Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/3B83i5-73gi2vFsK6vd1BRnm55c.roa
File:                     3B83i5-73gi2vFsK6vd1BRnm55c.roa (raw, json)
Hash identifier:          wFnMvahtqXTEITlSRAVyPadXX63+nFcTmZutTjyy0RU=
Subject key identifier:   DC:1F:37:8B:9F:BB:DE:08:B6:BC:5B:0A:EA:F7:75:05:19:E6:E7:97
Certificate issuer:       /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial:       01423BF5
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/3B83i5-73gi2vFsK6vd1BRnm55c.roa
Signing time:             Sat 01 Jan 2022 06:54:22 +0000
ROA not before:           Sat 01 Jan 2022 06:54:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        83.138.50.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21117941 (0x1423bf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Validity
            Not Before: Jan  1 06:54:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dc1f378b9fbbde08b6bc5b0aeaf7750519e6e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:f2:c1:30:f4:71:87:63:d4:cd:d8:d5:be:
                    f6:58:e4:2c:52:00:c7:f4:7a:69:29:e1:0e:19:13:
                    7b:eb:36:9b:04:52:6b:62:ff:e0:33:27:1b:42:2b:
                    0c:ce:0e:19:f7:ba:46:29:f1:f2:63:13:89:e2:31:
                    93:8a:0d:f3:7d:f5:13:a9:04:ae:d0:f6:b0:12:9c:
                    d6:1e:f4:ee:6c:07:58:54:1e:29:87:7d:94:ac:8a:
                    42:44:a0:98:3f:7e:1d:2d:29:7b:72:bd:92:1e:cb:
                    44:38:8c:30:47:c4:92:31:6e:eb:31:14:92:75:4c:
                    78:aa:24:15:11:c7:d6:7a:aa:23:44:a9:e1:3d:ff:
                    66:2f:c9:a0:2e:d0:1a:78:1b:28:e1:8d:a2:73:34:
                    1f:13:a5:59:de:a3:f5:e4:49:22:cb:c3:32:b8:71:
                    e8:3f:27:29:bd:35:38:5d:91:82:b5:26:26:63:c3:
                    f3:ac:05:71:47:d9:e4:55:0a:b3:1e:8b:35:cd:b9:
                    a8:26:5e:6b:27:20:4b:8d:89:8e:f9:a8:2e:ee:0a:
                    94:47:86:ef:97:0a:19:44:f5:42:46:65:af:e8:cc:
                    3d:b5:fe:ad:b1:9d:7b:e3:e0:d1:8d:a6:c7:ea:f5:
                    03:1a:80:eb:d4:d9:b2:09:65:88:fd:d8:6d:50:2e:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:37:8B:9F:BB:DE:08:B6:BC:5B:0A:EA:F7:75:05:19:E6:E7:97
            X509v3 Authority Key Identifier:
                keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/3B83i5-73gi2vFsK6vd1BRnm55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.138.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:47:41:0b:15:ea:2e:2b:a9:2e:6a:a2:35:e9:cd:1e:62:
         4a:c5:e3:58:0c:43:98:b3:9f:e9:b4:ec:44:13:b3:06:69:d3:
         c2:2f:e1:2f:5f:e4:1b:ac:da:de:69:e3:44:6a:84:2f:01:29:
         b6:78:cd:35:68:62:0e:36:b6:d7:6a:27:d8:62:10:21:39:87:
         5e:cb:d7:5b:3b:9a:36:24:cb:3c:e5:b0:87:0a:f5:f3:ea:e3:
         99:6a:18:55:8f:25:8f:9e:5d:37:ca:fe:13:e0:99:6a:db:4a:
         34:81:18:ab:91:fe:5a:2e:59:f3:99:f9:8e:15:a6:81:73:a4:
         c6:36:de:b7:ad:06:03:04:26:b0:34:ab:60:a3:b0:57:37:0a:
         ec:35:01:16:e6:9f:d7:25:be:85:5d:12:19:22:70:7d:b9:6d:
         6e:c8:54:eb:50:c1:70:87:fb:78:e2:38:9f:1c:51:8f:bd:c4:
         f8:50:5b:0f:3f:f3:a5:c0:ae:af:5b:88:80:52:09:d1:60:8e:
         f9:b1:e1:68:e6:5b:99:93:c3:2c:7a:6d:75:76:da:34:6c:c4:
         0b:78:5b:e4:24:60:9c:0b:dd:20:04:6d:c0:dc:89:40:e1:f6:
         aa:c5:8d:f7:eb:03:c2:d1:b4:e0:f7:bc:ec:de:79:0b:cd:e7:
         a8:8e:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org