Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa
File:                     _6pi0a_6gyJfxNrqI8JeOkVDIUo.roa (raw, json)
Hash identifier:          6zsKWZH0RCsr10fR4okC72ABbQlUKsKi1MV3/0TejsM=
Subject key identifier:   FF:AA:62:D1:AF:FA:83:22:5F:C4:DA:EA:23:C2:5E:3A:45:43:21:4A
Certificate issuer:       /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial:       D57A41
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa
Signing time:             Sat 01 Jan 2022 01:53:33 +0000
ROA not before:           Sat 01 Jan 2022 01:53:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7029
IP address blocks:        86.106.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13990465 (0xd57a41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
        Validity
            Not Before: Jan  1 01:53:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ffaa62d1affa83225fc4daea23c25e3a4543214a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:45:47:f6:47:5e:75:48:1c:fe:10:c7:80:47:
                    28:e1:bc:2f:3f:df:68:bc:6d:d4:17:ae:03:15:03:
                    e4:2a:f0:82:a6:6f:74:16:ca:10:b6:07:f7:b8:42:
                    32:db:d9:e9:ce:21:64:36:8f:60:85:ad:f4:94:c5:
                    03:f6:17:1e:d9:16:3d:8d:b9:87:2b:fd:bb:ea:ea:
                    e9:58:f1:20:b6:11:9a:5e:a4:d5:45:ea:1d:bf:c2:
                    a1:f1:37:f1:fe:46:3e:63:69:95:fd:73:d5:ee:aa:
                    45:18:1a:f1:fc:d8:2f:34:a4:94:9a:cc:04:63:69:
                    92:70:37:2a:dc:20:86:26:eb:30:76:b1:1c:94:f1:
                    9f:09:93:8e:71:50:57:a8:6f:97:ad:0f:02:b3:e3:
                    c1:a8:b6:c5:8d:a3:0b:1b:03:80:6a:da:8b:62:d7:
                    78:9d:ea:10:9d:be:ca:7e:bf:46:32:e4:6e:ba:48:
                    6c:3f:4e:7b:b6:30:34:68:9d:98:e1:25:9b:ac:9b:
                    80:31:4d:83:e9:bc:c5:46:3a:a6:f8:50:73:90:86:
                    b7:a6:7b:4e:0e:ef:e8:cf:d4:c4:a0:3c:92:fc:f3:
                    4d:a6:30:a4:d9:ec:38:40:69:76:eb:da:d3:70:51:
                    2f:3d:d2:e6:18:05:a7:eb:f8:cf:85:d8:01:1a:48:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:62:D1:AF:FA:83:22:5F:C4:DA:EA:23:C2:5E:3A:45:43:21:4A
            X509v3 Authority Key Identifier:
                keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/_6pi0a_6gyJfxNrqI8JeOkVDIUo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:4f:13:a8:92:59:45:0a:92:0e:cb:aa:92:32:23:dc:c4:
         89:1d:65:53:55:3c:d7:d4:f4:53:e7:c4:6d:a7:0b:a7:7e:f2:
         bd:65:75:51:96:4c:dd:ed:fc:59:22:51:14:2a:81:40:bb:8e:
         5b:a7:60:0e:e6:2d:3a:fc:ad:0f:72:48:50:50:7c:aa:d1:df:
         36:ac:28:8b:e1:0f:72:2f:be:70:75:61:08:17:8c:7a:55:1f:
         09:0e:23:c7:e9:53:49:29:e8:d3:cb:b0:c8:7d:62:c0:bb:79:
         67:6f:a5:a0:80:84:d9:59:6e:33:5d:ca:c3:e3:36:2c:c6:fa:
         a2:cd:3f:06:aa:a5:ce:db:5a:d8:44:42:f1:07:c1:32:9f:11:
         f3:41:8f:cc:9e:c1:d5:1a:61:61:6a:be:aa:47:98:2f:23:43:
         f6:59:d0:d7:da:bb:56:06:d7:f3:c6:89:dd:c7:79:4e:dc:49:
         c9:99:fe:65:f7:21:86:4b:2d:29:98:a1:b0:09:6b:e7:df:f5:
         72:d2:39:01:07:76:1a:0b:fd:b7:96:e8:fc:fc:ac:5a:7a:93:
         1c:a1:94:1e:3a:07:4d:ca:0e:f2:be:ff:47:ff:fa:5a:4d:57:
         e4:9d:c2:c7:75:fa:48:fc:69:3e:a7:8c:91:80:c5:5f:e0:ea:
         23:99:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org