Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/5fjgVroIvFchUO-m_ISZ-7ywXyQ.roa
File:                     5fjgVroIvFchUO-m_ISZ-7ywXyQ.roa (raw, json)
Hash identifier:          fowaFQ3EWWlznwo82EmlD9BHAV+LxZXtTTKwSnk6T9Q=
Subject key identifier:   E5:F8:E0:56:BA:08:BC:57:21:50:EF:A6:FC:84:99:FB:BC:B0:5F:24
Certificate issuer:       /CN=094875f406795db42a0179df1fbfc5d69ae712ee
Certificate serial:       01825EA2CB939A62B640CCFAB2F5BD6EB054
Authority key identifier: 09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/5fjgVroIvFchUO-m_ISZ-7ywXyQ.roa
Signing time:             Tue 02 Aug 2022 12:58:23 +0000
ROA not before:           Tue 02 Aug 2022 12:58:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        213.139.69.0/24 maxlen: 24
                          213.139.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5e:a2:cb:93:9a:62:b6:40:cc:fa:b2:f5:bd:6e:b0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094875f406795db42a0179df1fbfc5d69ae712ee
        Validity
            Not Before: Aug  2 12:58:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5f8e056ba08bc572150efa6fc8499fbbcb05f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ac:8e:8a:4c:05:ef:3b:a9:07:ac:19:95:02:
                    37:7e:5b:c0:b6:e9:c4:47:01:fe:52:78:16:3c:b7:
                    55:c4:ce:0c:9b:09:89:27:e5:4f:2b:c1:2a:64:57:
                    ab:7f:8c:95:12:57:9d:42:17:06:6c:cd:9c:f2:27:
                    7b:20:63:e9:36:a0:d3:f9:e7:b3:8b:d0:30:08:e4:
                    22:0d:fc:f0:4a:e0:f4:38:f2:a5:9e:be:7e:90:98:
                    5b:10:c5:b0:b9:35:3a:d4:db:e4:f3:9c:3d:d3:59:
                    a2:8b:97:00:15:09:a6:69:36:21:b2:33:93:40:e5:
                    7c:03:70:06:90:13:6c:49:1e:25:50:59:bb:f9:96:
                    25:8f:a2:3a:d3:1f:bb:f6:4e:28:d9:8f:6a:13:50:
                    03:aa:e0:6d:4a:4f:e2:88:f1:1f:77:5b:ad:af:16:
                    32:6a:d6:23:0d:86:64:d1:06:0a:23:19:65:17:db:
                    05:c1:99:95:15:b9:d0:f9:a9:e2:1d:22:45:79:c6:
                    61:75:a0:c0:02:55:bb:09:9a:7d:b2:3a:37:24:c3:
                    2b:cb:20:90:ee:76:20:8e:a2:fc:6f:ac:3d:1d:d4:
                    ba:70:3f:cb:0e:06:78:34:0a:a0:ac:89:a3:8b:3d:
                    3c:43:2c:2b:47:c1:1a:ae:6b:0a:88:fc:c5:b9:0c:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F8:E0:56:BA:08:BC:57:21:50:EF:A6:FC:84:99:FB:BC:B0:5F:24
            X509v3 Authority Key Identifier:
                keyid:09:48:75:F4:06:79:5D:B4:2A:01:79:DF:1F:BF:C5:D6:9A:E7:12:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUh19AZ5XbQqAXnfH7_F1prnEu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/5fjgVroIvFchUO-m_ISZ-7ywXyQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/336aab-4e87-4d27-b475-864580d02f81/1/CUh19AZ5XbQqAXnfH7_F1prnEu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.139.69.0/24
                  213.139.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1f:f5:b4:43:81:e4:20:45:56:df:a1:7c:91:7c:fb:5e:cf:
         18:7a:d0:86:38:f7:9a:7c:18:6c:5d:c7:89:d4:bd:69:aa:7b:
         99:89:37:3b:b7:e5:70:45:dd:36:6f:1d:e7:ce:5e:50:7e:fa:
         33:82:15:7b:3c:92:fd:26:57:63:ec:47:3b:86:06:bf:66:b1:
         83:f7:cc:00:67:0d:dc:f8:d8:9d:84:e2:a4:8b:ae:a7:6f:50:
         a0:1f:20:3b:bd:46:97:2c:64:7a:33:07:f6:bd:24:48:fe:c0:
         a0:69:67:f7:eb:02:75:32:d0:85:96:98:dd:c2:d0:39:0d:46:
         94:9d:37:89:0e:d7:26:1e:7b:8e:3f:40:df:3e:c7:4f:80:0c:
         e5:00:25:b8:26:8c:33:d9:e9:35:ff:f0:a5:70:20:85:16:85:
         44:60:b7:3a:7b:30:eb:40:b0:64:50:25:2c:8d:77:30:11:60:
         35:70:fa:5e:b7:a9:b5:0d:dc:61:70:93:ca:3f:43:87:87:bd:
         5e:19:25:4d:95:5b:ec:b1:75:79:7a:dc:61:9c:40:f5:f6:ed:
         8c:c6:73:0a:16:a2:89:17:87:19:29:f8:16:d1:7a:7f:7b:ab:
         99:43:25:b5:f7:03:97:f6:2a:f9:d7:3f:fc:ee:7e:8b:63:2d:
         2b:42:94:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:02 2023 by rpki-client on console-fra.rpki-client.org