Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Vc2k-x32T8m_a9QeZ2vpZ4m8_pY.roa
File:                     Vc2k-x32T8m_a9QeZ2vpZ4m8_pY.roa (raw, json)
Hash identifier:          0GOQ2tIV4hxtT8y0x0w7v3G7GlzYS+EIhuVFsZlZRjc=
Subject key identifier:   55:CD:A4:FB:1D:F6:4F:C9:BF:6B:D4:1E:67:6B:E9:67:89:BC:FE:96
Certificate issuer:       /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial:       0517E80F
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Vc2k-x32T8m_a9QeZ2vpZ4m8_pY.roa
Signing time:             Thu 19 May 2022 15:53:29 +0000
ROA not before:           Thu 19 May 2022 15:53:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207326
IP address blocks:        194.150.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85452815 (0x517e80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
        Validity
            Not Before: May 19 15:53:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55cda4fb1df64fc9bf6bd41e676be96789bcfe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:da:c9:6c:9e:a6:1a:54:ff:72:a7:85:c1:ee:
                    11:75:e8:7f:64:e0:6f:85:cc:03:71:a1:be:88:95:
                    47:76:2f:2c:fb:e0:b7:40:39:25:cf:a7:6c:2d:db:
                    5e:03:ba:43:4d:09:56:3b:55:15:be:33:a9:8e:00:
                    76:e9:55:26:01:77:2d:8f:2c:68:80:1c:47:24:4b:
                    34:c6:6f:fe:73:0d:11:75:5f:a3:8a:c8:1c:7a:2c:
                    55:77:f2:62:6c:09:6c:16:22:07:1b:f9:79:0b:af:
                    1c:56:c8:a4:c9:d1:e9:e2:36:35:4d:5f:0f:49:8d:
                    cc:80:99:0e:53:09:b2:ca:b6:aa:91:ec:6c:bc:d7:
                    29:8f:4e:c1:60:0a:f2:52:67:17:35:a0:9b:4b:33:
                    e8:cf:7f:e5:e9:d9:39:1f:72:26:eb:a1:dd:dd:be:
                    93:73:6c:3f:b5:a7:9b:95:93:83:cd:4c:9e:29:cd:
                    d8:38:71:84:ba:d1:a7:5e:5e:fa:ce:70:1d:2f:bc:
                    62:14:00:d0:68:93:d2:60:de:c5:0c:30:d4:0d:8e:
                    7f:83:64:6c:84:69:13:ec:2a:86:b1:fe:09:a1:2e:
                    7d:17:05:23:69:7d:8e:3d:b6:c5:0e:83:2c:ab:1d:
                    a5:e4:31:cb:dc:7a:25:64:d7:f5:7e:e3:20:03:ad:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CD:A4:FB:1D:F6:4F:C9:BF:6B:D4:1E:67:6B:E9:67:89:BC:FE:96
            X509v3 Authority Key Identifier:
                keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Vc2k-x32T8m_a9QeZ2vpZ4m8_pY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f9:93:61:0c:5f:48:49:c2:73:55:bc:01:6a:db:a3:10:d0:
         36:cf:b3:46:97:6b:52:74:79:40:fa:03:2a:fd:a0:e6:ad:8b:
         06:41:f7:c8:b2:83:60:d7:45:c9:f4:70:7e:37:f1:99:67:cb:
         35:9d:20:d7:0b:57:12:26:1c:0e:64:62:f4:b5:b8:ed:ea:93:
         c1:64:e4:38:4d:54:f2:cb:0b:b4:e1:54:f2:25:b0:2a:de:81:
         97:d7:74:dd:57:75:7d:83:c3:7b:eb:a5:0c:ab:20:f4:75:fd:
         b1:8c:c3:a1:14:af:dd:6f:80:7c:96:4e:da:62:11:a9:56:a8:
         e9:1e:8c:46:f4:e4:2d:cd:fb:14:96:ed:da:2d:0d:45:f4:5e:
         86:bc:5f:40:e5:c1:8c:be:98:72:b4:34:4b:cc:99:65:c0:b2:
         c2:02:7c:bb:0e:33:d5:73:6e:95:46:52:77:c5:83:fe:5b:aa:
         e9:d0:a4:87:d4:5f:eb:9c:98:d9:a7:9e:94:07:03:31:2f:60:
         4c:52:23:66:ed:b3:c1:26:f7:9a:b5:50:27:aa:0d:3e:8f:b6:
         ab:83:09:62:9f:8a:60:22:58:e7:d3:42:80:d6:79:65:39:26:
         f6:30:a5:c5:8a:8e:c5:85:55:c4:1b:b3:81:12:1c:22:57:fc:
         34:03:1b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org