Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/EloWADIGDzwtR6WcYcIwDni08tM.roa
File:                     EloWADIGDzwtR6WcYcIwDni08tM.roa (raw, json)
Hash identifier:          247Zw9tBGKh3SnYQ27D4qBbr7jMgaI5cs6I1HjtwdZk=
Subject key identifier:   12:5A:16:00:32:06:0F:3C:2D:47:A5:9C:61:C2:30:0E:78:B4:F2:D3
Certificate issuer:       /CN=e817e052fe8da0a80aff1084b5e597606d14e220
Certificate serial:       01856D789F8EA681928FAB251D1F295D3781
Authority key identifier: E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/EloWADIGDzwtR6WcYcIwDni08tM.roa
Signing time:             Sun 01 Jan 2023 13:14:59 +0000
ROA not before:           Sun 01 Jan 2023 13:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43606
IP address blocks:        213.232.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:9f:8e:a6:81:92:8f:ab:25:1d:1f:29:5d:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e817e052fe8da0a80aff1084b5e597606d14e220
        Validity
            Not Before: Jan  1 13:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=125a160032060f3c2d47a59c61c2300e78b4f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:10:08:f3:e7:a2:e9:af:58:1b:98:22:a3:
                    ad:80:6a:13:d5:b8:1d:b2:99:ec:b8:a9:d2:57:a4:
                    ce:a7:04:45:ed:b2:9a:3e:81:35:5d:aa:57:15:7b:
                    d9:38:97:fc:50:f7:24:a0:19:3f:96:30:7f:34:db:
                    3f:4d:36:26:e4:b5:72:eb:d1:c6:69:93:2d:71:50:
                    28:1c:86:af:7b:14:98:a7:88:b7:74:eb:9c:b5:e0:
                    48:ad:db:01:9d:03:6f:11:62:93:67:65:0a:1a:74:
                    6a:71:b4:95:16:ce:1e:5e:f7:8c:a4:43:0f:01:fe:
                    48:f0:4e:fd:9a:95:b4:5d:92:da:7c:26:b4:c4:8e:
                    fb:57:96:6e:93:27:19:64:01:2d:9d:29:53:fc:8c:
                    3c:50:54:27:b3:b9:86:76:3b:8c:b5:19:64:0d:fa:
                    20:45:29:9c:35:b4:c8:0e:72:53:23:c6:04:94:0d:
                    2a:e4:9e:97:8c:d5:b2:53:ce:91:aa:a3:1b:1a:42:
                    29:9c:52:c2:fa:2f:2a:5b:86:c8:2a:63:9c:c7:3d:
                    5e:5f:da:a1:3a:63:df:07:81:38:60:20:55:69:a3:
                    a9:0c:4b:cc:29:c0:4e:37:4c:49:8f:47:8a:fb:63:
                    7c:51:3f:43:b5:0b:b6:fc:2e:fd:67:d3:9e:9e:47:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:16:00:32:06:0F:3C:2D:47:A5:9C:61:C2:30:0E:78:B4:F2:D3
            X509v3 Authority Key Identifier:
                keyid:E8:17:E0:52:FE:8D:A0:A8:0A:FF:10:84:B5:E5:97:60:6D:14:E2:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BfgUv6NoKgK_xCEteWXYG0U4iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/EloWADIGDzwtR6WcYcIwDni08tM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/83e4d0-1071-4fd2-9d22-da6fa1106ffb/1/6BfgUv6NoKgK_xCEteWXYG0U4iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.232.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:4a:eb:7c:f4:e2:2d:3a:27:f7:1c:80:63:2b:39:fa:bf:02:
         19:18:5a:56:81:41:f4:fb:42:54:a0:47:7a:16:1b:10:7d:e5:
         56:5d:95:b2:01:da:8b:c9:f3:68:77:97:dc:c8:77:a8:d5:08:
         31:5a:8e:93:ae:b6:55:78:c0:67:e1:57:84:36:c7:ef:2d:e4:
         a6:8d:27:7a:ef:63:6e:e7:53:8e:d7:6c:88:87:7f:e8:38:4d:
         80:98:ef:75:5c:71:83:22:0f:9d:af:2a:62:9d:c6:cc:65:4a:
         34:9c:9b:02:2f:f0:0e:e2:94:f2:3e:11:54:f3:28:39:44:a8:
         09:fd:b3:f1:3e:3e:b8:ec:22:a0:04:b8:d6:45:1c:4d:3d:84:
         cf:6b:5d:90:fc:70:85:02:48:2f:38:84:50:70:ca:1c:f1:f2:
         e0:58:f8:de:1d:02:16:83:08:3a:82:92:18:a3:e1:e6:6b:9a:
         79:31:ad:12:42:64:15:80:3d:8d:86:d5:6b:93:ba:87:97:bd:
         3b:12:48:2f:6c:d2:b8:51:cf:05:3d:a9:f2:c0:ca:58:83:a9:
         43:40:04:1d:59:c6:f0:9c:67:b4:f5:b2:02:2d:d3:85:b8:c0:
         d4:03:75:7b:5d:b1:75:17:77:c3:9b:aa:86:30:de:f1:2f:74:
         0d:f7:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 11:46:00 2023 by rpki-client on console-ams.rpki-client.org