Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/edgglX1iwFAKMAJOgpx6tw8TfFA.roa
File:                     edgglX1iwFAKMAJOgpx6tw8TfFA.roa (raw, json)
Hash identifier:          FiawSHvpQ+Kbh+/Dpoorknl9zSQRMFCKuTTL0B9e+NM=
Subject key identifier:   79:D8:20:95:7D:62:C0:50:0A:30:02:4E:82:9C:7A:B7:0F:13:7C:50
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       01825EF09D1B6DE2D13BF1EFE362B8F5898C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/edgglX1iwFAKMAJOgpx6tw8TfFA.roa
Signing time:             Tue 02 Aug 2022 14:23:23 +0000
ROA not before:           Tue 02 Aug 2022 14:23:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.176.54.0/24 maxlen: 24
                          193.176.55.0/24 maxlen: 24
                          91.199.168.0/24 maxlen: 24
                          141.98.156.0/23 maxlen: 24
                          141.98.158.0/23 maxlen: 24
                          147.78.122.0/23 maxlen: 24
                          147.78.120.0/23 maxlen: 24
                          45.158.10.0/23 maxlen: 24
                          45.158.8.0/23 maxlen: 24
                          45.153.4.0/23 maxlen: 23
                          195.206.230.0/24 maxlen: 24
                          195.206.231.0/24 maxlen: 24
                          176.105.226.0/23 maxlen: 24
                          176.105.224.0/23 maxlen: 24
                          195.206.234.0/24 maxlen: 24
                          45.153.6.0/23 maxlen: 24
                          195.206.235.0/24 maxlen: 24
                          45.142.236.0/23 maxlen: 24
                          45.142.238.0/23 maxlen: 24
                          193.111.116.0/24 maxlen: 24
                          193.111.117.0/24 maxlen: 24
                          45.158.170.0/23 maxlen: 24
                          45.158.168.0/23 maxlen: 24
                          195.20.98.0/24 maxlen: 24
                          194.104.156.0/24 maxlen: 24
                          194.104.158.0/24 maxlen: 24
                          195.20.105.0/24 maxlen: 24
                          195.20.99.0/24 maxlen: 24
                          194.105.21.0/24 maxlen: 24
                          152.89.248.0/23 maxlen: 24
                          152.89.250.0/23 maxlen: 24
                          193.29.96.0/23 maxlen: 24
                          193.29.98.0/23 maxlen: 24
                          194.5.146.0/23 maxlen: 24
                          193.142.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5e:f0:9d:1b:6d:e2:d1:3b:f1:ef:e3:62:b8:f5:89:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Aug  2 14:23:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79d820957d62c0500a30024e829c7ab70f137c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:87:41:b2:20:75:56:4f:40:39:24:9e:58:
                    0f:e7:19:31:d7:2f:26:93:68:2c:ef:78:1e:8b:7d:
                    04:a3:ae:78:87:63:ab:73:32:9b:db:95:f7:4a:7a:
                    6f:a3:bc:b0:93:76:f6:81:43:b8:cb:87:ce:24:99:
                    65:01:4d:5d:17:07:e9:62:d8:48:8d:ea:32:f7:08:
                    1e:83:f6:16:2a:49:9b:c7:98:a0:53:ff:dd:6d:0f:
                    5d:74:4a:58:96:da:25:66:29:2d:0f:53:84:ac:73:
                    45:ae:1a:3b:d0:a2:21:4f:5f:7b:9b:2c:ec:de:ac:
                    52:17:a0:86:6c:1f:f6:af:26:37:12:45:72:44:c0:
                    75:7f:43:48:b9:fe:75:ee:a7:ce:d8:f5:c3:48:7a:
                    b0:47:ce:81:80:c7:c3:a9:12:7b:ee:d7:bf:22:7f:
                    df:6e:3b:5d:2f:46:5e:29:ae:69:9e:a6:79:ae:ca:
                    0d:41:5c:b5:03:ce:b5:a1:a7:ee:b3:85:df:78:43:
