Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZoOLUhXoZmtXHhnX37rE9ekFMgk.roa
File:                     ZoOLUhXoZmtXHhnX37rE9ekFMgk.roa (raw, json)
Hash identifier:          jRWRvE73JqDPDFi7PP8zvE/YJ2ZB05hPPMO1kHbL00I=
Subject key identifier:   66:83:8B:52:15:E8:66:6B:57:1E:19:D7:DF:BA:C4:F5:E9:05:32:09
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0436FF8A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZoOLUhXoZmtXHhnX37rE9ekFMgk.roa
Signing time:             Fri 15 Apr 2022 08:42:55 +0000
ROA not before:           Fri 15 Apr 2022 08:42:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210632
IP address blocks:        192.166.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70713226 (0x436ff8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Apr 15 08:42:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66838b5215e8666b571e19d7dfbac4f5e9053209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:61:2c:87:63:d2:71:10:94:1b:a6:4e:65:
                    bd:3e:b1:ab:11:4d:ae:0d:db:96:55:cf:11:8e:1b:
                    26:7f:c8:c8:c1:f6:5e:58:ac:04:41:8a:19:f7:6e:
                    3a:d1:a1:5a:76:b0:4e:e6:82:d8:6a:31:f1:f3:ba:
                    d9:a6:a4:44:bc:7c:9d:c2:b0:6f:f7:72:8f:99:3f:
                    37:0d:31:d9:29:db:5f:a6:89:10:46:e9:f0:89:d4:
                    8f:57:4e:c6:fc:3d:d5:c1:b6:ae:48:11:49:ea:dc:
                    a8:05:40:7d:33:30:86:74:a0:d0:7a:f6:11:9b:cd:
                    9e:05:f4:f1:db:6c:56:24:d0:81:35:22:c1:5a:2c:
                    6d:98:78:7b:d0:c7:db:79:3e:3b:2c:00:04:7f:02:
                    e3:cd:06:f3:dd:85:e5:8b:24:c7:00:9e:f3:e4:01:
                    12:88:c5:43:91:9f:86:bf:20:93:0e:6e:dc:1c:7b:
                    7f:31:d9:a8:a0:96:97:d2:7d:33:08:0c:e0:37:79:
                    21:15:4f:ab:09:11:a8:19:1f:25:31:8d:94:43:54:
                    c3:97:0b:6b:7c:f5:34:40:5d:a3:76:58:43:a8:5e:
                    13:ef:12:e2:ee:09:50:71:d8:42:ea:f9:34:f9:11:
                    db:7a:43:bd:54:fe:d5:98:97:50:fc:2c:0c:bd:df:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:83:8B:52:15:E8:66:6B:57:1E:19:D7:DF:BA:C4:F5:E9:05:32:09
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZoOLUhXoZmtXHhnX37rE9ekFMgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.166.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:f3:05:3a:b1:a4:d2:06:6f:24:e9:41:a3:f3:b1:37:68:ac:
         91:a3:91:0b:e0:36:ef:3c:df:0e:81:25:86:d3:a0:72:35:16:
         65:d1:ca:8c:6c:44:f8:f7:e4:cb:07:cd:66:73:b5:5b:c1:9a:
         fe:8b:0e:a0:ed:a4:ea:d0:77:7b:2d:28:aa:7d:11:51:02:1f:
         55:cf:38:0b:71:c5:45:8d:cf:17:ef:b7:34:f8:8f:11:37:55:
         4f:4c:4d:f1:66:b0:63:1f:6d:0a:70:b5:f5:f1:ea:8e:d0:12:
         8d:08:74:f7:34:9e:a5:fa:f4:a9:4a:d2:df:f4:b0:51:ef:2f:
         e7:b0:14:4b:17:85:76:6c:1b:8e:4b:a6:dc:8a:57:82:4d:6a:
         c6:8f:dc:c9:a1:cd:33:57:54:ab:eb:f2:35:40:d1:78:c7:8f:
         fa:11:ad:9f:d4:41:a1:e9:52:e1:47:db:70:de:11:7e:11:14:
         f5:a2:9a:55:53:92:d4:44:b5:c3:5f:d2:18:8f:5a:75:eb:76:
         fc:8b:55:63:ca:fc:b3:f7:ce:4e:0d:42:4f:34:b3:62:0a:04:
         ed:0a:73:43:7c:a9:d0:6e:b2:a4:89:3d:dd:a5:c4:07:b3:11:
         74:48:db:4a:c7:2b:03:20:40:2a:37:55:8d:99:7b:b7:05:f2:
         b9:79:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org