Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X00OZ0s1TBFgoh0f-QDdoDCJLdc.roa
File:                     X00OZ0s1TBFgoh0f-QDdoDCJLdc.roa (raw, json)
Hash identifier:          VHGOnvOZG0XaDAOL4ZWeQSTmEQST+ZwAXxPdNjw86+0=
Subject key identifier:   5F:4D:0E:67:4B:35:4C:11:60:A2:1D:1F:F9:00:DD:A0:30:89:2D:D7
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04D08AD0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X00OZ0s1TBFgoh0f-QDdoDCJLdc.roa
Signing time:             Tue 07 Jun 2022 12:11:03 +0000
ROA not before:           Tue 07 Jun 2022 12:11:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        194.113.227.0/24 maxlen: 24
                          194.105.21.0/24 maxlen: 24
                          45.152.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80775888 (0x4d08ad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jun  7 12:11:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5f4d0e674b354c1160a21d1ff900dda030892dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:df:a7:0c:7e:df:f0:df:9b:76:53:b6:90:
                    41:e6:60:89:f5:20:3c:e7:5e:4f:12:be:dc:c6:4c:
                    52:f4:b2:a9:fd:54:39:36:02:ee:e4:91:35:24:93:
                    a9:64:11:be:a2:45:58:ea:cf:07:cb:45:8e:da:83:
                    ad:d0:39:20:c2:04:45:4b:84:09:bc:40:fc:2d:1f:
                    7c:01:5a:df:a5:1b:b5:19:9d:ab:92:a7:ac:0d:9a:
                    16:7b:3a:74:dd:b4:eb:41:12:4b:c5:4f:87:d0:66:
                    c8:ac:e6:79:c4:96:f8:7d:e0:50:cb:61:83:30:fd:
                    a9:8f:fd:ac:dd:61:1d:f3:a3:43:7d:f8:06:ec:bc:
                    e9:a4:51:9b:27:52:0d:bc:18:0c:fc:2f:a5:38:9e:
                    7e:f2:c2:d5:7b:dd:5b:d6:33:05:8b:5d:11:57:14:
                    55:d7:0a:9a:1d:0c:77:46:1f:3e:f0:33:ad:8e:ca:
                    78:14:b6:c2:af:70:42:a0:7f:28:73:80:d9:de:bb:
                    1b:65:70:23:25:f8:b2:8b:97:58:7d:7b:c6:b5:4c:
                    4d:7c:2a:49:de:d1:7d:6c:98:b4:eb:98:13:a2:48:
                    f0:a9:49:4a:f6:e9:fd:d3:df:0a:f4:2d:7b:20:8f:
                    95:4a:ef:63:bf:e6:cc:6d:14:73:5d:b0:b1:04:fc:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:0E:67:4B:35:4C:11:60:A2:1D:1F:F9:00:DD:A0:30:89:2D:D7
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/X00OZ0s1TBFgoh0f-QDdoDCJLdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.242.0/23
                  194.105.21.0/24
                  194.113.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ea:0c:30:64:cc:87:c9:8a:64:43:45:81:81:2f:2c:ad:15:
         63:be:d2:7d:a3:36:d4:cf:fe:82:e8:52:46:23:aa:df:99:68:
         b2:d0:26:4e:8a:ac:40:13:2d:1a:59:5c:c9:5c:5b:e3:42:7f:
         a1:91:d9:9d:30:44:64:e7:ef:77:6c:ff:ac:31:08:90:83:9d:
         a7:98:a5:cc:90:9d:3d:0e:23:f7:ba:82:79:5f:30:11:b5:ad:
         d5:5f:09:af:ea:53:5b:eb:7f:fa:4f:e3:f9:2d:6f:c7:88:35:
         d5:59:a2:9f:68:b2:52:2e:6d:b4:60:24:ec:20:0b:e3:3e:f7:
         65:ae:94:fd:61:d3:70:f8:a2:b1:e3:50:a2:32:72:01:7a:29:
         96:bb:a3:17:e8:14:f5:1c:8f:a4:33:3e:6a:26:93:24:a3:29:
         ac:5b:e1:d4:f7:13:dc:49:1f:fb:e7:d5:b9:ed:78:05:8d:d1:
         50:61:ca:0d:e7:50:f5:12:4e:cf:b4:c9:9b:a9:55:cd:5e:3c:
         f9:3f:dd:c4:c8:46:2f:aa:29:a5:1e:a4:f8:0a:b0:60:e3:93:
         51:d3:85:a3:e5:a5:3c:38:21:64:1c:69:85:6b:93:02:7d:3c:
         01:d7:40:63:d1:d4:ad:02:df:34:a0:0e:97:a3:50:9a:9f:82:
         43:eb:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org