Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/3sRAXnOK5iUU9bqcqqQzZ7zw0jI.roa
File:                     3sRAXnOK5iUU9bqcqqQzZ7zw0jI.roa (raw, json)
Hash identifier:          +WP5rge7+hMiEFbNiE7Ulgl84uQhS+s8ooZL2sjelCk=
Subject key identifier:   DE:C4:40:5E:73:8A:E6:25:14:F5:BA:9C:AA:A4:33:67:BC:F0:D2:32
Certificate issuer:       /CN=cfeb50a59fe6789b0d289457ac94ab0ce4951094
Certificate serial:       063E9C0C
Authority key identifier: CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/3sRAXnOK5iUU9bqcqqQzZ7zw0jI.roa
Signing time:             Sun 15 May 2022 01:56:42 +0000
ROA not before:           Sun 15 May 2022 01:56:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15020
IP address blocks:        185.82.73.0/24 maxlen: 24
                          185.82.74.0/24 maxlen: 24
                          185.82.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104766476 (0x63e9c0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeb50a59fe6789b0d289457ac94ab0ce4951094
        Validity
            Not Before: May 15 01:56:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dec4405e738ae62514f5ba9caaa43367bcf0d232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:2d:87:ea:03:40:d7:d2:61:24:c4:f2:e9:
                    a3:10:6f:b7:ba:19:11:ec:ad:77:ba:8a:74:f9:37:
                    28:e9:66:b9:e6:be:15:0e:c5:50:aa:d3:53:fe:86:
                    52:df:15:6b:68:48:26:9a:33:1c:34:87:22:f0:83:
                    50:3b:a7:1e:1e:c4:ec:a3:79:ab:5d:36:e8:fc:6b:
                    49:27:94:f9:3f:8e:15:5e:24:28:14:e4:63:d1:a3:
                    4b:01:dd:69:26:17:86:e6:35:15:61:a2:69:12:57:
                    6f:7e:ea:ae:ee:5f:57:64:f3:51:30:d9:bd:83:40:
                    0f:98:19:b6:42:95:4d:d5:57:e1:ec:8c:2f:31:c9:
                    48:d4:b0:96:3e:c0:7b:0c:a9:e2:29:9e:48:2b:19:
                    75:02:f7:69:ff:2f:2c:47:1a:16:ef:6d:c7:60:02:
                    91:a9:28:83:76:7f:e7:12:c1:30:c5:26:da:5f:0b:
                    75:b4:17:16:eb:99:47:da:64:f5:99:ec:a6:c6:26:
                    8d:9d:d3:c2:a0:6c:03:87:d7:8d:1f:c7:37:3b:71:
                    af:f7:f1:55:51:01:c0:14:b9:57:3f:f9:b7:c0:eb:
                    20:34:3f:d7:8a:20:f3:7f:26:7c:6d:5b:68:66:1d:
                    58:12:f6:7c:20:0e:9b:e9:00:71:51:00:d7:c4:21:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C4:40:5E:73:8A:E6:25:14:F5:BA:9C:AA:A4:33:67:BC:F0:D2:32
            X509v3 Authority Key Identifier:
                keyid:CF:EB:50:A5:9F:E6:78:9B:0D:28:94:57:AC:94:AB:0C:E4:95:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/3sRAXnOK5iUU9bqcqqQzZ7zw0jI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d57557-7df0-4ec9-9629-7ff40da0fe00/1/z-tQpZ_meJsNKJRXrJSrDOSVEJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.73.0-185.82.75.255

    Signature Algorithm: sha256WithRSAEncryption
         07:af:7b:41:4c:c0:8e:ff:e0:5b:3d:13:4d:73:a9:b1:41:4b:
         75:e3:45:4a:60:02:b1:ba:3c:07:b6:ad:f3:d7:35:e3:78:06:
         c6:68:18:f9:a2:f7:e5:64:d5:76:89:ee:c1:26:11:76:03:61:
         d5:d3:fd:ee:41:a8:d1:de:57:05:d0:cd:e0:e8:8a:00:a3:ee:
         00:96:f4:ea:c8:fb:b5:e9:df:d0:a2:d8:21:3d:a6:a6:99:ef:
         8f:ad:2d:2e:3b:5e:03:ea:24:a6:2a:04:e8:ac:0a:63:33:33:
         b4:65:eb:5d:20:03:95:0a:d7:a6:6c:77:f7:ca:a2:1e:b4:30:
         56:51:67:49:86:84:ad:ae:e7:82:04:df:d6:e8:bd:e3:3a:b3:
         f4:7e:df:9e:d6:a5:a5:0a:22:fa:bb:fe:22:69:7e:b3:ce:f8:
         01:b9:88:7d:2f:f1:f6:ca:d0:6a:1b:db:0a:e7:c1:2e:8e:ff:
         3b:87:d1:4b:ef:0e:98:99:20:43:10:29:ba:57:4f:50:45:89:
         bf:03:30:5b:da:57:a9:b0:4f:e2:bf:c7:32:bc:ee:78:07:85:
         0d:d2:22:ba:92:b5:5e:24:db:17:1c:cf:16:6a:ff:aa:5b:7f:
         aa:26:b8:88:7c:3f:17:8a:80:d1:6e:42:01:b8:ad:7d:9b:6a:
         93:a0:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:28 2023 by rpki-client on console-fra.rpki-client.org