Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iH6L7CNMBv1Hh1o8hoh22xlHVWc.roa
File:                     iH6L7CNMBv1Hh1o8hoh22xlHVWc.roa (raw, json)
Hash identifier:          YDCo3YIuZ1yu60fQG4ivd6TKg4PRpUz1T4OF49WlxXI=
Subject key identifier:   88:7E:8B:EC:23:4C:06:FD:47:87:5A:3C:86:88:76:DB:19:47:55:67
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       031762BF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iH6L7CNMBv1Hh1o8hoh22xlHVWc.roa
Signing time:             Sat 01 Jan 2022 07:53:57 +0000
ROA not before:           Sat 01 Jan 2022 07:53:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139989
IP address blocks:        193.111.124.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51864255 (0x31762bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jan  1 07:53:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=887e8bec234c06fd47875a3c868876db19475567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:85:bd:49:dc:f1:dd:65:20:62:01:e0:b7:
                    83:b0:78:c9:79:8b:53:56:29:39:70:46:83:21:bd:
                    50:29:69:f1:47:04:dc:f4:05:32:3f:ed:27:20:4b:
                    2d:a8:dc:f6:a6:9d:7a:11:03:86:43:04:56:c7:42:
                    86:2e:c4:77:e4:e0:88:35:21:d0:60:26:07:14:ba:
                    c1:fe:84:71:97:a0:87:f8:6b:af:69:84:d2:52:d2:
                    87:0e:80:d1:fc:89:e8:a6:37:22:78:fe:6b:84:a8:
                    81:2d:9e:0c:8f:a9:1d:3f:46:11:b3:3a:24:85:02:
                    b0:ce:cb:50:5c:e1:a1:e2:2f:12:31:0d:9f:a9:ac:
                    ea:cf:18:d1:3f:93:6a:aa:a5:b8:e7:b3:6d:66:58:
                    5e:70:6c:d3:51:0c:68:c1:c9:9a:5d:65:84:b5:fe:
                    4a:46:28:a4:4a:a6:f6:e7:fd:9a:21:b5:88:c0:e1:
                    99:d1:50:da:25:0e:02:1c:f5:fc:df:18:67:02:41:
                    1d:6a:3f:de:fb:15:07:ad:10:8b:ce:b5:fe:e3:51:
                    a1:8e:a5:48:46:42:8d:12:52:c2:b8:df:0a:2e:4f:
                    fd:60:d1:68:05:d7:0d:11:db:37:96:29:2e:26:1b:
                    9c:9b:2b:97:1b:ef:f2:f8:7c:59:cf:ce:a3:21:e5:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7E:8B:EC:23:4C:06:FD:47:87:5A:3C:86:88:76:DB:19:47:55:67
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iH6L7CNMBv1Hh1o8hoh22xlHVWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:7b:29:d7:de:5f:73:92:66:95:b9:df:cb:af:e7:24:9a:40:
         fd:81:2d:db:0d:56:e2:79:b5:cb:aa:94:b1:b7:cd:49:aa:c3:
         cc:b2:34:4c:ff:f4:66:4a:b0:87:85:d0:67:c9:07:c3:d5:b9:
         44:22:f3:88:12:f6:b2:87:38:a4:e8:56:ef:ba:eb:69:9c:c2:
         14:c7:22:a9:6e:bb:b6:84:37:4e:8e:9b:c6:fc:98:d6:c5:23:
         f1:4a:5c:88:34:bb:e0:2e:81:5e:f3:10:08:86:ef:1b:2e:b6:
         a3:c1:c6:ef:6f:a3:10:f8:f3:45:00:ea:67:24:c8:da:e0:b5:
         05:1f:f7:14:40:28:95:39:b8:e8:36:cc:b6:d8:50:54:02:0e:
         7a:88:c0:3c:0a:1a:f3:a3:e5:79:9a:b1:ef:fc:90:94:15:39:
         88:41:3c:a2:d5:50:ed:78:41:2b:cb:a7:d2:9c:15:c1:23:fe:
         e3:d9:cc:98:fe:05:99:77:c7:b8:2f:91:1c:dd:53:55:3f:40:
         b4:c1:b9:f2:d6:ec:4f:03:20:a1:ac:10:e5:6b:d4:cc:03:b5:
         c4:e0:5a:f1:50:2b:03:af:ac:6d:44:73:78:f8:42:be:b2:b4:
         71:36:4f:70:db:d9:e5:55:4c:da:35:d0:b5:98:65:cf:48:b5:
         69:77:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org