a2:6a:
         57:46:2a:d0:54:fb:78:cd:68:f6:86:b4:10:02:9e:e3:15:e8:
         c4:29:d5:63:5f:9f:ba:0f:ea:4b:f0:c7:64:14:3f:17:c9:1c:
         1d:94:81:f5:eb:cc:74:5b:46:fc:45:9f:2e:e4:e1:8f:cf:f7:
         30:2a:42:b5:43:34:95:7b:76:fe:5a:67:18:7a:a6:15:9b:08:
         7b:7e:a2:2d:57:90:7c:8a:1c:42:2e:dd:8d:aa:c2:ab:d4:39:
         61:9f:1e:c2:af:d0:64:1e:1a:d6:0c:6f:67:5b:58:1b:ce:57:
         0d:f8:5b:74:ba:89:16:a5:e3:98:96:a5:49:46:a9:b1:e9:48:
         1c:5a:91:00:e6:79:2b:12:c5:2d:2d:8c:66:7e:87:d2:ab:54:
         6e:8a:a5:ea:18:60:93:ca:99:21:db:7b:35:d6:84:65:c0:be:
         d5:4f:dc:c3:1e:56:2b:5a:36:73:d5:44:bb:7f:4b:18:7b:a1:
         e2:f5:7d:19:47:c8:81:2e:5a:8f:4f:6a:3b:86:aa:dd:9d:03:
         08:2e:5a:e3:87:b9:12:9f:76:6e:ab:6f:ed:d1:c0:8e:e4:c4:
         a5:3b:3c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org