Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cVwqz5zOwx9AvCspl-M3O_w2z4A.roa
File:                     cVwqz5zOwx9AvCspl-M3O_w2z4A.roa (raw, json)
Hash identifier:          YE+wqgWh4PSw4E0zPmaawT1IL8AR0mpe4Ukqe6LT0L0=
Subject key identifier:   71:5C:2A:CF:9C:CE:C3:1F:40:BC:2B:29:97:E3:37:3B:FC:36:CF:80
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0184ECA3AE0AA195447C19028751CD13E1EC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cVwqz5zOwx9AvCspl-M3O_w2z4A.roa
Signing time:             Wed 07 Dec 2022 12:51:00 +0000
ROA not before:           Wed 07 Dec 2022 12:51:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.176.54.0/24 maxlen: 24
                          193.176.55.0/24 maxlen: 24
                          45.154.104.0/23 maxlen: 24
                          91.199.168.0/24 maxlen: 24
                          141.98.156.0/23 maxlen: 24
                          147.78.122.0/23 maxlen: 24
                          147.78.120.0/23 maxlen: 24
                          45.149.186.0/23 maxlen: 24
                          45.158.8.0/23 maxlen: 24
                          195.206.230.0/24 maxlen: 24
                          195.206.231.0/24 maxlen: 24
                          176.105.224.0/23 maxlen: 24
                          195.206.234.0/24 maxlen: 24
                          195.206.235.0/24 maxlen: 24
                          45.153.6.0/23 maxlen: 24
                          45.142.236.0/23 maxlen: 24
                          45.142.238.0/23 maxlen: 24
                          193.111.117.0/24 maxlen: 24
                          45.158.170.0/23 maxlen: 24
                          45.158.168.0/23 maxlen: 24
                          193.151.182.0/23 maxlen: 24
                          193.151.180.0/23 maxlen: 24
                          195.20.98.0/24 maxlen: 24
                          194.104.156.0/24 maxlen: 24
                          194.104.158.0/24 maxlen: 24
                          195.20.105.0/24 maxlen: 24
                          195.20.99.0/24 maxlen: 24
                          194.105.21.0/24 maxlen: 24
                          152.89.250.0/23 maxlen: 24
                          193.29.96.0/23 maxlen: 24
                          193.29.98.0/23 maxlen: 24
                          194.147.4.0/23 maxlen: 24
                          194.147.6.0/23 maxlen: 24
                          194.5.146.0/23 maxlen: 24
                          193.142.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ec:a3:ae:0a:a1:95:44:7c:19:02:87:51:cd:13:e1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Dec  7 12:51:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=715c2acf9ccec31f40bc2b2997e3373bfc36cf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:32:04:5c:a3:db:96:13:e2:2b:c7:d5:bb:
                    de:8e:fe:d4:ce:bb:6a:0b:b9:a7:22:83:a5:8b:11:
                    8b:97:fc:f4:78:0d:dd:a9:ee:69:0b:ea:de:26:cb:
                    a7:cb:01:12:4e:36:10:60:14:5d:0a:fe:20:78:97:
                    bd:8e:84:62:cb:03:0d:47:28:8c:bc:a8:45:4e:0a:
                    c6:be:b5:3c:ea:a7:c1:7a:e6:8f:45:f5:92:d9:cf:
                    05:d9:44:0d:2f:ec:29:eb:25:74:ab:55:43:fa:a4:
                    30:0b:bf:a5:53:f9:b8:89:b9:bb:b0:90:18:8b:68:
                    f2:be:74:01:f2:a6:f1:6d:49:09:64:15:a8:eb:92:
                    cc:02:13:17:24:85:19:94:ec:d9:87:f0:59:98:48:
                    a1:1c:99:ab:96:f9:ec:83:6a:06:79:28:5b:b7:73:
                    62:25:b5:b6:21:77:aa:1c:fa:9b:e4:93:5a:53:57:
                    e7:97:32:0b:78:70:6d:0d:93:b6:31:af:6d:bf:b3:
                    06:be:22:2a:aa:fd:c8:12:f4:15:34:25:f5:43:32:
                    27:f3:2d:2f:80:8b:f1:ba:e4:b4:37:5e:e2:ff:e1:
