Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/mTYbpFgaYDwA70GlAQE-KadqhxI.roa
File:                     mTYbpFgaYDwA70GlAQE-KadqhxI.roa (raw, json)
Hash identifier:          wxteFoY/pQmAq0Qb3K5oVIjdOjmfxaKRwaL5EPwuGJM=
Subject key identifier:   99:36:1B:A4:58:1A:60:3C:00:EF:41:A5:01:01:3E:29:A7:6A:87:12
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       04EB86E5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/mTYbpFgaYDwA70GlAQE-KadqhxI.roa
Signing time:             Fri 17 Jun 2022 07:28:44 +0000
ROA not before:           Fri 17 Jun 2022 07:28:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210574
IP address blocks:        193.111.125.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82544357 (0x4eb86e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Jun 17 07:28:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=99361ba4581a603c00ef41a501013e29a76a8712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:e1:51:87:ca:a8:64:60:d3:63:56:26:ca:
                    6e:6c:46:2b:66:3e:b8:33:60:51:1f:9d:39:f4:25:
                    8a:e6:a4:d1:f8:54:74:9f:c8:05:e2:79:04:47:9f:
                    63:65:ae:f8:e9:f1:aa:b0:33:cb:be:20:90:a4:f6:
                    e5:a0:5b:62:37:22:b0:75:46:4d:ec:20:ce:fe:85:
                    f3:d1:ee:80:ed:3f:b2:c5:80:d6:b8:a5:9a:c6:73:
                    a1:cf:c3:31:34:71:a9:1e:5f:75:5b:92:f9:0a:21:
                    13:50:c4:7c:39:83:c0:da:cd:60:cc:24:e2:33:28:
                    4c:8e:78:2f:ff:1f:1c:f4:58:f3:27:65:b7:59:f9:
                    ca:8a:30:8c:2f:a0:3b:0a:c2:e5:c2:2d:d1:c1:76:
                    52:02:0f:1f:3a:56:80:7c:4e:b2:eb:e6:a2:f1:45:
                    a2:1c:79:59:83:c2:d4:02:73:79:33:cd:98:48:cb:
                    65:e8:38:24:de:ff:ca:5d:a9:74:cd:5e:37:44:da:
                    63:4b:2a:ed:97:28:d3:56:e9:93:e0:63:62:55:c9:
                    44:5a:0f:9a:3a:81:da:d7:bb:34:c9:40:90:45:e3:
                    ed:9d:05:17:28:9b:10:3b:17:38:51:53:1a:d2:d4:
                    af:b3:34:95:5d:34:57:81:17:35:bc:a7:66:76:87:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:36:1B:A4:58:1A:60:3C:00:EF:41:A5:01:01:3E:29:A7:6A:87:12
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/mTYbpFgaYDwA70GlAQE-KadqhxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c3:e0:e0:00:5d:7a:24:22:8d:a8:21:45:39:f6:52:60:8e:
         05:aa:49:43:f9:ec:45:53:bd:bb:04:bb:bd:80:eb:d3:d1:f3:
         8b:04:31:ab:86:11:b1:93:92:14:0d:a9:1d:a7:bf:fd:02:28:
         9e:23:08:d7:0b:69:05:74:3b:c3:ab:a9:f5:a2:ad:47:96:f5:
         43:3b:63:ae:24:23:5a:35:66:57:e9:94:fa:00:78:ce:17:3a:
         18:63:81:17:5d:66:3e:56:96:b3:07:ba:c4:65:8e:21:fa:0b:
         9d:8a:52:be:99:86:6b:93:4a:8a:7b:6f:47:c4:1d:13:c1:0d:
         83:bc:7d:fa:88:61:33:a4:96:45:36:3a:51:a6:60:61:9b:99:
         57:7c:51:16:11:b4:d0:0f:f5:f0:11:ae:03:eb:a9:c7:15:9c:
         81:d7:28:ee:fe:3a:0a:01:98:39:8e:d7:c8:af:fc:04:43:2b:
         eb:31:67:98:e1:0e:f3:26:b0:5f:3f:b0:3e:9c:69:6c:aa:e9:
         a0:05:88:2a:bf:8a:9e:78:81:e6:c2:1e:44:d8:93:af:19:96:
         83:59:76:60:57:92:7e:39:b7:f5:b6:5c:93:b5:04:05:94:23:
         8d:cc:20:7c:39:51:30:03:12:e4:6a:bc:45:dc:af:be:d9:47:
         b8:b5:59:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org