Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa
File:                     dlxx-zeLTbzbzn54-ajvULXtYOI.roa (raw, json)
Hash identifier:          LqrGiNOimgH0FduK6tKJZSZmvOv/ZfPSnFceBYOZ69k=
Subject key identifier:   76:5C:71:FB:37:8B:4D:BC:DB:CE:7E:78:F9:A8:EF:50:B5:ED:60:E2
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       0183209B7997CAC820B9590DCE43F8F61850
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa
Signing time:             Fri 09 Sep 2022 04:56:43 +0000
ROA not before:           Fri 09 Sep 2022 04:56:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211459
IP address blocks:        193.111.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:20:9b:79:97:ca:c8:20:b9:59:0d:ce:43:f8:f6:18:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Sep  9 04:56:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=765c71fb378b4dbcdbce7e78f9a8ef50b5ed60e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:61:2f:b2:9e:17:38:b0:32:34:02:f9:06:
                    b1:c1:99:71:e1:6b:86:58:41:3a:30:bf:34:42:aa:
                    b4:3c:f3:fd:35:48:f7:c7:2f:4a:f2:8c:be:bf:78:
                    bb:87:1d:66:a5:31:01:11:78:36:83:a3:29:b6:3d:
                    9d:8c:ef:bf:f7:5d:b0:c6:99:32:db:b3:6c:2e:90:
                    df:54:d9:fc:2c:ac:7b:70:30:a1:33:9e:3c:ad:64:
                    14:ff:5b:67:87:a8:92:13:6b:62:5f:50:bd:53:35:
                    29:cc:88:d9:76:0c:5a:4d:b3:29:67:d5:10:4e:b2:
                    09:fe:5a:b2:c8:6b:fd:38:68:a9:c3:7a:bc:b6:4e:
                    15:99:a5:38:db:2f:10:43:10:07:93:15:66:b7:4c:
                    90:15:88:35:95:82:e9:94:2b:f9:85:75:d9:c1:29:
                    53:2a:b2:5d:da:62:68:b2:7f:59:a7:43:ea:03:76:
                    e0:28:56:c7:f1:03:c7:2a:17:aa:1a:0e:79:e7:ea:
                    7a:9b:47:80:54:1d:36:39:b6:ff:6f:d1:d2:42:c2:
                    36:2d:e7:ba:20:75:56:84:cc:71:31:4c:1d:3f:6f:
                    0f:0b:0b:8a:92:07:37:63:11:ea:7f:eb:c8:49:23:
                    ee:41:ba:30:36:d3:4a:5a:83:d1:15:97:8d:d7:70:
                    33:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:71:FB:37:8B:4D:BC:DB:CE:7E:78:F9:A8:EF:50:B5:ED:60:E2
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dlxx-zeLTbzbzn54-ajvULXtYOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2b:c9:73:5b:fa:98:71:ea:51:64:95:95:90:3a:6b:06:18:
         44:40:a6:1c:1d:9e:8c:f7:bc:79:b3:aa:ac:a1:64:4c:16:cd:
         b1:d9:81:ca:8e:c2:b0:c2:1c:f0:32:4e:93:ed:68:1a:f3:a8:
         14:20:50:4a:f6:51:f5:49:8f:74:27:30:fb:39:c3:a1:26:20:
         50:31:64:11:ae:19:61:fe:7c:0d:e1:fe:40:3c:62:d1:6a:35:
         e2:a4:24:ec:f4:8c:ce:16:63:bd:ad:ab:3a:a6:b5:76:77:89:
         37:95:9a:fa:b2:27:dd:c3:38:ca:89:bf:ab:95:a3:1e:d6:a4:
         ad:99:46:0d:7b:ed:fb:af:7c:29:a1:11:86:b7:0c:93:45:09:
         08:c6:37:59:90:f1:a2:38:ac:e0:ab:53:93:1f:be:29:67:43:
         11:77:4e:27:8a:d8:29:02:10:05:0c:38:60:98:da:6f:2a:0e:
         c4:77:6b:92:3d:92:49:31:9a:90:f0:30:f3:5c:37:c2:be:78:
         3b:2b:b9:02:7a:72:6a:40:db:6c:28:64:b7:22:38:ac:bb:0c:
         f1:b9:ec:cc:de:fb:84:ca:a0:74:2d:2d:74:0e:0d:b4:7d:be:
         71:c5:50:d9:ef:84:ab:f7:da:0e:8f:a1:3c:1d:12:9b:17:1c:
         26:f9:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org