Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EM8Nkxgu51vvU6-P5Mu0OzLbaSo.roa
File:                     EM8Nkxgu51vvU6-P5Mu0OzLbaSo.roa (raw, json)
Hash identifier:          U3qP88izxh0eswm9gjEw7AjOXQUIt7Ob4/DqODR9XWI=
Subject key identifier:   10:CF:0D:93:18:2E:E7:5B:EF:53:AF:8F:E4:CB:B4:3B:32:DB:69:2A
Certificate issuer:       /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial:       0184B4EE0C94D5993F2ED9FC01B34133B3CB
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EM8Nkxgu51vvU6-P5Mu0OzLbaSo.roa
Signing time:             Sat 26 Nov 2022 17:13:30 +0000
ROA not before:           Sat 26 Nov 2022 17:13:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48
                          2a06:a005:2220::/44 maxlen: 48
                          2a06:a005:1c40::/44 maxlen: 48
                          2a06:a005:1620::/44 maxlen: 48
                          2a06:a005:1f60::/44 maxlen: 48
                          2a06:a005:1800::/44 maxlen: 48
                          2a06:a005:19e0::/44 maxlen: 48
                          2a06:a005:e40::/44 maxlen: 48
                          2a06:a005:1f40::/44 maxlen: 48
                          2a06:a005:1f80::/44 maxlen: 48
                          2a06:a005:2200::/44 maxlen: 48
                          2a06:a005:1630::/44 maxlen: 48
                          2a06:a005:1d90::/44 maxlen: 48
                          2a06:a005:2230::/44 maxlen: 48
                          2a06:a005:1f50::/44 maxlen: 48
                          2a06:a005:1f70::/44 maxlen: 48
                          2a06:a005:2390::/44 maxlen: 48
                          2a06:a005:1c30::/44 maxlen: 48
                          2a06:a005:18d0::/44 maxlen: 48
                          2a06:a005:1610::/44 maxlen: 48
                          2a06:a005:2210::/44 maxlen: 48
                          2a05:dfc7:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b4:ee:0c:94:d5:99:3f:2e:d9:fc:01:b3:41:33:b3:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
        Validity
            Not Before: Nov 26 17:13:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10cf0d93182ee75bef53af8fe4cbb43b32db692a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2e:2b:ce:fd:67:78:29:90:39:59:b7:2d:cb:
                    3d:af:52:93:af:00:b2:d2:c1:b3:07:bd:d6:56:31:
                    5d:1f:d4:e5:20:89:f9:1b:23:50:ab:3f:4b:36:24:
                    f4:d0:06:e5:f6:e2:ba:24:ff:7c:9f:a5:94:8d:f4:
                    0f:ce:ee:0e:01:82:ef:67:39:fb:78:0a:a4:f6:fb:
                    04:f9:b9:e3:f8:57:04:e0:a6:83:92:3e:5e:33:d3:
                    80:db:46:1d:19:5f:49:2f:88:28:da:f6:fb:10:99:
                    d9:86:46:f1:5c:8a:3d:b3:17:fe:df:06:10:b2:c5:
                    b7:b8:5d:a9:e1:f7:10:73:93:b8:7d:4a:ab:30:07:
                    24:6a:45:ba:a6:2a:f1:94:60:4c:15:6b:73:68:a0:
                    08:f6:6b:08:8a:ee:61:b7:d6:78:35:80:34:ba:08:
                    f7:b8:07:90:78:ea:ce:18:24:43:a3:86:ca:02:29:
                    a5:75:b2:c6:6a:a9:03:60:48:c4:da:05:f4:07:fd:
                    d3:48:74:92:73:14:3b:76:61:46:f1:65:e1:e7:48:
                    c8:9a:6b:bf:ba:7a:d0:71:ba:e8:23:7f:fa:2e:ae:
                    19:7f:2d:34:05:a7:d9:f3:70:c9:a4:fc:d2:c6:83:
                    61:df:83:f1:5d:4f:8b:00:c3:30:a1:79:3b:45:29:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CF:0D:93:18:2E:E7:5B:EF:53:AF:8F:E4:CB:B4:3B:32:DB:69:2A
            X509v3 Authority Key Identifier:
                keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/EM8Nkxgu51vvU6-P5Mu0OzLbaSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc7:8100::/40
                  2a06:a005:e40::/44
                  2a06:a005:1610::-2a06:a005:163f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1800::/44
                  2a06:a005:18d0::/44
                  2a06:a005:19e0::/44
                  2a06:a005:1c30::-2a06:a005:1c4f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:1d90::/44
                  2a06:a005:1f40::-2a06:a005:1f8f:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:2200::/42
                  2a06:a005:2390::/44
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:60:32:eb:a6:e7:2e:9e:cc:82:27:7d:68:69:bc:a9:f1:
         67:2b:bf:74:b7:c9:aa:28:72:ab:e0:5c:e1:af:ce:d6:9b:e2:
         23:fb:57:7b:07:0d:fe:b9:8a:0a:7c:1d:f2:b9:0b:ee:8d:47:
         d5:6e:e9:19:72:12:45:b9:69:eb:aa:f2:7f:e3:d7:f1:46:09:
         6a:8b:e5:ae:ab:46:3a:46:d2:87:8a:82:f0:be:3b:5e:6f:9c:
         b0:65:ba:0a:e6:02:af:98:c2:9e:24:c9:f3:a8:c0:f6:3a:34:
         56:c2:b0:99:7f:b4:19:25:65:97:3d:96:41:b7:bd:04:fa:7b:
         08:4e:22:29:c5:11:ed:c9:17:e5:e3:69:10:0f:5d:c7:1d:cf:
         e6:74:9c:bd:f9:1a:01:f5:f7:e6:93:00:c2:d4:18:38:dd:01:
         7e:cc:f8:0b:e2:de:5d:1a:a0:8b:4e:af:15:9d:08:73:09:4f:
         96:d5:d2:f3:ef:7b:30:0a:ac:87:1e:b6:c9:44:1b:92:5c:da:
         82:a0:f0:d7:1a:b3:09:0f:05:32:74:82:ee:1f:2e:39:07:75:
         ac:c6:ae:4e:3b:6d:99:97:b3:6f:ac:6a:de:b0:f6:0d:46:3c:
         bd:11:a0:7c:3c:48:eb:ec:29:a7:4e:95:cd:90:04:0a:ca:c2:
         dd:b5:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:35 2023 by rpki-client on console-fra.rpki-client.org