Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa
File:                     9ozu83W1sHfEqqmxck29iLoJ67w.roa (raw, json)
Hash identifier:          j7A9d90Bi+MZxV/d/MKaTsm0bFhdgKN1XDaiV/3u7mo=
Subject key identifier:   F6:8C:EE:F3:75:B5:B0:77:C4:AA:A9:B1:72:4D:BD:88:BA:09:EB:BC
Certificate issuer:       /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial:       0181D7F578E47176AD17044CC52B84B26E61
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa
Signing time:             Thu 07 Jul 2022 09:19:57 +0000
ROA not before:           Thu 07 Jul 2022 09:19:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        86.106.22.0/24 maxlen: 24
                          176.126.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d7:f5:78:e4:71:76:ad:17:04:4c:c5:2b:84:b2:6e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
        Validity
            Not Before: Jul  7 09:19:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f68ceef375b5b077c4aaa9b1724dbd88ba09ebbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:18:d7:8b:6e:39:19:d1:82:2f:5a:72:b9:
                    89:3d:30:d0:8e:51:0d:67:a6:ef:6f:69:84:47:d9:
                    7e:87:b0:32:7f:aa:af:5b:4b:66:f2:b2:81:98:04:
                    6c:96:d8:06:74:65:5b:61:b9:e9:da:16:d9:04:a2:
                    e4:24:01:60:1e:4d:d4:85:ad:16:fc:72:7f:c6:41:
                    5f:1f:8e:12:2d:a9:d7:a7:75:4b:29:bb:49:b9:44:
                    a3:b5:ef:09:c3:e1:fa:46:55:b0:ac:1c:43:56:14:
                    19:a5:68:86:f7:19:d9:e2:3b:84:5f:36:a0:9f:25:
                    b3:dc:f4:23:10:67:d6:f4:a7:7b:7e:57:d2:5c:5c:
                    14:9c:8f:2d:0a:9a:e7:f0:4a:6a:41:4b:30:a3:28:
                    5c:5e:4f:e6:93:de:c4:1b:46:e3:c0:fe:31:24:bb:
                    97:8c:55:48:bc:43:71:8e:be:04:90:5b:a6:00:b8:
                    df:92:13:60:c2:2a:25:90:17:9e:f2:4a:41:2b:b9:
                    9c:c7:9a:1f:a4:6d:d7:9e:b3:ad:67:52:19:86:56:
                    24:ef:a1:cb:0d:30:8a:15:d2:26:53:32:ea:d1:36:
                    a6:5e:0b:41:e6:ba:c9:df:b1:4c:1e:b2:54:74:99:
                    81:96:3b:c5:82:5f:1d:a8:ff:63:fd:a0:6f:5c:af:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:EE:F3:75:B5:B0:77:C4:AA:A9:B1:72:4D:BD:88:BA:09:EB:BC
            X509v3 Authority Key Identifier:
                keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/9ozu83W1sHfEqqmxck29iLoJ67w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.22.0/24
                  176.126.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:b2:d0:4f:dc:a7:ef:07:65:4c:19:10:7e:7f:64:7f:8c:
         0d:d4:5c:1d:00:b6:b3:e0:4e:42:09:1e:cf:1b:f0:d0:c4:09:
         37:cb:79:58:fd:11:64:8a:5f:36:90:f1:18:ef:48:db:93:0b:
         7a:19:51:11:59:a8:18:70:58:b8:29:d9:84:1e:27:07:2c:24:
         72:a1:4e:96:d8:bb:b8:55:f2:5b:8a:74:a5:89:72:a9:62:e0:
         18:46:81:2c:ba:ae:1e:d3:fa:ab:2f:b3:c2:7a:ab:a8:d8:f0:
         4d:ac:ff:b9:33:27:f0:06:1d:c7:70:2e:37:a5:4d:27:c5:5c:
         73:58:bc:42:5b:61:35:1e:34:70:1f:c7:70:e9:05:06:71:0e:
         4d:9c:2b:1b:fe:8e:82:af:4d:7d:e3:3e:dc:5b:e0:22:f2:de:
         ed:fc:b4:e5:b6:92:b1:4a:07:99:95:59:8e:90:10:75:9c:65:
         bf:7d:49:fc:a3:2c:ed:3f:39:42:29:0d:1e:43:4a:58:17:2a:
         11:c4:fa:58:f1:14:4b:57:06:f2:c2:b7:06:c3:8d:6c:8a:bc:
         27:eb:83:93:22:99:18:29:f4:11:c0:3d:0a:c0:28:c9:f1:ab:
         e1:f6:92:e4:1e:4e:ef:f7:03:a6:1b:69:12:0d:d7:90:8f:f3:
         1b:d1:18:41
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYHX9XjkcXatFwRMxSuEsm5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWI5MDBhYjlmZmYxMzg4YTRmNzQ2YTg5ZWM0MTg1OWVm
NDc3OWUwHhcNMjIwNzA3MDkxOTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhjZWVmMzc1YjViMDc3YzRhYWE5YjE3MjRkYmQ4OGJhMDllYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuoY14tuORnRgi9acrmJPTDQjlEN
Z6bvb2mER9l+h7Ayf6qvW0tm8rKBmARsltgGdGVbYbnp2hbZBKLkJAFgHk3Uha0W
/HJ/xkFfH44SLanXp3VLKbtJuUSjte8Jw+H6RlWwrBxDVhQZpWiG9xnZ4juEXzag
nyWz3PQjEGfW9Kd7flfSXFwUnI8tCprn8EpqQUswoyhcXk/mk97EG0bjwP4xJLuX
jFVIvENxjr4EkFumALjfkhNgwiolkBee8kpBK7mcx5ofpG3XnrOtZ1IZhlYk76HL
DTCKFdImUzLq0TamXgtB5rrJ37FMHrJUdJmBljvFgl8dqP9j/aBvXK9ssQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPaM7vN1tbB3xKqpsXJNvYi6Ceu8MB8GA1UdIwQY
MBaAFHFbkAq5//E4ik90aonsQYWe9HeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Z1UUNybl84VGlLVDNScWlleEJoWjcwZDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni84MWViZGQtZGM5ZC00ZDgyLThkMmYt
ZTc5YWVhZTM5OTQwLzEvOW96dTgzVzFzSGZFcXFteGNrMjlpTG9KNjd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni84MWViZGQtZGM5ZC00ZDgyLThkMmYtZTc5YWVhZTM5OTQw
LzEvY1Z1UUNybl84VGlLVDNScWlleEJoWjcwZDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVmoWAwQA
sH7fMA0GCSqGSIb3DQEBCwUAA4IBAQB6f7LQT9yn7wdlTBkQfn9kf4wN1FwdALaz
4E5CCR7PG/DQxAk3y3lY/RFkil82kPEY70jbkwt6GVERWagYcFi4KdmEHicHLCRy
oU6W2Lu4VfJbinSliXKpYuAYRoEsuq4e0/qrL7PCequo2PBNrP+5MyfwBh3HcC43
pU0nxVxzWLxCW2E1HjRwH8dw6QUGcQ5NnCsb/o6Cr0194z7cW+Ai8t7t/LTltpKx
SgeZlVmOkBB1nGW/fUn8oyztPzlCKQ0eQ0pYFyoRxPpY8RRLVwbywrcGw41sirwn
64OTIpkYKfQRwD0KwCjJ8avh9pLkHk7v9wOmG2kSDdeQj/Mb0RhB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org