Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/40r6ErrBwtGsVatU9ibVhQfg7Qg.roa
File:                     40r6ErrBwtGsVatU9ibVhQfg7Qg.roa (raw, json)
Hash identifier:          QJvZRJ8mZX4KVnswTY/P2tT9JMOHEDFmUNHf/qokJQU=
Subject key identifier:   E3:4A:FA:12:BA:C1:C2:D1:AC:55:AB:54:F6:26:D5:85:07:E0:ED:08
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       01841AB09657E4154799D17DCA1700BBFC99
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/40r6ErrBwtGsVatU9ibVhQfg7Qg.roa
Signing time:             Thu 27 Oct 2022 18:24:51 +0000
ROA not before:           Thu 27 Oct 2022 18:24:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        84.46.171.0/24 maxlen: 24
                          82.140.183.0/24 maxlen: 24
                          84.46.240.0/20 maxlen: 20
                          84.46.234.0/23 maxlen: 23
                          84.46.236.0/22 maxlen: 22
                          86.38.246.0/23 maxlen: 23
                          86.38.242.0/23 maxlen: 23
                          86.38.241.0/24 maxlen: 24
                          86.38.248.0/21 maxlen: 21
                          86.38.189.0/24 maxlen: 24
                          86.38.190.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 24
                          86.38.204.0/23 maxlen: 23
                          86.38.214.0/24 maxlen: 24
                          86.38.225.0/24 maxlen: 24
                          86.38.37.0/24 maxlen: 24
                          86.38.32.0/24 maxlen: 24
                          86.38.7.0/24 maxlen: 24
                          86.38.24.0/24 maxlen: 24
                          86.38.151.0/24 maxlen: 24
                          86.38.156.0/24 maxlen: 24
                          86.38.175.0/24 maxlen: 24
                          86.38.177.0/24 maxlen: 24
                          86.38.178.0/23 maxlen: 23
                          86.38.184.0/23 maxlen: 23
                          86.38.186.0/23 maxlen: 23
                          86.38.180.0/23 maxlen: 23
                          86.38.182.0/23 maxlen: 23
                          89.117.228.0/23 maxlen: 23
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24
                          89.117.254.0/24 maxlen: 24
                          89.117.68.0/24 maxlen: 24
                          89.117.70.0/23 maxlen: 23
                          89.117.72.0/21 maxlen: 21
                          89.117.80.0/22 maxlen: 22
                          89.117.84.0/23 maxlen: 23
                          89.117.87.0/24 maxlen: 24
                          89.117.88.0/22 maxlen: 22
                          89.117.94.0/23 maxlen: 23
                          89.117.96.0/22 maxlen: 22
                          89.117.101.0/24 maxlen: 24
                          89.117.111.0/24 maxlen: 24
                          89.117.112.0/22 maxlen: 22
                          89.117.116.0/23 maxlen: 23
                          89.117.118.0/24 maxlen: 24
                          89.117.16.0/21 maxlen: 21
                          89.117.12.0/23 maxlen: 23
                          89.117.24.0/23 maxlen: 23
                          89.117.28.0/22 maxlen: 22
                          89.117.27.0/24 maxlen: 24
                          89.117.38.0/24 maxlen: 24
                          89.117.36.0/23 maxlen: 23
                          89.117.32.0/23 maxlen: 23
                          89.117.40.0/21 maxlen: 21
                          89.117.48.0/20 maxlen: 20
                          89.117.64.0/22 maxlen: 22
                          89.117.188.0/24 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.218.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.216.0/23 maxlen: 23
                          89.117.222.0/24 maxlen: 24
                          89.117.226.0/23 maxlen: 23
                          89.117.124.0/24 maxlen: 24
                          89.117.120.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.130.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 22
                          89.117.139.0/24 maxlen: 24
                          89.117.136.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 23
                          89.117.144.0/21 maxlen: 21
