Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/g7DMPUT9CmvVPae2gyIue9UWLxY.roa
File:                     g7DMPUT9CmvVPae2gyIue9UWLxY.roa (raw, json)
Hash identifier:          65eOjiZ6W407hy8dU85tpx1aMR0LfU3XdfQhohWMUy8=
Subject key identifier:   83:B0:CC:3D:44:FD:0A:6B:D5:3D:A7:B6:83:22:2E:7B:D5:16:2F:16
Certificate issuer:       /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial:       01826D38517E8E0FE81DE3C52FE6C7822978
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/g7DMPUT9CmvVPae2gyIue9UWLxY.roa
Signing time:             Fri 05 Aug 2022 08:56:23 +0000
ROA not before:           Fri 05 Aug 2022 08:56:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        185.229.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6d:38:51:7e:8e:0f:e8:1d:e3:c5:2f:e6:c7:82:29:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
        Validity
            Not Before: Aug  5 08:56:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83b0cc3d44fd0a6bd53da7b683222e7bd5162f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:ab:0c:c3:3a:9d:3a:68:9c:41:ef:44:9c:
                    ec:ea:26:b8:93:72:71:0e:09:4f:ad:33:23:e0:a9:
                    a6:55:97:54:bf:ab:12:69:74:21:c6:ee:b3:1b:4a:
                    f9:c6:cb:18:8a:dd:cc:83:08:84:c9:81:66:91:18:
                    d8:8b:64:43:c1:3c:ad:ec:e1:fc:58:94:38:b9:f4:
                    28:64:7e:49:cd:09:de:d1:98:43:51:a2:24:8f:b3:
                    c0:52:a9:02:e3:a7:b9:e5:de:09:a2:2d:c0:7c:5e:
                    9d:46:85:1c:c0:7f:ca:14:8c:e3:e3:c7:90:b9:59:
                    54:eb:6e:3c:e1:7f:24:66:e9:41:e1:4b:67:3b:40:
                    25:55:47:19:4e:c4:e6:b6:30:af:cf:dc:9e:89:64:
                    1f:58:9b:a8:b4:9d:25:b5:81:04:b4:8e:e4:68:28:
                    49:83:32:d3:76:35:29:49:75:88:6b:a7:73:3e:fe:
                    6a:5f:da:25:a4:27:d2:98:b8:0a:b3:dd:91:c2:2f:
                    15:22:53:57:61:21:32:80:76:80:e5:ae:5f:e1:dc:
                    d1:b3:9c:b7:b6:25:68:67:4a:2d:ac:d8:fe:7f:ed:
                    3c:8c:60:f7:27:d7:e7:d5:f1:01:76:ea:d4:60:2b:
                    bb:ea:04:55:90:66:7c:db:bc:d4:76:f5:68:85:08:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:CC:3D:44:FD:0A:6B:D5:3D:A7:B6:83:22:2E:7B:D5:16:2F:16
            X509v3 Authority Key Identifier:
                keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/g7DMPUT9CmvVPae2gyIue9UWLxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:53:92:1b:55:52:d1:f8:d3:df:3a:67:15:38:71:c4:10:
         ce:33:cf:ac:de:52:1b:fd:29:be:07:8d:99:ee:11:7f:1e:c6:
         af:3f:6c:32:d9:4d:8a:85:11:67:fd:8f:d6:a9:fc:1e:f7:28:
         a4:a2:d7:b7:8b:73:7e:9c:9c:00:27:3e:88:73:51:b9:5f:72:
         3e:73:f2:6a:d8:3d:3e:f1:8d:cc:b7:af:df:b9:77:0b:28:cd:
         1f:e3:19:8a:ac:d4:6f:f6:78:8e:3b:fa:f9:03:1e:e9:39:71:
         b9:d5:bc:1a:73:22:54:66:4f:85:e0:d6:27:91:be:fb:18:f9:
         b1:72:bc:39:fb:90:b1:91:4c:8a:ae:ac:c0:80:67:3b:ef:fd:
         ca:73:32:fb:bd:a3:c8:5b:de:d8:c7:5c:87:8b:85:7d:3d:08:
         78:33:87:e2:ff:85:2d:c0:51:df:66:aa:b1:a0:5c:4b:58:4e:
         91:1a:b9:9a:a6:d5:72:ef:07:fa:28:c4:64:a8:ff:f0:b5:89:
         be:88:06:50:cb:1c:da:08:cf:ff:7b:b1:85:90:e2:f9:36:ec:
         e1:04:f4:d5:b9:ac:c3:ab:f6:14:60:1c:64:af:44:f1:61:5a:
         e1:9e:fc:5e:e7:89:54:da:ef:60:64:c6:93:c9:8a:48:4f:aa:
         0b:3b:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org