Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa
File:                     6pGOy13A0yv2XpGMHC49XWUcOU0.roa (raw, json)
Hash identifier:          Gf8loyuCjHR/BOSih1YaIkWguCsWDzoRqR7fbMfcJuo=
Subject key identifier:   EA:91:8E:CB:5D:C0:D3:2B:F6:5E:91:8C:1C:2E:3D:5D:65:1C:39:4D
Certificate issuer:       /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial:       0804CB
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa
Signing time:             Thu 03 Feb 2022 16:57:15 +0000
ROA not before:           Thu 03 Feb 2022 16:57:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     701
IP address blocks:        188.208.103.0/24 maxlen: 24
                          94.176.214.0/23 maxlen: 23
                          62.192.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525515 (0x804cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
        Validity
            Not Before: Feb  3 16:57:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea918ecb5dc0d32bf65e918c1c2e3d5d651c394d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:3a:48:b4:34:9e:3d:73:c7:65:ab:dd:21:
                    5b:29:eb:d7:ee:b8:77:2f:87:94:ab:29:80:a8:0f:
                    df:ba:21:a9:85:c0:d2:5b:a7:4c:f2:68:05:81:5a:
                    39:7e:c4:4e:c1:8b:2c:06:62:f7:22:5b:d0:df:5b:
                    c8:c5:11:df:ea:8f:21:cc:82:cf:5f:a8:a7:3f:4d:
                    45:b4:02:95:06:a2:ae:2a:c8:0b:af:30:e9:e2:21:
                    fb:93:ab:56:05:54:7e:f5:2e:02:0e:4a:4a:23:7b:
                    ec:22:5f:7b:09:e0:f3:a2:1d:1a:9f:da:16:c2:47:
                    92:50:ad:3f:e0:9b:f7:06:56:94:f1:06:51:82:09:
                    8a:5b:6a:96:6a:eb:c4:c9:e0:d5:d0:72:d3:f3:7a:
                    71:3e:b8:41:0c:27:92:34:f8:bb:b0:e7:27:3e:a4:
                    7a:d8:21:87:66:84:0d:fb:4e:e3:6c:fb:fe:f7:43:
                    10:0d:c3:49:4a:6f:17:a1:e1:71:cc:b5:40:16:bf:
                    96:87:0a:83:80:d0:65:92:c0:c0:99:f9:a2:04:2e:
                    15:51:b7:b1:a2:1e:04:f1:52:6c:91:0b:68:05:68:
                    cc:5d:16:a8:bf:86:57:4c:14:e4:da:35:e7:9c:f6:
                    89:cf:17:a5:88:e6:8e:90:3e:9c:9b:67:56:d2:9b:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:91:8E:CB:5D:C0:D3:2B:F6:5E:91:8C:1C:2E:3D:5D:65:1C:39:4D
            X509v3 Authority Key Identifier:
                keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/6pGOy13A0yv2XpGMHC49XWUcOU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.192.152.0/24
                  94.176.214.0/23
                  188.208.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:10:44:2c:75:1d:e7:1c:67:88:e7:71:f4:81:5c:70:3a:f6:
         f4:63:6d:c3:39:0b:75:79:da:4f:de:e2:e7:e7:65:1e:ff:09:
         c8:88:ad:8f:55:e1:28:92:63:43:b7:d9:5e:04:c4:2a:66:46:
         f5:3d:97:33:40:b9:40:2c:51:f9:1e:b3:a9:ba:ca:3a:b9:a6:
         b6:8a:b1:6a:ce:f5:e3:13:a9:d1:a2:59:8b:a0:4c:4a:a7:a0:
         84:9d:c4:29:e8:d2:44:c6:ed:49:c6:45:72:61:15:67:a9:0a:
         57:4b:32:41:19:3a:e9:c4:1c:0f:a7:28:c7:eb:f2:ae:55:6a:
         9a:81:63:46:b0:b5:5d:c8:ff:e5:f6:01:ef:17:46:17:14:9b:
         6e:bb:af:0a:58:2a:b3:9f:61:32:e4:0d:c5:5b:1b:a3:ed:44:
         d3:79:91:c8:8f:a0:24:5b:b0:43:d3:8f:24:71:9b:81:eb:07:
         91:5c:61:be:08:bc:6f:cf:99:21:f4:54:c1:ef:25:dd:75:9e:
         54:22:c3:c4:75:e7:9e:37:88:9e:66:8d:59:cb:fe:4c:93:5d:
         1b:61:a9:4f:04:ed:71:29:02:fb:bf:3f:0e:f4:cc:37:7a:3d:
         36:43:1b:bf:66:8d:09:4c:d6:81:50:b3:b0:25:b4:5b:a5:20:
         6c:2f:13:44
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIDCATLMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
MWVhMTVjMjFiN2Q1NWRlYTRiZGM4NjFiMWMwYWZjOWU0MzcwMzEwHhcNMjIwMjAz
MTY1NzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlYTkxOGVjYjVkYzBk
MzJiZjY1ZTkxOGMxYzJlM2Q1ZDY1MWMzOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2Pc6SLQ0nj1zx2Wr3SFbKevX7rh3L4eUqymAqA/fuiGphcDS
W6dM8mgFgVo5fsROwYssBmL3IlvQ31vIxRHf6o8hzILPX6inP01FtAKVBqKuKsgL
rzDp4iH7k6tWBVR+9S4CDkpKI3vsIl97CeDzoh0an9oWwkeSUK0/4Jv3BlaU8QZR
ggmKW2qWauvEyeDV0HLT83pxPrhBDCeSNPi7sOcnPqR62CGHZoQN+07jbPv+90MQ
DcNJSm8XoeFxzLVAFr+WhwqDgNBlksDAmfmiBC4VUbexoh4E8VJskQtoBWjMXRao
v4ZXTBTk2jXnnPaJzxeliOaOkD6cm2dW0pub9wIDAQABo4ICFTCCAhEwHQYDVR0O
BBYEFOqRjstdwNMr9l6RjBwuPV1lHDlNMB8GA1UdIwQYMBaAFJseoVwht9Vd6kvc
hhscCvyeQ3AxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bXg2aFhDRzMxVjNxUzl5R0d4d0tfSjVEY0RFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hYS85ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEv
NnBHT3kxM0EweXYyWHBHTUhDNDlYV1VjT1UwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85
ZWUwMWYtZTk3Ni00ODAzLTk2MWUtOTRjZjIyZGVlNWZlLzEvbXg2aFhDRzMxVjNx
Uzl5R0d4d0tfSjVEY0RFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPsCYAwQBXrDWAwQAvNBnMA0GCSqG
SIb3DQEBCwUAA4IBAQB0EEQsdR3nHGeI53H0gVxwOvb0Y23DOQt1edpP3uLn52Ue
/wnIiK2PVeEokmNDt9leBMQqZkb1PZczQLlALFH5HrOpuso6uaa2irFqzvXjE6nR
olmLoExKp6CEncQp6NJExu1JxkVyYRVnqQpXSzJBGTrpxBwPpyjH6/KuVWqagWNG
sLVdyP/l9gHvF0YXFJtuu68KWCqzn2Ey5A3FWxuj7UTTeZHIj6AkW7BD048kcZuB
6weRXGG+CLxvz5kh9FTB7yXddZ5UIsPEdeeeN4ieZo1Zy/5Mk10bYalPBO1xKQL7
vz8O9Mw3ej02Qxu/Zo0JTNaBULOwJbRbpSBsLxNE
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-ams.rpki-client.org