Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-Y9cbBKU3mRYSJ7DJUY9TqtlEjc.roa
File:                     1-Y9cbBKU3mRYSJ7DJUY9TqtlEjc.roa (raw, json)
Hash identifier:          Qu6aMkYREdlidgqaqCyeFKxOOxM4uVxc7qAHC/Izoj0=
Subject key identifier:   F9:8F:5C:6C:12:94:DE:64:58:48:9E:C3:25:46:3D:4E:AB:65:12:37
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183F411D1F06B928A2AEBB30F9E43013970
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-Y9cbBKU3mRYSJ7DJUY9TqtlEjc.roa
Signing time:             Thu 20 Oct 2022 06:25:51 +0000
ROA not before:           Thu 20 Oct 2022 06:25:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        45.149.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f4:11:d1:f0:6b:92:8a:2a:eb:b3:0f:9e:43:01:39:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Oct 20 06:25:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f98f5c6c1294de6458489ec325463d4eab651237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:72:25:2a:97:fe:89:46:ea:d3:d0:55:e5:
                    c3:ff:8e:b5:cd:82:8d:4e:3a:2a:7a:28:96:e4:3d:
                    e0:58:0e:24:85:4f:29:70:1e:c7:83:6f:a4:28:c4:
                    a5:cc:f0:04:91:41:51:4f:19:7b:32:83:79:e4:c9:
                    67:1e:c2:c5:6e:e9:68:01:bf:0e:1c:df:9f:73:bb:
                    1a:04:71:a3:f0:b1:45:a5:2b:7b:24:9c:c3:5e:0f:
                    a5:bd:b9:fd:fd:cc:2a:a9:8b:fc:79:67:3b:3d:05:
                    53:58:f0:58:c9:fc:74:15:1a:86:2c:b9:3b:0a:de:
                    61:74:6e:d7:0c:52:58:85:52:f6:68:9e:23:a2:b8:
                    88:c0:fc:aa:38:3f:dc:e0:bf:82:07:3b:68:56:0a:
                    94:cd:fa:d8:1c:2c:02:6f:02:17:92:db:88:e2:43:
                    85:28:ae:d0:93:d6:ce:3c:f7:d3:f2:1a:83:9b:6f:
                    ca:bd:f9:20:0d:da:83:a4:a8:65:89:43:cc:67:12:
                    a8:2b:ef:ac:c2:cc:fa:4c:e1:a2:09:f3:a6:0f:26:
                    ab:3a:3b:e4:f0:71:64:2e:f7:ed:aa:9a:a5:92:78:
                    83:d7:cb:ac:24:58:fc:dc:af:7f:9f:80:8b:f0:8a:
                    e3:15:b3:12:a2:72:52:b1:64:81:24:29:ea:c1:54:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:5C:6C:12:94:DE:64:58:48:9E:C3:25:46:3D:4E:AB:65:12:37
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-Y9cbBKU3mRYSJ7DJUY9TqtlEjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:d7:b1:d2:80:1b:10:f5:8f:58:4a:a8:e0:f7:5c:20:c1:
         30:4f:c6:a5:19:14:44:1f:36:87:5d:19:4f:a2:58:36:de:29:
         84:14:a5:11:e6:eb:01:48:c2:81:17:de:16:08:fe:ee:c7:7a:
         84:08:e0:4e:a4:74:b5:83:b4:3f:9e:9c:17:c6:89:65:b3:e6:
         a3:1f:c3:7b:c9:d9:d2:a7:3f:61:0d:2e:d9:b3:44:2f:c1:77:
         52:ca:5d:23:d6:12:af:be:42:cc:08:a7:0e:17:d2:10:e6:5e:
         d1:2b:0f:01:75:8b:85:58:57:c9:45:db:4b:1c:87:0d:dc:b5:
         81:e4:52:15:ad:88:f8:f6:4b:43:78:c1:78:22:a5:99:83:35:
         86:ac:36:47:9e:6a:ed:1e:e7:75:53:64:32:6b:4d:35:1b:27:
         c8:69:ad:99:17:68:67:18:66:d3:b4:d7:b5:96:f9:ef:82:f8:
         37:dd:7e:96:62:05:b4:98:7b:a5:1b:b8:92:45:2a:ae:2f:b0:
         bb:38:92:0d:f1:30:af:03:98:61:fa:4b:d4:c8:ec:c4:61:63:
         b3:47:54:13:be:f7:7b:16:c0:d2:36:31:53:c3:52:7a:60:b1:
         78:c7:8e:e0:37:68:28:3e:a7:ef:66:e3:9a:2b:80:62:45:11:
         ab:78:60:e1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYP0EdHwa5KKKuuzD55DATlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDIwMDYyNTUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOThmNWM2YzEyOTRkZTY0NTg0ODllYzMyNTQ2M2Q0ZWFiNjUxMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8FyJSqX/olG6tPQVeXD/461zYKN
TjoqeiiW5D3gWA4khU8pcB7Hg2+kKMSlzPAEkUFRTxl7MoN55MlnHsLFbuloAb8O
HN+fc7saBHGj8LFFpSt7JJzDXg+lvbn9/cwqqYv8eWc7PQVTWPBYyfx0FRqGLLk7
Ct5hdG7XDFJYhVL2aJ4joriIwPyqOD/c4L+CBztoVgqUzfrYHCwCbwIXktuI4kOF
KK7Qk9bOPPfT8hqDm2/KvfkgDdqDpKhliUPMZxKoK++swsz6TOGiCfOmDyarOjvk
8HFkLvftqpqlkniD18usJFj83K9/n4CL8IrjFbMSonJSsWSBJCnqwVTSAwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmPXGwSlN5kWEiewyVGPU6rZRI3MB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvMS1ZOWNiQktVM21SWVNKN0RKVVk5VHF0bEVqYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2Jj
ZS8xL2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2VujAN
BgkqhkiG9w0BAQsFAAOCAQEAHQXXsdKAGxD1j1hKqOD3XCDBME/GpRkURB82h10Z
T6JYNt4phBSlEebrAUjCgRfeFgj+7sd6hAjgTqR0tYO0P56cF8aJZbPmox/De8nZ
0qc/YQ0u2bNEL8F3UspdI9YSr75CzAinDhfSEOZe0SsPAXWLhVhXyUXbSxyHDdy1
geRSFa2I+PZLQ3jBeCKlmYM1hqw2R55q7R7ndVNkMmtNNRsnyGmtmRdoZxhm07TX
tZb574L4N91+lmIFtJh7pRu4kkUqri+wuziSDfEwrwOYYfpL1MjsxGFjs0dUE773
exbA0jYxU8NSemCxeMeO4DdoKD6n72bjmiuAYkURq3hg4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org