Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa
File:                     iXRbYtEdayUGgfednpdbuUAmtTE.roa (raw, json)
Hash identifier:          BA8BRTiRvXcxfOsWPEuTsk8Vb3jpRrMVlDgqyjSxqRw=
Subject key identifier:   89:74:5B:62:D1:1D:6B:25:06:81:F7:9D:9E:97:5B:B9:40:26:B5:31
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04770549
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa
Signing time:             Sat 07 May 2022 06:08:45 +0000
ROA not before:           Sat 07 May 2022 06:08:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211975
IP address blocks:        91.199.163.0/24 maxlen: 24
                          45.152.240.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74909001 (0x4770549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: May  7 06:08:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89745b62d11d6b250681f79d9e975bb94026b531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:47:64:cc:3b:51:13:fc:fc:d9:4d:51:17:
                    63:7b:86:bd:5e:c8:c4:e0:41:a3:86:62:b1:91:de:
                    4b:b9:1f:c9:72:e9:05:3b:c1:80:f1:da:25:4a:c3:
                    84:93:07:eb:f9:d0:11:08:c9:44:57:f4:95:82:8b:
                    f5:b3:4c:0c:30:c6:49:0c:1c:4e:32:e4:aa:6c:7c:
                    9d:42:19:51:17:09:b6:07:59:4d:6a:a8:40:d9:76:
                    35:97:8b:25:a3:60:03:b6:f0:e9:16:51:cf:06:3c:
                    42:d5:4f:a5:83:b0:b5:6d:9c:73:4e:5e:9e:29:b7:
                    25:9d:f4:86:8f:5c:3b:b9:e2:fc:d4:49:80:72:8b:
                    6d:c7:bc:c8:2c:ae:5f:19:ed:a4:20:e8:db:3e:1e:
                    a4:c7:11:d0:8c:0f:4b:d3:da:00:9a:78:dc:4b:78:
                    b8:43:0d:45:42:89:5a:4b:eb:14:36:b0:87:8b:fb:
                    b5:61:91:19:b4:4f:84:84:3c:e4:71:aa:ff:2a:e5:
                    e1:2b:ea:49:a7:0c:b4:92:9f:6a:8c:e8:ed:c8:26:
                    5b:24:4b:7e:49:cb:45:e5:dc:de:cd:1c:e9:1f:c5:
                    94:cb:93:8a:ad:3c:b1:12:2e:1f:7b:46:db:78:79:
                    43:dc:a2:53:fd:cd:55:0b:dd:8d:c9:09:3e:56:03:
                    cd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:74:5B:62:D1:1D:6B:25:06:81:F7:9D:9E:97:5B:B9:40:26:B5:31
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.240.0/23
                  91.199.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:4c:7e:e4:b3:d8:e8:6e:4e:9e:1f:99:6b:8c:0f:f1:ae:93:
         ff:63:bf:9d:f3:25:75:f4:b4:83:96:4d:78:8a:27:1c:b7:8e:
         c9:ed:33:6b:62:b0:56:d1:28:d3:a5:64:1d:89:08:be:49:52:
         d1:93:46:7c:d2:89:b1:db:26:40:f3:21:62:75:7c:f4:e7:0a:
         08:a5:2b:ba:66:7c:c8:03:d7:4b:9f:3e:9e:0f:14:69:16:7f:
         f9:ad:32:b3:ab:47:ee:ea:a3:19:9d:b3:f6:9e:d6:de:5e:b3:
         c3:78:5b:43:42:99:99:88:9d:8a:b3:b8:22:dd:c4:c0:7a:14:
         22:25:1a:19:11:ae:ce:f2:fa:17:73:d9:9f:98:2d:b0:2b:c6:
         92:84:a5:9d:3f:69:56:26:f3:b9:5b:c4:d3:77:30:aa:04:3a:
         6f:7e:5c:fa:75:bb:c6:c0:c0:42:01:56:af:3e:c4:3b:a4:07:
         10:76:a8:b6:a9:3b:d8:7e:b3:07:98:4f:ea:1a:9c:4a:4d:62:
         f2:b1:81:a0:05:24:57:fe:16:2f:c9:25:a5:22:08:6c:a7:9a:
         8d:1e:8f:b2:de:b4:60:04:c2:d0:4e:c5:f2:2b:d2:94:ae:4b:
         9c:72:77:7a:98:53:d1:c1:0a:dc:ad:d0:e2:7f:8d:7b:92:e1:
         7f:65:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org