Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/vW6EoiDB-H1RuOJLwEUmemve4Hg.roa
File:                     vW6EoiDB-H1RuOJLwEUmemve4Hg.roa (raw, json)
Hash identifier:          TxJyd6lHQfFnJeT/EylQWXjcrfkfiGSCehB+52oEPxc=
Subject key identifier:   BD:6E:84:A2:20:C1:F8:7D:51:B8:E2:4B:C0:45:26:7A:6B:DE:E0:78
Certificate issuer:       /CN=715b900ab9fff1388a4f746a89ec41859ef4779e
Certificate serial:       01856307ECCBD98D4C9A6683B6EC1319C627
Authority key identifier: 71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/vW6EoiDB-H1RuOJLwEUmemve4Hg.roa
Signing time:             Fri 30 Dec 2022 12:35:41 +0000
ROA not before:           Fri 30 Dec 2022 12:35:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        86.106.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:63:07:ec:cb:d9:8d:4c:9a:66:83:b6:ec:13:19:c6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715b900ab9fff1388a4f746a89ec41859ef4779e
        Validity
            Not Before: Dec 30 12:35:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd6e84a220c1f87d51b8e24bc045267a6bdee078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0e:58:db:6d:86:c5:10:2c:7d:42:4b:60:62:
                    6b:f2:db:a4:40:ad:b3:b9:ca:3f:ea:f2:6b:e7:0a:
                    19:fd:27:83:cc:11:f4:d9:2b:f6:a7:8b:28:1d:c7:
                    29:1b:3f:b7:36:55:37:04:4c:3b:c0:09:48:28:39:
                    79:fe:d6:1f:6f:77:f0:dc:36:c5:5d:c6:90:76:9b:
                    36:cd:20:5f:2e:99:69:0d:50:d9:60:8a:78:29:af:
                    5f:2c:95:54:ce:52:0b:df:87:b4:8f:02:3a:2d:35:
                    e0:a0:70:12:f0:9f:02:58:0d:12:63:d7:7a:28:fd:
                    63:fe:6c:84:a5:30:07:31:90:5d:aa:7a:86:b6:e8:
                    18:08:0d:86:80:40:51:11:37:13:03:4f:39:4e:52:
                    3d:b1:88:0d:a0:52:68:55:4f:bc:05:6b:5b:a9:0f:
                    c4:b5:53:03:3e:37:08:3a:0a:7a:b6:2f:1e:bb:5d:
                    66:b8:97:d4:81:29:47:be:f7:a1:d1:9f:f2:43:82:
                    30:a5:20:0e:c7:fb:4e:6b:c6:40:d5:fc:a5:00:d8:
                    b4:87:00:fa:7f:b9:ac:79:d5:06:db:9f:b2:71:ac:
                    fe:16:26:b8:a7:4e:9f:3d:09:aa:c0:93:c4:8b:96:
                    bf:93:17:55:e8:28:69:77:42:7a:cb:25:bf:6e:9d:
                    32:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6E:84:A2:20:C1:F8:7D:51:B8:E2:4B:C0:45:26:7A:6B:DE:E0:78
            X509v3 Authority Key Identifier:
                keyid:71:5B:90:0A:B9:FF:F1:38:8A:4F:74:6A:89:EC:41:85:9E:F4:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuQCrn_8TiKT3RqiexBhZ70d54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/vW6EoiDB-H1RuOJLwEUmemve4Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81ebdd-dc9d-4d82-8d2f-e79aeae39940/1/cVuQCrn_8TiKT3RqiexBhZ70d54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:c1:a6:2d:90:9d:fc:c0:a3:1b:dd:b5:07:6a:97:dc:d9:
         56:0c:0e:f0:16:56:f8:71:a7:27:93:35:68:50:a2:07:b5:df:
         70:8c:2f:2a:dd:0e:96:2d:5e:83:d0:5c:dd:65:7f:b6:e8:42:
         bf:d5:36:ac:f7:e3:11:e6:43:52:fd:a6:b6:cf:dc:ac:a0:46:
         15:e1:91:3b:48:c4:15:5e:19:16:c0:49:f5:9e:e7:37:3f:7f:
         6e:88:d2:aa:87:bf:da:e7:d3:b3:3b:87:ac:3e:7c:16:8d:01:
         e2:48:a4:79:7f:f2:1c:0f:db:45:35:59:cb:75:4b:d1:7d:83:
         19:f2:f4:a1:b4:fa:ff:ea:1b:da:e1:cf:a7:19:c9:40:1b:6c:
         3f:10:2c:d3:fd:f2:3a:c4:f6:da:00:70:22:55:b8:13:0d:7c:
         20:af:7c:da:1b:df:8c:88:8c:b5:9d:45:69:f3:1f:1e:2a:f1:
         d7:2b:06:84:4a:01:b6:2e:11:19:68:dc:7d:c2:01:92:45:62:
         4b:c0:bb:b1:9f:71:95:db:9f:a1:00:4f:cf:58:45:83:8b:41:
         86:41:d3:ea:64:59:73:01:cb:67:83:06:7c:2d:16:a1:ce:af:
         f0:92:17:c9:01:5c:79:a1:cc:83:24:26:39:98:62:b5:bb:15:
         b2:b6:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-ams.rpki-client.org