Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/q9_eQKPyJSom96V45xgB1MJNxNw.roa
File:                     q9_eQKPyJSom96V45xgB1MJNxNw.roa (raw, json)
Hash identifier:          Sv6QP+cho2tYdMx6iPZQRvtAwytjp/G9Z1SUt0zaVw8=
Subject key identifier:   AB:DF:DE:40:A3:F2:25:2A:26:F7:A5:78:E7:18:01:D4:C2:4D:C4:DC
Certificate issuer:       /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial:       03E9B6BC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/q9_eQKPyJSom96V45xgB1MJNxNw.roa
Signing time:             Tue 15 Mar 2022 09:33:50 +0000
ROA not before:           Tue 15 Mar 2022 09:33:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        194.113.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65648316 (0x3e9b6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
        Validity
            Not Before: Mar 15 09:33:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abdfde40a3f2252a26f7a578e71801d4c24dc4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:5f:8c:a7:fb:0e:44:3d:8a:f2:f7:20:4a:
                    5f:1d:a9:2b:d8:85:d8:1c:c7:22:bc:23:58:9c:9b:
                    dd:1c:ff:a9:ca:8d:3d:61:e2:12:b4:eb:d1:87:d1:
                    cf:0f:75:c6:4d:e2:2b:0a:66:53:e8:88:bf:a1:1c:
                    43:cf:58:1f:ca:2f:7a:4f:7b:68:11:59:0f:d2:e7:
                    ac:1d:ae:40:8f:b3:f8:a3:d3:a4:bc:93:b5:86:95:
                    34:83:b4:3f:d1:cb:83:50:f7:2e:db:1f:0b:9f:46:
                    1f:91:6f:58:6d:1c:57:0f:63:eb:71:4f:d1:60:d0:
                    ab:13:e3:89:0f:0d:de:df:f5:70:39:ae:e2:29:4b:
                    2d:19:fd:a6:39:bd:17:55:09:47:6a:6b:b2:18:f4:
                    94:10:10:37:52:68:20:2f:5f:cc:29:04:00:8a:e2:
                    0f:10:8a:d3:a9:ae:86:e2:ff:fa:cd:2e:b5:78:78:
                    36:f3:03:42:db:86:f9:ff:73:d7:ee:eb:5c:94:23:
                    12:30:f9:54:d1:87:bd:db:37:82:52:ce:d9:03:69:
                    e7:dd:cc:18:c8:d7:af:3b:cd:d1:f1:fa:30:3c:09:
                    e6:bc:2a:37:35:59:e2:3c:ae:21:cd:3b:8d:78:48:
                    22:32:28:fd:6a:fd:1e:07:76:a2:e4:65:5f:b4:11:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:DE:40:A3:F2:25:2A:26:F7:A5:78:E7:18:01:D4:C2:4D:C4:DC
            X509v3 Authority Key Identifier:
                keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/q9_eQKPyJSom96V45xgB1MJNxNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:5e:b6:20:d3:a6:79:29:25:b1:d5:8c:26:15:9d:6f:cd:
         80:cf:e6:ea:90:3b:ec:32:8b:bc:28:f0:41:66:ce:ec:47:01:
         13:8e:85:20:f6:95:13:df:0f:0f:b8:5b:96:ea:4a:e8:3c:eb:
         95:ba:9e:bb:96:4e:43:5b:11:8e:40:d4:1f:ac:1b:3a:14:a1:
         29:06:d2:ca:c5:86:d4:9a:63:df:48:99:c2:30:14:56:ff:b2:
         48:92:e5:10:f0:9b:35:bd:c4:b9:33:9f:15:2a:0b:15:e6:75:
         5c:d3:49:4b:e5:d6:c3:d3:c9:f6:f4:51:ac:81:63:ec:55:a4:
         09:c7:e4:db:55:f1:25:53:d7:ff:0c:57:1f:85:e1:ff:fc:01:
         b4:64:50:66:11:72:6a:79:be:92:fc:e1:e6:bb:54:31:45:01:
         cd:a5:f4:40:58:08:dc:b6:bd:84:98:21:57:05:de:c7:ae:7b:
         0b:82:8f:23:35:85:44:69:e9:17:01:fd:75:19:2c:b8:d5:52:
         1d:5b:fe:ac:63:e9:21:c2:99:10:27:22:df:99:0a:e2:6f:ab:
         d3:cc:3f:20:bf:33:f5:d7:1f:d1:28:04:76:ec:4a:78:12:d6:
         9f:08:0a:e3:07:b4:a3:66:23:a0:65:91:ea:a9:48:90:c4:31:
         aa:ce:be:79
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+m2vDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDMx
NTA5MzM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWJkZmRlNDBhM2Yy
MjUyYTI2ZjdhNTc4ZTcxODAxZDRjMjRkYzRkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO0fX4yn+w5EPYry9yBKXx2pK9iF2BzHIrwjWJyb3Rz/qcqN
PWHiErTr0YfRzw91xk3iKwpmU+iIv6EcQ89YH8ovek97aBFZD9LnrB2uQI+z+KPT
pLyTtYaVNIO0P9HLg1D3LtsfC59GH5FvWG0cVw9j63FP0WDQqxPjiQ8N3t/1cDmu
4ilLLRn9pjm9F1UJR2prshj0lBAQN1JoIC9fzCkEAIriDxCK06muhuL/+s0utXh4
NvMDQtuG+f9z1+7rXJQjEjD5VNGHvds3glLO2QNp593MGMjXrzvN0fH6MDwJ5rwq
NzVZ4jyuIc07jXhIIjIo/Wr9Hgd2ouRlX7QRL6sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSr395Ao/IlKib3pXjnGAHUwk3E3DAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L3E5X2VRS1B5SlNvbTk2VjQ1eGdCMU1KTnhOdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJx3jANBgkqhkiG9w0BAQsFAAOC
AQEAXvtetiDTpnkpJbHVjCYVnW/NgM/m6pA77DKLvCjwQWbO7EcBE46FIPaVE98P
D7hblupK6Dzrlbqeu5ZOQ1sRjkDUH6wbOhShKQbSysWG1Jpj30iZwjAUVv+ySJLl
EPCbNb3EuTOfFSoLFeZ1XNNJS+XWw9PJ9vRRrIFj7FWkCcfk21XxJVPX/wxXH4Xh
//wBtGRQZhFyanm+kvzh5rtUMUUBzaX0QFgI3La9hJghVwXex657C4KPIzWFRGnp
FwH9dRksuNVSHVv+rGPpIcKZECci35kK4m+r08w/IL8z9dcf0SgEduxKeBLWnwgK
4we0o2YjoGWR6qlIkMQxqs6+eQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org