Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fxfjRvIohsnK45lmnsvTPRVgAjU.roa
File:                     fxfjRvIohsnK45lmnsvTPRVgAjU.roa (raw, json)
Hash identifier:          sjoO2jXkgdmKCSLOdrXNldNWv9neHDXYRJtz/a7LfXY=
Subject key identifier:   7F:17:E3:46:F2:28:86:C9:CA:E3:99:66:9E:CB:D3:3D:15:60:02:35
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       018345E82CB1F8D681EB6A31BDA932CEA1AA
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fxfjRvIohsnK45lmnsvTPRVgAjU.roa
Signing time:             Fri 16 Sep 2022 10:46:27 +0000
ROA not before:           Fri 16 Sep 2022 10:46:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        195.178.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:45:e8:2c:b1:f8:d6:81:eb:6a:31:bd:a9:32:ce:a1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Sep 16 10:46:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7f17e346f22886c9cae399669ecbd33d15600235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:d1:9f:a9:97:96:7f:dc:63:be:2e:27:52:
                    fa:1f:6c:04:28:d5:1b:c7:2c:f9:7e:93:21:19:c6:
                    91:6e:ec:d9:47:5c:6a:8a:cc:04:d7:30:e8:5d:67:
                    51:65:c7:01:69:8f:a6:55:70:87:a6:6b:1d:b7:ee:
                    39:27:7a:c5:83:36:ea:79:41:37:06:d6:95:9d:ef:
                    72:a4:d4:d1:2a:80:43:f3:4f:75:52:68:74:93:db:
                    39:a4:8f:bb:65:d3:96:cd:e3:a5:0d:2f:97:51:00:
                    2b:62:1e:7a:25:36:d1:40:98:d2:6e:30:eb:a7:85:
                    9e:86:77:49:a7:6c:75:96:29:44:9a:b5:65:d0:37:
                    a9:e4:00:9c:b0:82:54:49:1e:26:22:d4:55:8d:d9:
                    9c:8d:7e:ae:ac:09:10:cd:ca:f5:70:52:cc:71:07:
                    d5:6e:5b:69:d2:0b:11:61:79:0f:2d:1e:99:5a:22:
                    d1:cb:dc:b9:a9:3d:5e:eb:44:e9:0f:f6:63:db:6e:
                    51:45:89:6f:ea:ee:14:61:ee:e9:a5:27:da:8f:b5:
                    bf:2a:16:c3:3a:86:fa:36:81:09:6a:d8:62:df:91:
                    9e:d9:cb:d0:28:9c:01:3f:08:89:a9:4b:25:ad:8c:
                    05:f3:4a:d2:84:f5:db:ad:8f:54:f3:92:e4:30:4b:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:E3:46:F2:28:86:C9:CA:E3:99:66:9E:CB:D3:3D:15:60:02:35
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/fxfjRvIohsnK45lmnsvTPRVgAjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0a:2a:2e:9a:d4:1e:b3:ae:c8:6d:84:36:81:2b:b8:57:25:
         4d:8b:7b:74:5c:4e:26:c1:31:9f:f7:7e:f3:de:0b:5c:13:08:
         66:ab:9a:e9:2c:f3:22:ca:b2:af:a4:f6:92:39:94:b0:5e:38:
         68:ac:7d:f5:91:d1:58:ea:26:2a:ca:2b:1d:83:47:26:76:11:
         0c:e6:10:b6:3e:5f:ec:73:57:43:dd:af:db:b8:d5:27:fc:28:
         44:23:b7:3e:b9:0c:3a:35:d8:eb:dd:cd:75:a8:56:f3:5e:c2:
         d1:fb:35:5a:1b:74:5c:b0:24:74:c6:f1:a6:01:82:4b:25:d5:
         cc:78:b4:9a:13:c7:18:55:1e:ca:a5:96:05:f7:bb:98:b3:0d:
         b5:52:46:96:25:50:e0:78:ae:eb:9a:ca:9c:cd:b7:b5:4e:3a:
         08:9a:54:2e:68:ad:b8:62:94:4f:88:e4:ab:29:a8:0f:ed:d1:
         4a:d0:7a:a0:fb:e2:6f:89:02:a1:c5:d2:fd:c3:74:a3:c1:39:
         01:fe:4f:98:93:cb:91:0f:15:6c:f1:51:21:48:ae:d4:4d:26:
         43:76:4d:d1:56:3e:06:d3:60:13:55:d2:b0:5b:03:a0:e2:fb:
         7c:d0:10:d4:ce:57:17:49:51:5a:39:1e:23:92:c5:21:58:51:
         ca:9c:09:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org