Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dkU--D4XSbiuHNPpVFBnnfq3Rs0.roa
File:                     dkU--D4XSbiuHNPpVFBnnfq3Rs0.roa (raw, json)
Hash identifier:          e7TpmnRoTumip8H+PFSYuTEEDGfqIHSjGdbnY1L1I9Q=
Subject key identifier:   76:45:3E:F8:3E:17:49:B8:AE:1C:D3:E9:54:50:67:9D:FA:B7:46:CD
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04BA912A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dkU--D4XSbiuHNPpVFBnnfq3Rs0.roa
Signing time:             Tue 31 May 2022 06:04:13 +0000
ROA not before:           Tue 31 May 2022 06:04:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212598
IP address blocks:        193.164.10.0/24 maxlen: 24
                          194.113.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79335722 (0x4ba912a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: May 31 06:04:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76453ef83e1749b8ae1cd3e95450679dfab746cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ec:b1:e7:d1:e1:26:85:9e:64:19:2a:e4:e5:
                    83:a4:80:cf:d0:23:8a:84:89:8b:d8:ce:18:04:49:
                    e5:ff:a9:56:ad:57:a1:02:cf:e3:80:54:35:c5:4a:
                    bc:cc:b3:b6:e3:24:01:aa:99:3b:cf:4e:43:fd:78:
                    2b:33:e8:41:b6:8e:7e:34:b4:19:55:e8:7d:96:f6:
                    28:d8:02:41:23:13:fa:22:55:7e:46:81:e5:05:c5:
                    7d:31:de:e6:b7:7d:9b:e2:25:f9:78:93:05:99:d8:
                    9f:23:97:9a:d8:58:c2:ee:19:49:da:44:31:ee:5d:
                    3c:bd:1a:ad:2e:ea:32:8a:34:a7:5f:08:10:65:fd:
                    26:bb:b9:89:17:7e:72:e4:bf:c5:d8:28:66:f9:39:
                    c5:ae:75:d2:2b:37:41:02:92:1e:3b:d4:bd:aa:91:
                    3d:e8:b7:49:b7:fa:2a:23:58:45:92:5e:84:fb:f3:
                    bd:78:ea:83:68:59:12:19:9f:20:61:c8:63:e9:c6:
                    19:a4:eb:81:7b:ed:2d:cc:e0:95:27:16:e1:2a:d5:
                    d5:0e:a9:d1:75:f1:c3:6a:eb:ed:75:63:87:1d:74:
                    5e:6a:dd:90:d2:25:b6:38:33:f4:31:51:10:e3:f8:
                    77:d6:b5:53:47:5f:38:b2:fa:c4:45:13:e6:a1:8a:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:3E:F8:3E:17:49:B8:AE:1C:D3:E9:54:50:67:9D:FA:B7:46:CD
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dkU--D4XSbiuHNPpVFBnnfq3Rs0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.164.10.0/24
                  194.113.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8d:1d:c6:30:db:51:ed:ad:fb:43:43:35:74:54:3e:95:68:
         be:31:78:16:f1:97:a7:0b:2f:6d:3a:ab:5a:c3:3a:b5:b7:9e:
         32:69:f3:49:a6:77:87:4f:13:e6:f2:aa:44:ec:05:5f:56:5e:
         a1:f1:c8:a3:72:0d:cb:96:96:80:22:39:49:a2:8d:20:3e:ad:
         18:2e:63:f6:d3:8f:98:b8:4b:85:c6:00:6d:0f:fd:cb:e0:00:
         f6:24:96:5e:7c:a0:fa:c0:4e:72:de:cd:27:57:39:30:de:b2:
         c9:bf:22:31:47:67:c8:45:78:6d:1d:7b:7a:db:53:57:f5:15:
         5e:14:53:27:4c:5e:79:57:03:1c:2f:b3:46:c8:a7:b2:be:2a:
         8e:f0:37:de:e2:a4:35:87:1c:f2:cb:e6:ea:0d:69:ca:c5:77:
         0e:69:ca:e9:55:b1:6b:90:ae:3c:e2:59:2c:d6:bd:12:d6:84:
         52:7b:56:55:14:dc:be:fe:17:c5:31:09:cb:ef:17:f7:28:9d:
         fc:76:db:1d:76:9a:28:27:37:87:fb:de:32:d8:98:3b:ee:7d:
         04:a8:f5:f6:6c:4b:1a:c8:ab:46:61:28:11:d5:8b:4a:fa:c4:
         24:ff:b5:48:b9:20:ec:ce:2f:ec:80:5e:f7:04:9b:41:75:d8:
         0b:14:f3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org