                    15:ce:59:4c:c6:8b:d3:24:71:c9:a0:dc:9f:56:74:
                    2c:f2:1a:cf:94:45:ee:82:7e:8f:16:ac:92:6e:88:
                    f3:06:ea:b3:bc:dc:1f:eb:f7:14:be:1d:61:77:6b:
                    b9:db:d3:ef:87:98:7e:40:5a:ce:a1:d6:09:ee:07:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D8:20:95:7D:62:C0:50:0A:30:02:4E:82:9C:7A:B7:0F:13:7C:50
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/edgglX1iwFAKMAJOgpx6tw8TfFA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.236.0/22
                  45.153.4.0/22
                  45.158.8.0/22
                  45.158.168.0/22
                  91.199.168.0/24
                  141.98.156.0/22
                  147.78.120.0/22
                  152.89.248.0/22
                  176.105.224.0/22
                  193.29.96.0/22
                  193.111.116.0/23
                  193.142.22.0/24
                  193.176.54.0/23
                  194.5.146.0/23
                  194.104.156.0/24
                  194.104.158.0/24
                  194.105.21.0/24
                  195.20.98.0/23
                  195.20.105.0/24
                  195.206.230.0/23
                  195.206.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:6e:f0:98:84:4d:b1:d0:c7:a6:0b:e1:99:fd:46:2a:8a:cd:
         d2:93:88:af:c6:8f:e0:cd:38:9e:1e:ec:e9:92:99:b5:19:50:
         cb:b8:6b:38:35:3b:84:6b:11:94:53:b2:df:15:79:0d:45:29:
         82:9f:6b:ba:07:08:41:2a:38:d9:89:d6:b7:3f:0c:28:7e:1a:
         43:77:39:f5:29:2f:e2:89:f2:15:39:fe:71:8b:d5:43:fe:18:
         45:43:57:ca:88:04:04:0e:ee:24:c8:da:03:31:8d:98:16:14:
         fd:2e:28:a2:84:b7:69:2e:1f:2a:6a:30:4b:a6:cc:84:83:1f:
         08:56:df:67:79:56:23:a3:07:0b:64:11:98:df:fb:5e:b6:85:
         02:aa:37:c9:d4:ab:a4:dc:e9:35:1b:71:89:ec:b0:ce:a1:ab:
         70:b9:39:e3:5c:13:a3:d4:89:51:61:1a:00:bb:27:4e:e9:f9:
         4e:9b:3a:fa:65:c9:92:54:32:8e:f2:3b:32:54:5d:ac:77:ab:
         28:e7:a9:8e:ac:18:73:c2:0a:6a:a0:63:9a:8f:99:c6:07:09:
         75:f6:cf:c8:5e:ff:db:79:8a:ad:2d:de:8d:bb:4f:50:85:48:
         72:d2:c6:d0:8f:7b:26:2b:d7:ef:28:d1:e8:57:03:81:70:bf:
         9f:61:be:f5
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYJe8J0bbeLRO/Hv42K49YmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwODAyMTQyMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ4MjA5NTdkNjJjMDUwMGEzMDAyNGU4MjljN2FiNzBmMTM3YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmHQbIgdVZPQDkknlgP5xkx1y8m
k2gs73gei30Eo654h2OrczKb25X3Snpvo7ywk3b2gUO4y4fOJJllAU1dFwfpYthI
jeoy9wgeg/YWKkmbx5igU//dbQ9ddEpYltolZiktD1OErHNFrho70KIhT197myzs
3qxSF6CGbB/2ryY3EkVyRMB1f0NIuf517qfO2PXDSHqwR86BgMfDqRJ77te/In/f
bjtdL0ZeKa5pnqZ5rsoNQVy1A861oafus4XfeEMVzllMxovTJHHJoNyfVnQs8hrP
lEXugn6PFqySbojzBuqzvNwf6/cUvh1hd2u529Pvh5h+QFrOodYJ7ge/zwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFHnYIJV9YsBQCjACToKcercPE3xQMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvZWRnZ2xYMWl3RkFLTUFKT2dweDZ0dzhUZkZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAi2O
7AMEAi2ZBAMEAi2eCAMEAi2eqAMEAFvHqAMEAo1inAMEApNOeAMEAphZ+AMEArBp
4AMEAsEdYAMEAcFvdAMEAMGOFgMEAcGwNgMEAcIFkgMEAMJonAMEAMJongMEAMJp
FQMEAcMUYgMEAMMUaQMEAcPO5gMEAcPO6jANBgkqhkiG9w0BAQsFAAOCAQEAl27w
mIRNsdDHpgvhmf1GKorN0pOIr8aP4M04nh7s6ZKZtRlQy7hrODU7hGsRlFOy3xV5
DUUpgp9rugcIQSo42YnWtz8MKH4aQ3c59Skv4onyFTn+cYvVQ/4YRUNXyogEBA7u
JMjaAzGNmBYU/S4oooS3aS4fKmowS6bMhIMfCFbfZ3lWI6MHC2QRmN/7XraFAqo3
ydSrpNzpNRtxieywzqGrcLk541wTo9SJUWEaALsnTun5Tps6+mXJklQyjvI7MlRd
rHerKOepjqwYc8IKaqBjmo+ZxgcJdfbPyF7/23mKrS3ejbtPUIVIctLG0I97JivX
7yjR6FcDgXC/n2G+9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org