Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/fKblZxOAbiCtHllKYLcIRKQ8Xr8.roa
File:                     fKblZxOAbiCtHllKYLcIRKQ8Xr8.roa (raw, json)
Hash identifier:          ab8s3pc8RI6aFtOz0ud1jD1jCsfUxd/obqeWmQNwGJk=
Subject key identifier:   7C:A6:E5:67:13:80:6E:20:AD:1E:59:4A:60:B7:08:44:A4:3C:5E:BF
Certificate issuer:       /CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
Certificate serial:       124CDC92
Authority key identifier: E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/fKblZxOAbiCtHllKYLcIRKQ8Xr8.roa
Signing time:             Tue 24 May 2022 06:25:30 +0000
ROA not before:           Tue 24 May 2022 06:25:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.160.29.0/24 maxlen: 24
                          185.160.30.0/24 maxlen: 24
                          185.160.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307027090 (0x124cdc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61015a3a47d4dd02bd4ebbb0983df5308158427
        Validity
            Not Before: May 24 06:25:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ca6e56713806e20ad1e594a60b70844a43c5ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:9c:2c:97:10:35:cc:65:e2:46:ad:9e:c3:
                    3b:ed:29:82:70:49:ab:7a:b0:ee:2b:dd:4a:99:c5:
                    29:34:d7:df:8a:a7:6f:30:3e:4b:98:64:31:0b:eb:
                    cf:83:60:74:a2:fa:2c:44:d6:26:78:a8:08:88:e3:
                    d6:e1:f9:87:b1:2e:59:53:59:e7:6e:a6:cc:5e:ca:
                    e2:6b:9b:fe:06:84:53:aa:5e:04:36:43:bd:8c:76:
                    c2:5e:18:44:79:e9:45:22:71:dc:63:e1:4f:86:58:
                    d0:f4:50:9c:1f:69:d2:11:1a:72:8a:93:95:40:e9:
                    a5:bd:aa:15:37:c1:eb:17:b7:38:e4:ed:09:3e:75:
                    0b:a6:4c:c9:a5:c9:72:8e:6b:01:b4:56:8f:c8:3c:
                    70:3e:89:f7:a9:c6:07:93:0a:06:7a:ee:19:c0:26:
                    2b:3e:c2:ea:71:0e:14:89:fd:a1:be:5a:d0:1b:b8:
                    c2:e3:10:2f:58:8b:18:55:59:fb:84:e2:11:75:e7:
                    fe:15:10:c4:c5:47:80:99:f9:8e:0d:b1:32:de:88:
                    22:9b:d4:b4:24:8b:52:9b:ab:10:4e:15:e5:a4:34:
                    c6:b2:16:e1:55:28:52:e6:3b:2d:e6:62:0a:64:35:
                    9b:d2:bf:7b:d2:c6:d8:6c:35:cd:80:05:f0:8a:4f:
                    cc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:E5:67:13:80:6E:20:AD:1E:59:4A:60:B7:08:44:A4:3C:5E:BF
            X509v3 Authority Key Identifier:
                keyid:E6:10:15:A3:A4:7D:4D:D0:2B:D4:EB:BB:09:83:DF:53:08:15:84:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/fKblZxOAbiCtHllKYLcIRKQ8Xr8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a984fe-e67d-4e21-9080-3bf64d369fe3/1/5hAVo6R9TdAr1Ou7CYPfUwgVhCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.29.0-185.160.31.255

    Signature Algorithm: sha256WithRSAEncryption
         03:93:ee:5c:bd:a9:b8:9f:7d:d8:99:cc:aa:8d:3d:c4:d8:c1:
         31:e7:af:66:9d:d6:21:95:a9:40:68:38:4e:24:84:10:a7:d5:
         79:4a:d9:2f:95:5a:6b:f2:97:ab:3f:3c:07:fa:9e:3f:72:fa:
         b4:56:23:a7:7c:a3:ba:f5:64:96:41:ce:2d:48:76:f1:77:28:
         ec:ac:bf:cf:01:c6:a0:97:bd:90:3f:3a:d0:bb:b5:4f:82:34:
         a3:60:10:af:7f:bb:ba:ac:b9:88:12:0f:5e:97:c5:a8:2d:b4:
         88:6d:94:30:89:a8:8b:c7:c4:76:a9:81:eb:85:ea:9c:a0:f1:
         c7:42:4a:9f:e5:db:b1:bc:ee:d0:0d:f8:69:46:ff:8e:9e:3c:
         a1:d1:db:d1:0c:cd:26:e3:df:88:bc:d0:55:fb:e2:c2:52:98:
         c0:dc:99:2d:53:91:ee:6a:92:f4:49:68:9c:35:10:df:e1:06:
         7c:dd:6a:6b:91:be:c9:6c:9d:bc:3e:e5:67:26:be:62:7d:da:
         e2:18:95:1a:4f:f9:ec:db:d1:2c:0e:cf:83:60:ee:6b:56:25:
         96:80:27:aa:63:6f:1f:62:ac:ec:76:99:1c:92:ae:5b:ca:75:
         17:5a:d4:f9:0e:4d:4f:d1:b1:ce:d2:03:03:ef:33:24:de:7c:
         ee:b6:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org