Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/AkeN9ncway0j5FBappZKiE068yQ.roa
File:                     AkeN9ncway0j5FBappZKiE068yQ.roa (raw, json)
Hash identifier:          qPJBnamaCtnnKNap6U6ugY+dZytUf/AMLNvFTTDgA/U=
Subject key identifier:   02:47:8D:F6:77:30:6B:2D:23:E4:50:5A:A6:96:4A:88:4D:3A:F3:24
Certificate issuer:       /CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
Certificate serial:       0182B665760C05BE4A816F7BB0BDA2D3AC81
Authority key identifier: 31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/AkeN9ncway0j5FBappZKiE068yQ.roa
Signing time:             Fri 19 Aug 2022 13:57:58 +0000
ROA not before:           Fri 19 Aug 2022 13:57:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8100
IP address blocks:        141.98.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b6:65:76:0c:05:be:4a:81:6f:7b:b0:bd:a2:d3:ac:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3124de2d6b780b3dbb5fbf5b926dcb8d2f0cc106
        Validity
            Not Before: Aug 19 13:57:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=02478df677306b2d23e4505aa6964a884d3af324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:64:b1:d1:2e:d4:58:04:c1:e9:bf:09:77:
                    54:96:89:3a:22:6c:fa:4a:4e:4d:81:8c:83:2b:88:
                    f7:6a:46:aa:d9:e8:85:63:15:21:87:e6:32:6c:ec:
                    46:36:ab:1d:b0:b1:f9:72:32:dc:a8:f0:ff:f2:31:
                    dd:cc:e1:00:ee:32:91:f0:76:94:b2:5d:02:3d:d0:
                    aa:05:ac:fa:07:77:29:6e:be:ba:a3:52:26:31:60:
                    23:7f:a3:91:8e:14:de:f0:53:2c:91:8a:c2:20:8e:
                    b6:d1:f8:46:18:46:96:9a:9e:b2:00:f9:03:3a:58:
                    3f:dd:60:7d:12:71:25:e4:03:ac:1c:ef:5e:aa:fb:
                    ac:d7:5f:3d:79:e1:0f:72:fd:8a:f5:6e:3a:66:cc:
                    ce:88:c3:39:76:68:c2:3f:eb:d8:af:9f:20:a9:7a:
                    e4:2c:3b:94:c3:da:e4:fb:d4:48:a1:87:d3:9d:5e:
                    ed:0a:bc:05:8c:e3:73:c1:d0:ee:14:cf:d2:72:a0:
                    d1:5e:2b:cb:a6:da:20:e4:62:e2:4b:82:2e:b7:cf:
                    f6:4a:51:02:3f:c2:eb:f5:56:f3:e8:6c:d7:2a:b6:
                    e7:5e:69:e5:58:84:ed:34:ec:2d:1d:86:0a:4a:84:
                    03:b8:cb:43:cc:c0:93:1c:eb:72:21:2d:66:0b:3e:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:8D:F6:77:30:6B:2D:23:E4:50:5A:A6:96:4A:88:4D:3A:F3:24
            X509v3 Authority Key Identifier:
                keyid:31:24:DE:2D:6B:78:0B:3D:BB:5F:BF:5B:92:6D:CB:8D:2F:0C:C1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSTeLWt4Cz27X79bkm3LjS8MwQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/AkeN9ncway0j5FBappZKiE068yQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/936eab-094e-4903-9148-a76f86575247/1/MSTeLWt4Cz27X79bkm3LjS8MwQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:00:5f:e4:f7:65:4c:e0:3d:ad:c9:eb:cb:33:be:af:52:
         68:ba:55:78:42:39:5c:f3:2e:eb:57:c2:c4:08:03:54:53:b7:
         0a:97:71:5c:77:98:8f:48:34:9a:ae:b9:88:40:20:67:ce:26:
         c5:26:9c:62:7b:30:b9:ed:5c:47:7a:81:19:54:59:0f:09:c4:
         dd:fa:11:cd:46:ba:0d:f8:7c:e5:c9:e2:df:a4:82:79:5c:bc:
         b9:e7:85:04:23:5d:d8:f0:d5:6c:87:32:9b:d9:55:0e:eb:1d:
         d4:69:9f:e4:06:6f:8e:1e:0c:13:2b:0f:a4:ad:37:79:01:d0:
         69:9a:27:e9:af:63:27:b6:3f:f9:9c:88:47:d5:28:20:57:b6:
         89:64:64:55:34:68:ab:8a:78:21:89:fa:b0:30:f7:11:5c:be:
         01:d8:84:50:3e:39:d3:a2:4d:d3:8d:d4:e7:94:5d:69:94:96:
         38:a1:2c:29:0d:8f:ef:75:b5:47:cb:53:b3:6b:7d:59:02:63:
         d4:31:43:c8:27:81:68:05:2e:05:4f:05:62:49:83:15:8b:9d:
         50:1e:2a:c2:2d:96:6a:c3:0a:e5:2f:e6:7d:42:59:be:76:ea:
         0c:5e:84:98:16:f5:64:ac:ae:90:06:ad:7c:ee:19:7a:89:8f:
         03:ad:0e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org