Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WpH-KJz5Y2jNBhrTg5BUoTzwZ3E.roa
File:                     WpH-KJz5Y2jNBhrTg5BUoTzwZ3E.roa (raw, json)
Hash identifier:          Vd6OgfGn0G7x+L0x1Dlz9rVKezV3Xj/pUFdNgopwn2Q=
Subject key identifier:   5A:91:FE:28:9C:F9:63:68:CD:06:1A:D3:83:90:54:A1:3C:F0:67:71
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       01851B0D02BE1E51F4C41F9D00C2F814FE8F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WpH-KJz5Y2jNBhrTg5BUoTzwZ3E.roa
Signing time:             Fri 16 Dec 2022 13:08:35 +0000
ROA not before:           Fri 16 Dec 2022 13:08:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206092
IP address blocks:        194.105.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1b:0d:02:be:1e:51:f4:c4:1f:9d:00:c2:f8:14:fe:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Dec 16 13:08:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a91fe289cf96368cd061ad3839054a13cf06771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:2f:0b:c0:d0:17:b4:a0:e0:3a:2d:8e:1d:
                    f0:6a:4a:7f:98:90:2c:13:94:fb:e5:ff:e6:c6:0a:
                    11:4b:e0:37:71:34:80:40:85:0d:19:83:82:8c:4b:
                    59:fb:38:8c:2a:e1:6f:10:36:a5:59:2a:87:4d:01:
                    35:51:f7:a7:eb:69:0f:1b:a1:9c:7f:83:79:ff:df:
                    6b:0b:46:f0:3f:69:62:33:17:c1:5b:6a:1e:aa:78:
                    ac:d8:9b:2e:ff:fa:e6:77:08:16:57:b5:45:2f:b6:
                    bc:0a:c9:b8:e6:45:99:de:da:e5:68:10:52:61:32:
                    4e:33:8d:b8:1f:c6:80:6a:34:67:da:9e:fe:f3:27:
                    e0:56:53:9e:56:26:0d:9d:bb:94:93:17:f6:41:48:
                    58:55:7b:b8:0b:2e:d6:22:e5:95:3a:43:e5:e7:f6:
                    47:d2:ae:83:87:dd:1c:1b:57:99:61:ab:35:40:4c:
                    d4:41:1a:64:54:20:d7:88:5d:af:24:f1:68:2f:0c:
                    54:a9:b1:c3:36:3c:c1:c8:bb:fa:d5:1b:03:88:09:
                    c1:b2:45:f2:ba:84:c1:cd:dd:22:68:d8:44:3f:36:
                    6b:e1:23:b8:d2:06:16:eb:58:4e:44:c0:1c:1b:53:
                    24:69:87:22:44:13:bd:21:63:50:54:81:75:01:8d:
                    ba:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:91:FE:28:9C:F9:63:68:CD:06:1A:D3:83:90:54:A1:3C:F0:67:71
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/WpH-KJz5Y2jNBhrTg5BUoTzwZ3E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.105.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:82:10:69:8e:7b:5b:ef:75:7c:21:2a:a5:ba:12:89:2d:
         00:a6:a9:52:64:47:2c:65:af:c5:7c:83:1d:c1:bd:ad:57:fc:
         54:a1:cf:ae:3d:44:92:45:06:c1:05:5d:64:05:6c:03:18:b7:
         d8:e7:e5:cf:3d:90:7c:0a:0a:97:38:b7:c2:64:70:2f:2f:6c:
         fc:ec:28:4b:1f:cf:5b:85:53:3b:e7:7a:eb:a9:2a:51:14:5b:
         6c:ff:35:c8:37:94:42:78:b7:6f:00:5b:b3:f5:5b:06:10:90:
         3e:a4:8f:fe:00:9e:70:34:85:48:3f:60:4d:3a:2e:0f:16:1c:
         cd:05:08:18:1b:18:66:70:9d:9e:71:d0:4a:48:7a:7b:f2:82:
         b6:64:14:b2:49:0f:b1:cc:79:b0:95:87:5c:d4:3c:c7:99:bd:
         81:38:ea:42:d9:0b:96:5c:18:13:20:7d:8b:02:0a:ed:8b:4a:
         14:61:70:d1:22:e5:70:df:13:e8:7c:1c:ab:9d:87:90:7b:ca:
         34:dd:07:03:38:f5:f4:5f:1a:d0:74:53:c8:f1:f9:52:82:c8:
         6c:c6:4e:7a:a3:bb:17:38:80:96:94:d8:b4:ce:58:97:18:57:
         11:de:7f:18:58:be:c5:55:b5:fc:b7:dd:0e:85:4c:02:89:f8:
         c7:6b:c1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org