Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa
File:                     wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa (raw, json)
Hash identifier:          lpp5IcVx7q3IMIHIcRzrPArt/2LdVflbV1zvwAXZ05M=
Subject key identifier:   C2:4B:60:2C:1D:1F:30:B2:60:D4:56:BB:3E:2B:27:9F:59:2F:13:6B
Certificate issuer:       /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial:       33A7509B
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa
Signing time:             Sat 01 Jan 2022 15:03:55 +0000
ROA not before:           Sat 01 Jan 2022 15:03:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9009
IP address blocks:        91.108.216.0/22 maxlen: 22
                          91.108.220.0/22 maxlen: 22
                          91.108.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866603163 (0x33a7509b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
        Validity
            Not Before: Jan  1 15:03:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c24b602c1d1f30b260d456bb3e2b279f592f136b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:f4:5d:eb:1d:1c:9b:e3:6c:81:b3:aa:18:
                    fd:4c:67:5e:97:c7:fb:bb:45:de:2c:6d:d1:c6:c7:
                    01:cb:a5:aa:c9:76:a0:37:f3:7d:4a:1d:c8:ca:0b:
                    53:7c:64:81:ab:69:2a:6f:9e:dd:a9:c8:c7:44:87:
                    ef:6e:7a:f0:3a:54:0b:38:b4:e0:1e:fd:0a:09:60:
                    19:e3:b2:3d:01:e2:82:3a:2b:c5:62:84:e4:fa:17:
                    28:63:bb:c7:33:30:db:07:bb:df:fb:8a:ec:bc:da:
                    74:0c:e0:2e:3d:01:87:8f:28:13:94:dd:f0:a0:de:
                    c7:ee:41:37:c1:2c:8c:6e:9c:9e:83:de:24:3e:ce:
                    3b:69:d3:2c:c3:e8:67:19:e8:bc:a9:2d:8d:10:b1:
                    b6:61:b1:1a:3e:d1:15:3c:38:91:67:85:92:27:ff:
                    72:e3:46:e6:15:49:1d:47:1d:af:a4:9b:85:f0:ce:
                    b8:18:27:38:f6:7c:6a:6e:9b:f9:7b:15:0e:d3:d8:
                    50:37:df:cf:fc:af:0f:e0:18:9e:a0:cb:2e:bc:2f:
                    38:2a:40:9f:52:98:e7:80:05:61:bd:3b:2a:e0:30:
                    f2:db:78:66:1a:66:c5:34:89:dc:c2:fa:ea:41:eb:
                    cc:7c:a0:8a:a5:ab:be:67:89:99:05:f6:5a:b1:71:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4B:60:2C:1D:1F:30:B2:60:D4:56:BB:3E:2B:27:9F:59:2F:13:6B
            X509v3 Authority Key Identifier:
                keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.108.204.0/22
                  91.108.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:f9:35:be:09:41:d9:3c:5e:46:ee:e3:23:f9:b3:4e:ad:
         18:73:19:d9:91:35:15:c3:86:5b:2f:6c:6d:63:9d:bb:0c:34:
         39:d8:63:f9:36:a7:10:d5:35:6f:3b:02:17:cc:62:a4:f7:da:
         91:f8:83:14:6b:a4:55:f8:d2:e0:a9:72:35:a1:12:52:f8:d7:
         0b:2d:01:2b:14:50:70:b3:00:8c:5e:53:fc:3a:d5:14:bf:c8:
         5b:e7:a7:ab:fe:0d:04:43:d9:5e:db:ac:3a:f6:d2:b5:85:fb:
         f4:8a:b4:45:00:27:e7:e8:2b:0f:f2:5a:51:5f:94:23:3d:da:
         dc:1a:20:f7:a1:66:45:99:62:7b:96:ca:dc:d9:19:a8:c9:68:
         30:ad:a0:4b:68:59:cd:b8:65:00:d2:3a:fe:46:8c:a0:63:a9:
         86:06:23:e9:e7:55:a7:14:12:06:f0:b2:93:85:e5:64:5a:0a:
         62:b7:e3:fe:4e:d8:61:34:6e:75:6d:fd:f2:25:b8:6d:1c:1c:
         62:c6:8f:1f:ba:49:da:82:ee:b8:07:ea:3f:e1:e9:f9:08:9d:
         19:12:35:df:ec:a7:e3:13:91:ef:a2:e5:8b:7d:a4:2e:ed:bc:
         44:81:8d:1b:a6:ca:ad:0a:6c:05:b0:2f:9b:fa:42:e2:82:48:
         20:18:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org