Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/7ZnJ8S1-xmn6Cd49gg9QTF2Hjws.roa
File:                     7ZnJ8S1-xmn6Cd49gg9QTF2Hjws.roa (raw, json)
Hash identifier:          JPSovvFainwUFVaHNciEfjT5lfGQ0UNOA1muPWszUO8=
Subject key identifier:   ED:99:C9:F1:2D:7E:C6:69:FA:09:DE:3D:82:0F:50:4C:5D:87:8F:0B
Certificate issuer:       /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial:       0181DD038155A25B6436C7DEF227F9069C88
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/7ZnJ8S1-xmn6Cd49gg9QTF2Hjws.roa
Signing time:             Fri 08 Jul 2022 08:53:23 +0000
ROA not before:           Fri 08 Jul 2022 08:53:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210027
IP address blocks:        185.180.145.0/24 maxlen: 24
                          176.126.174.0/24 maxlen: 24
                          86.106.22.0/24 maxlen: 24
                          176.126.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:dd:03:81:55:a2:5b:64:36:c7:de:f2:27:f9:06:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
        Validity
            Not Before: Jul  8 08:53:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ed99c9f12d7ec669fa09de3d820f504c5d878f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:a9:44:eb:db:2a:93:cc:c6:1d:fc:4c:37:
                    5c:53:ca:c2:35:f0:8e:cc:80:a7:58:2c:31:1f:ab:
                    17:f4:72:2c:e9:75:10:59:78:fb:16:55:c6:01:4c:
                    11:0f:20:87:f1:2f:25:30:61:3d:5c:d4:9d:0a:b7:
                    ef:86:3e:41:db:81:57:2d:2c:07:eb:2e:b5:09:17:
                    54:3c:f3:27:fc:5f:c1:47:51:77:73:51:9a:02:a6:
                    fb:93:6a:42:39:f0:eb:d4:41:c4:45:c9:64:1c:32:
                    aa:a2:5a:83:44:0b:25:92:b4:b8:37:3a:de:18:7d:
                    2f:2d:10:28:74:bd:f5:f6:87:d1:4d:57:65:8c:fa:
                    cc:0b:c0:d5:ac:28:7e:43:5c:32:d1:ee:f6:8f:2f:
                    1c:23:d6:82:ef:60:ce:51:90:bd:6d:5f:90:3b:5d:
                    45:54:c5:ea:be:62:ca:54:52:79:db:43:ca:dd:2f:
                    d2:7d:bd:8a:85:dc:01:46:3d:2c:ae:71:7d:68:0c:
                    9f:f6:1f:95:46:bb:e0:c3:97:12:99:85:a6:7e:cf:
                    eb:ef:57:13:aa:53:6c:10:0e:79:64:c1:3e:21:17:
                    74:b9:01:07:da:1f:d6:29:36:df:b5:2d:72:d5:b2:
                    d3:08:0c:ba:58:fa:75:ac:64:90:06:5e:2a:b4:f4:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:C9:F1:2D:7E:C6:69:FA:09:DE:3D:82:0F:50:4C:5D:87:8F:0B
            X509v3 Authority Key Identifier:
                keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/7ZnJ8S1-xmn6Cd49gg9QTF2Hjws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.22.0/24
                  176.126.174.0/24
                  176.126.223.0/24
                  185.180.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:94:1d:ff:c3:66:d9:d4:71:86:20:ba:2c:bb:8d:ca:38:fa:
         a4:a2:c0:9f:fe:4e:57:fb:b1:ba:b8:64:78:3c:96:79:d2:9a:
         9c:1a:ac:5e:4e:fd:ce:7c:88:4c:cb:6d:f6:16:ba:50:8e:d9:
         a0:cd:3a:26:2e:1e:9d:24:bf:43:f6:71:b5:c9:62:bf:47:9a:
         70:27:0b:1b:c7:2d:b3:46:31:39:c6:d7:14:78:3d:81:b2:43:
         8a:ce:ef:11:27:7e:8a:64:1d:19:00:e0:99:92:41:90:dc:ca:
         01:95:ef:f7:0b:d9:00:c1:47:70:08:61:d8:c1:b1:ff:7c:9e:
         9e:26:a0:41:5c:8f:94:43:08:2b:14:c7:ab:d0:e2:ef:2b:6b:
         bc:63:c9:95:6d:34:b6:14:f3:8a:1d:a7:de:bc:d6:ad:80:a3:
         8b:0b:32:2a:fb:b8:c5:8c:0a:68:f2:77:31:bc:48:38:73:4c:
         6b:96:b3:eb:ce:7b:9f:96:98:22:3f:92:0d:c5:1b:ff:6e:67:
         e9:5b:46:46:d1:25:89:30:48:05:95:67:1c:5a:eb:dc:71:ab:
         81:3a:87:c5:45:7f:7c:ae:3b:ba:59:75:29:42:51:58:14:10:
         ad:1b:c0:87:dd:d1:b4:df:42:e5:08:5f:ac:1b:bf:a2:8d:2a:
         9c:f9:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org