Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/e0IBx7sUhIMKKb_XVgNn7fqZypo.roa
File:                     e0IBx7sUhIMKKb_XVgNn7fqZypo.roa (raw, json)
Hash identifier:          VpDHfNK6SWsVj1vWQz4xWjF7Rt6/wo8sVIV6HhnKv3s=
Subject key identifier:   7B:42:01:C7:BB:14:84:83:0A:29:BF:D7:56:03:67:ED:FA:99:CA:9A
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       01857169BDF9622611E6E88FC89C5D3F6BFC
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/e0IBx7sUhIMKKb_XVgNn7fqZypo.roa
Signing time:             Mon 02 Jan 2023 07:37:13 +0000
ROA not before:           Mon 02 Jan 2023 07:37:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197520
IP address blocks:        193.151.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:bd:f9:62:26:11:e6:e8:8f:c8:9c:5d:3f:6b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Jan  2 07:37:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b4201c7bb1484830a29bfd7560367edfa99ca9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b3:50:ff:bb:74:c7:b7:28:44:1d:84:6c:f9:
                    9f:7e:65:e4:3f:0a:63:03:53:81:25:ff:2b:dc:28:
                    72:f3:b9:0c:5a:f2:b2:d9:7c:0e:d5:1f:a0:5d:25:
                    32:ea:58:0e:dd:3d:3d:e4:24:d1:e6:a4:8c:e2:9b:
                    b5:37:9e:99:a9:ce:a2:a3:b3:48:a3:23:a4:3f:95:
                    0f:e5:ca:75:95:22:60:48:aa:20:25:59:50:ca:8a:
                    08:d6:a5:86:fe:57:71:6b:ab:3a:a3:5c:6b:db:f8:
                    ec:f3:bd:d6:51:be:a5:e8:0b:2d:fa:df:56:d6:2d:
                    23:bb:2e:61:ec:45:c6:e4:4b:4f:a7:02:ff:c4:63:
                    75:4d:c1:05:f4:a8:4c:e5:55:91:42:04:e2:4f:89:
                    43:a4:82:0e:91:2e:b3:df:4d:5f:0c:c4:c8:fc:a5:
                    61:35:47:09:d4:01:16:28:1d:e4:28:fa:c6:28:80:
                    c7:60:6f:97:85:f7:f3:c8:45:53:ea:cb:32:c6:48:
                    83:8f:66:aa:ed:fc:21:5a:70:bc:d7:6c:93:db:bb:
                    48:c9:a9:5f:2c:cd:69:da:4c:1f:62:2d:96:06:4b:
                    bf:c5:1e:84:c9:b8:ca:0b:e2:f1:41:86:cd:05:18:
                    d0:58:25:b0:f1:72:77:db:5c:2a:22:f0:ec:bf:2e:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:42:01:C7:BB:14:84:83:0A:29:BF:D7:56:03:67:ED:FA:99:CA:9A
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/e0IBx7sUhIMKKb_XVgNn7fqZypo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.151.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:08:91:8a:b2:4e:c4:4f:ad:8d:09:97:3f:f5:a2:28:fd:f1:
         a6:83:e7:9f:96:21:0c:3f:0d:31:39:4c:21:a0:26:98:3a:7b:
         a9:ab:8d:6b:9f:45:7f:be:46:e7:bb:16:ef:fb:d9:dd:bd:20:
         52:05:24:3f:7f:42:e5:2d:93:b6:84:ff:14:b5:f9:a1:9c:83:
         de:85:7a:ea:ff:8d:ef:bb:4f:42:c2:6b:51:c2:d6:58:cc:46:
         b8:32:b5:4e:5b:ca:aa:f5:c6:90:21:63:5f:72:43:ec:ec:5c:
         43:35:c6:f2:1c:24:85:f4:69:5d:75:f1:94:fc:36:98:d5:24:
         54:d9:16:c6:59:57:61:97:ab:89:1d:7d:e0:eb:88:dc:a7:7f:
         3b:08:1c:6a:29:3b:33:9d:ce:a3:b6:13:f2:aa:4c:38:9b:43:
         f5:f9:de:93:3f:97:00:2c:77:6d:bf:fe:24:66:62:96:37:ce:
         13:cf:65:10:55:71:27:45:de:24:00:08:82:b7:1d:fd:37:ab:
         b1:6c:91:ae:53:ee:7e:cb:bf:fe:5f:51:e7:fb:66:84:66:41:
         d7:03:13:c3:cb:c0:d5:61:fa:c3:ba:3b:49:ae:d0:63:db:c3:
         27:df:48:7d:33:fd:4e:b2:72:b1:c6:f9:f3:76:a3:47:e5:f2:
         ef:e0:5c:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxab35YiYR5uiPyJxdP2v8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTQ4NDg1Y2U5YjBlNDI1NjQwODA0ZWRjMGVkMmJhNmI4
ZjRiOGYwHhcNMjMwMTAyMDczNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjQyMDFjN2JiMTQ4NDgzMGEyOWJmZDc1NjAzNjdlZGZhOTljYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLNQ/7t0x7coRB2EbPmffmXkPwpj
A1OBJf8r3Chy87kMWvKy2XwO1R+gXSUy6lgO3T095CTR5qSM4pu1N56Zqc6io7NI
oyOkP5UP5cp1lSJgSKogJVlQyooI1qWG/ldxa6s6o1xr2/js873WUb6l6Ast+t9W
1i0juy5h7EXG5EtPpwL/xGN1TcEF9KhM5VWRQgTiT4lDpIIOkS6z301fDMTI/KVh
NUcJ1AEWKB3kKPrGKIDHYG+XhffzyEVT6ssyxkiDj2aq7fwhWnC812yT27tIyalf
LM1p2kwfYi2WBku/xR6EybjKC+LxQYbNBRjQWCWw8XJ321wqIvDsvy75KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHtCAce7FISDCim/11YDZ+36mcqaMB8GA1UdIwQY
MBaAFIDkhIXOmw5CVkCATtwO0rprj0uPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2Et
YzAzMDE3ZTk4YzUzLzEvZTBJQng3c1VoSU1LS2JfWFZnTm43ZnFaeXBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82ZGM5NzgtYmZkNi00MWVjLThhM2EtYzAzMDE3ZTk4YzUz
LzEvZ09TRWhjNmJEa0pXUUlCTzNBN1N1bXVQUzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZekMA0G
CSqGSIb3DQEBCwUAA4IBAQAICJGKsk7ET62NCZc/9aIo/fGmg+efliEMPw0xOUwh
oCaYOnupq41rn0V/vkbnuxbv+9ndvSBSBSQ/f0LlLZO2hP8UtfmhnIPehXrq/43v
u09CwmtRwtZYzEa4MrVOW8qq9caQIWNfckPs7FxDNcbyHCSF9GlddfGU/DaY1SRU
2RbGWVdhl6uJHX3g64jcp387CBxqKTsznc6jthPyqkw4m0P1+d6TP5cALHdtv/4k
ZmKWN84Tz2UQVXEnRd4kAAiCtx39N6uxbJGuU+5+y7/+X1Hn+2aEZkHXAxPDy8DV
YfrDujtJrtBj28Mn30h9M/1OsnKxxvnzdqNH5fLv4Fzv
-----END CERTIFICATE-----
Generated at Thu Aug 10 08:38:15 2023 by rpki-client on console-ams.rpki-client.org