Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa
File:                     F602yJbJarj8xC0BNPKIjDcMrZ4.roa (raw, json)
Hash identifier:          3uqUpNVrx0dvpll7u76K+CQ1Pac+DZy3ir+jfS64HVU=
Subject key identifier:   17:AD:36:C8:96:C9:6A:B8:FC:C4:2D:01:34:F2:88:8C:37:0C:AD:9E
Certificate issuer:       /CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
Certificate serial:       0339FC9D
Authority key identifier: D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa
Signing time:             Sun 12 Jun 2022 22:02:04 +0000
ROA not before:           Sun 12 Jun 2022 22:02:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        185.29.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54131869 (0x339fc9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53ece71ef6ebf55bb7b87e50665ba11fdc77f08
        Validity
            Not Before: Jun 12 22:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17ad36c896c96ab8fcc42d0134f2888c370cad9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:1f:5d:9c:02:e4:c7:2b:7f:d4:69:a5:de:
                    48:52:f3:f0:20:a4:ed:ac:00:35:22:06:94:58:24:
                    80:d3:92:51:2c:63:18:6a:4c:0c:a8:f0:f8:00:fa:
                    7f:2e:2b:70:e3:41:29:82:b3:b9:b5:e1:ab:f4:dc:
                    49:f4:a6:0c:c4:8e:12:b6:65:1e:e4:23:2f:65:1b:
                    71:8b:2b:73:da:37:28:b6:15:38:0c:f6:34:b8:fb:
                    64:62:4d:83:a5:20:07:a2:f6:f8:cb:0c:82:49:b6:
                    6e:3e:f7:17:78:03:ff:10:f2:3b:46:df:94:f4:af:
                    e0:dd:18:f0:c0:31:1f:f3:57:3e:41:db:45:4b:f8:
                    26:6c:ab:77:bd:c8:ca:29:66:a5:7e:b9:e5:90:58:
                    13:be:8f:ae:5c:d2:5b:09:d4:ce:54:2d:60:fc:a7:
                    9c:68:55:4e:49:0c:f9:35:ce:b5:5e:fc:c9:d7:5d:
                    ac:e0:95:4a:9d:85:6f:af:b0:b0:4a:d5:61:80:c2:
                    68:97:54:3b:9c:12:a2:07:12:42:50:3d:bd:0e:3e:
                    6c:11:70:26:c0:bd:c8:fc:0c:f4:fb:3b:a7:3f:4b:
                    04:dc:6e:4b:26:cc:7a:61:43:b5:bd:cd:ba:ec:6a:
                    e2:6a:d6:48:9b:e0:fc:04:a1:9a:c8:46:3a:0d:ca:
                    15:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:36:C8:96:C9:6A:B8:FC:C4:2D:01:34:F2:88:8C:37:0C:AD:9E
            X509v3 Authority Key Identifier:
                keyid:D5:3E:CE:71:EF:6E:BF:55:BB:7B:87:E5:06:65:BA:11:FD:C7:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/F602yJbJarj8xC0BNPKIjDcMrZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c81669-2519-4da5-bd5d-1c2626590d28/1/1T7Oce9uv1W7e4flBmW6Ef3Hfwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.29.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:9d:06:95:01:d8:a8:6d:87:f7:cb:ed:a2:a3:2d:ca:93:d2:
         66:be:dd:53:46:69:c6:59:1e:51:10:8d:fb:25:ca:30:45:35:
         d9:42:8d:48:2d:31:ca:6d:40:f0:10:7d:e5:1a:98:3e:5c:fa:
         b7:37:7b:9b:20:93:2e:30:90:0f:f9:c1:78:30:03:49:e2:5b:
         9d:23:2d:7a:0c:54:7e:86:57:e5:c6:d8:a7:58:29:66:ea:1a:
         89:5b:86:8e:3a:1c:08:bf:2d:be:f1:d2:a4:f8:a0:6b:dc:d8:
         cb:ba:b7:11:91:0a:2c:d9:b8:62:f2:17:9e:78:ff:7a:85:15:
         f0:f3:7c:f1:84:86:dd:1b:ed:78:d5:49:d7:32:cb:15:23:83:
         1b:eb:b5:df:d8:cb:98:e9:30:df:a9:be:a2:d5:29:88:33:e9:
         a0:a9:e3:74:7b:82:dd:d1:94:8e:e5:37:0b:e1:61:fb:ca:72:
         ca:2f:df:f6:48:0d:41:13:62:c9:db:a8:12:80:d7:92:04:56:
         17:77:b8:5a:46:da:90:51:3c:57:70:ec:ae:7c:cf:09:aa:91:
         5c:a4:42:4e:6a:97:24:04:41:de:7e:4b:d2:18:52:34:04:96:
         6b:df:ce:f8:ab:ce:b3:29:56:56:21:09:2c:f4:11:56:e9:91:
         f6:00:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org