                    8c:ab:44:ea:df:1d:d6:f0:24:7d:18:ef:77:23:c6:
                    dd:4e:49:8d:4d:ff:52:06:3a:62:67:b1:34:fc:f9:
                    6d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:2A:CF:9C:CE:C3:1F:40:BC:2B:29:97:E3:37:3B:FC:36:CF:80
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/cVwqz5zOwx9AvCspl-M3O_w2z4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.236.0/22
                  45.149.186.0/23
                  45.153.6.0/23
                  45.154.104.0/23
                  45.158.8.0/23
                  45.158.168.0/22
                  91.199.168.0/24
                  141.98.156.0/23
                  147.78.120.0/22
                  152.89.250.0/23
                  176.105.224.0/23
                  193.29.96.0/22
                  193.111.117.0/24
                  193.142.22.0/24
                  193.151.180.0/22
                  193.176.54.0/23
                  194.5.146.0/23
                  194.104.156.0/24
                  194.104.158.0/24
                  194.105.21.0/24
                  194.147.4.0/22
                  195.20.98.0/23
                  195.20.105.0/24
                  195.206.230.0/23
                  195.206.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:48:57:03:cd:f4:5f:1b:a0:a1:f0:fc:c7:46:1c:d3:ac:
         cd:d8:cc:43:bb:9c:cd:51:49:55:f5:bf:3c:b6:69:97:f6:55:
         f3:a8:96:51:62:17:2a:79:79:10:f7:76:71:22:ed:77:3d:e2:
         59:85:7d:dd:7b:2a:86:5c:08:02:c5:43:6c:35:17:39:c9:54:
         38:73:f4:70:65:96:2c:3b:5d:b3:e4:9e:99:e8:ea:00:3e:b3:
         83:c0:42:40:76:65:f3:6b:21:64:85:b5:75:4a:26:fc:fb:61:
         26:db:24:e5:ec:bd:d8:43:26:8f:e3:29:42:45:d6:dc:40:ec:
         d8:e8:ad:74:2a:d1:b1:0a:ea:f7:88:7b:1f:c8:65:0c:67:e6:
         1a:a5:1a:9b:67:f0:c0:bc:b8:de:09:44:a4:90:4b:83:11:4a:
         58:30:27:7e:a5:e9:25:1b:f2:e4:4f:6c:d7:5e:d8:02:91:6f:
         b6:e6:be:8c:c1:dd:8b:09:60:13:eb:43:65:be:8e:e0:bb:99:
         d6:d0:12:dc:96:93:a6:05:1e:54:50:1e:6b:62:3b:c3:dc:15:
         90:55:45:23:a1:dd:2d:28:cc:99:b4:41:e3:55:35:09:7a:e3:
         73:3c:bf:65:a2:92:ee:2e:07:13:a4:ef:5f:22:c9:bf:51:6a:
         67:c2:d0:eb
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYTso64KoZVEfBkCh1HNE+HsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMjA3MTI1MTAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTVjMmFjZjljY2VjMzFmNDBiYzJiMjk5N2UzMzczYmZjMzZjZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibUyBFyj25YT4ivH1bvejv7Uzrtq
C7mnIoOlixGLl/z0eA3dqe5pC+reJsunywESTjYQYBRdCv4geJe9joRiywMNRyiM
vKhFTgrGvrU86qfBeuaPRfWS2c8F2UQNL+wp6yV0q1VD+qQwC7+lU/m4ibm7sJAY
i2jyvnQB8qbxbUkJZBWo65LMAhMXJIUZlOzZh/BZmEihHJmrlvnsg2oGeShbt3Ni
JbW2IXeqHPqb5JNaU1fnlzILeHBtDZO2Ma9tv7MGviIqqv3IEvQVNCX1QzIn8y0v
gIvxuuS0N17i/+GMq0Tq3x3W8CR9GO93I8bdTkmNTf9SBjpiZ7E0/PltNwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFHFcKs+czsMfQLwrKZfjNzv8Ns+AMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvY1Z3cXo1ek93eDlBdkNzcGwtTTNPX3cyejRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAIt
juwDBAEtlboDBAEtmQYDBAEtmmgDBAEtnggDBAItnqgDBABbx6gDBAGNYpwDBAKT
TngDBAGYWfoDBAGwaeADBALBHWADBADBb3UDBADBjhYDBALBl7QDBAHBsDYDBAHC
BZIDBADCaJwDBADCaJ4DBADCaRUDBALCkwQDBAHDFGIDBADDFGkDBAHDzuYDBAHD
zuowDQYJKoZIhvcNAQELBQADggEBAHy+SFcDzfRfG6Ch8PzHRhzTrM3YzEO7nM1R
SVX1vzy2aZf2VfOollFiFyp5eRD3dnEi7Xc94lmFfd17KoZcCALFQ2w1FznJVDhz
9HBlliw7XbPknpno6gA+s4PAQkB2ZfNrIWSFtXVKJvz7YSbbJOXsvdhDJo/jKUJF
1txA7NjorXQq0bEK6veIex/IZQxn5hqlGptn8MC8uN4JRKSQS4MRSlgwJ36l6SUb
8uRPbNde2AKRb7bmvozB3YsJYBPrQ2W+juC7mdbQEtyWk6YFHlRQHmtiO8PcFZBV
RSOh3S0ozJm0QeNVNQl643M8v2Wiku4uBxOk718iyb9RamfC0Os=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org