Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ArgcCLhySNiKYtv012kfQ_FP89U.roa
File:                     ArgcCLhySNiKYtv012kfQ_FP89U.roa (raw, json)
Hash identifier:          Bt5U9aAMBpEsRY9h3DkQ+6mTYuuiXiF2ph+X6Va7i/M=
Subject key identifier:   02:B8:1C:08:B8:72:48:D8:8A:62:DB:F4:D7:69:1F:43:F1:4F:F3:D5
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       04B738BF
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ArgcCLhySNiKYtv012kfQ_FP89U.roa
Signing time:             Sat 09 Apr 2022 11:01:21 +0000
ROA not before:           Sat 09 Apr 2022 11:01:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58061
IP address blocks:        194.150.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79116479 (0x4b738bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: Apr  9 11:01:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02b81c08b87248d88a62dbf4d7691f43f14ff3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:60:ea:e5:da:f1:70:df:0a:4a:99:ca:cb:
                    89:a3:75:ff:fa:45:ec:8b:ee:d8:1b:59:c6:f9:77:
                    83:be:42:ca:7d:c9:cf:16:cd:f5:62:5c:cd:00:04:
                    89:75:5f:da:7b:17:76:b3:bf:9d:19:72:db:57:7a:
                    4b:eb:51:ad:3a:13:c0:06:e0:74:eb:2f:9f:20:23:
                    62:c9:36:42:09:c8:3e:9f:1d:51:d1:dd:c9:08:04:
                    5d:a7:c6:0b:b5:1e:4a:e3:0a:9d:3c:9b:3f:3b:2b:
                    e7:34:1d:5e:6b:39:cc:09:c8:9a:31:1c:6e:c6:db:
                    30:43:2c:c6:44:28:d6:7b:13:4c:d0:83:c6:40:25:
                    a2:de:64:f4:01:79:fc:c7:67:1a:0e:f1:54:0e:2d:
                    64:2f:b5:90:ec:fe:64:0e:38:6d:37:b8:06:d4:9c:
                    3f:39:4d:6c:ec:39:de:20:a6:7a:f9:a9:7e:9c:80:
                    82:cd:7b:d4:34:07:01:72:e3:eb:00:8e:25:9c:ed:
                    71:f3:24:70:5e:02:79:f2:d4:d1:3b:0b:8d:9d:21:
                    1b:c8:b3:c4:f6:af:64:c2:c5:96:16:b9:4a:66:f3:
                    10:dc:1e:fa:29:e8:56:a6:ac:e5:7c:f4:27:d1:50:
                    27:72:e1:26:c4:9e:da:8f:66:d9:c8:5d:0c:aa:ff:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:1C:08:B8:72:48:D8:8A:62:DB:F4:D7:69:1F:43:F1:4F:F3:D5
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ArgcCLhySNiKYtv012kfQ_FP89U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:c0:09:77:7e:15:63:26:50:2e:da:1b:58:f0:2d:23:e1:
         92:4b:b3:8e:a7:e5:d9:d2:f9:52:07:0d:55:cb:6a:ef:d9:73:
         58:0e:85:04:8d:bb:70:00:47:26:90:3f:2a:bd:ce:e8:5b:17:
         96:e5:96:7f:fa:e9:b4:e1:27:a2:d3:25:3f:2f:df:1b:e7:13:
         95:43:07:be:bf:bf:b7:71:1b:60:a6:08:7a:6f:c9:d8:b1:d0:
         bf:74:91:be:fd:73:55:e9:1d:c1:d2:9a:cf:14:56:ce:53:5e:
         68:d5:47:e8:a9:63:4a:12:bf:cc:6a:d4:69:9a:9c:57:b5:22:
         32:66:f8:ee:05:e4:71:63:1b:d6:23:3b:67:7c:27:c4:65:2a:
         4e:a1:51:21:70:6d:eb:d9:66:94:43:8c:65:48:13:73:63:4c:
         cf:6d:12:c6:cb:80:31:8d:67:1c:ce:57:a6:72:aa:27:e0:e4:
         58:3d:ca:8a:b8:42:6c:15:74:44:42:ce:0b:fc:36:21:34:64:
         c3:2f:03:35:99:7d:ab:dd:0f:d0:f0:d5:22:1c:b6:2a:66:a6:
         db:4f:26:6a:d8:27:4b:70:11:27:bd:7d:f7:8b:61:b4:38:a7:
         bc:e6:bd:d0:43:4f:a4:21:7f:32:0e:8e:79:34:2b:f3:ef:ea:
         73:52:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org