                          89.117.158.0/23 maxlen: 23
                          89.117.157.0/24 maxlen: 24
                          89.117.160.0/22 maxlen: 22
                          89.117.164.0/24 maxlen: 24
                          89.117.168.0/23 maxlen: 23
                          89.117.167.0/24 maxlen: 24
                          89.117.171.0/24 maxlen: 24
                          89.117.172.0/22 maxlen: 22
                          89.116.108.0/24 maxlen: 24
                          89.116.112.0/24 maxlen: 24
                          89.116.106.0/23 maxlen: 23
                          89.116.115.0/24 maxlen: 24
                          89.116.113.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 23
                          89.116.126.0/23 maxlen: 23
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.144.0/24 maxlen: 24
                          89.116.140.0/24 maxlen: 24
                          89.116.146.0/23 maxlen: 23
                          89.116.148.0/23 maxlen: 23
                          89.116.150.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.54.0/24 maxlen: 24
                          89.116.52.0/23 maxlen: 23
                          89.116.58.0/23 maxlen: 23
                          89.116.64.0/22 maxlen: 22
                          89.116.70.0/24 maxlen: 24
                          89.116.68.0/23 maxlen: 23
                          89.116.80.0/21 maxlen: 21
                          89.116.88.0/23 maxlen: 23
                          89.116.92.0/24 maxlen: 24
                          89.116.100.0/24 maxlen: 24
                          89.116.103.0/24 maxlen: 24
                          89.116.99.0/24 maxlen: 24
                          89.116.223.0/24 maxlen: 24
                          89.116.224.0/21 maxlen: 21
                          89.116.220.0/24 maxlen: 24
                          89.116.233.0/24 maxlen: 24
                          89.116.237.0/24 maxlen: 24
                          89.116.239.0/24 maxlen: 24
                          89.116.248.0/24 maxlen: 24
                          89.116.250.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.116.255.0/24 maxlen: 24
                          89.117.5.0/24 maxlen: 24
                          89.117.11.0/24 maxlen: 24
                          89.117.6.0/23 maxlen: 23
                          89.117.8.0/23 maxlen: 23
                          89.116.163.0/24 maxlen: 24
                          89.116.164.0/23 maxlen: 23
                          89.116.166.0/24 maxlen: 24
                          89.116.171.0/24 maxlen: 24
                          89.116.169.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 23
                          89.116.168.0/24 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 23
                          89.116.186.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.198.0/24 maxlen: 24
                          89.116.203.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 23
                          89.116.209.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.24.0/21 maxlen: 24
                          89.116.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:1a:b0:96:57:e4:15:47:99:d1:7d:ca:17:00:bb:fc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Oct 27 18:24:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e34afa12bac1c2d1ac55ab54f626d58507e0ed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:7c:09:35:de:c6:d9:bb:69:91:ca:09:6a:
                    ee:e5:3d:c1:cb:75:07:17:51:7c:2b:6c:cb:28:0d:
                    af:b2:34:f4:ea:ff:bf:ee:36:ad:b2:7d:29:b8:4c:
                    92:a1:26:2d:6c:a7:d6:53:e2:a4:8e:32:73:1a:48:
                    ff:f2:88:a6:ca:f7:0a:56:1b:e8:53:e2:31:15:2d:
                    49:ed:1a:bf:f7:b7:97:2d:6d:2e:11:18:9e:63:4f:
                    9f:60:a7:f0:9a:ed:93:1d:5b:73:18:ee:bf:c1:13:
                    ab:ab:f2:c6:ea:47:a7:59:ec:62:a5:b9:19:e9:8c:
                    1f:57:88:a8:83:51:f3:34:bc:08:3f:be:bc:50:6e:
                    d2:cf:8a:04:4b:04:65:c0:53:89:68:a9:55:6d:ac:
                    78:d2:81:f4:fb:79:13:86:5a:15:a9:6b:ac:92:cd:
                    7b:86:00:e3:d4:ff:3f:63:66:7c:37:cc:f1:be:37:
                    1a:7f:9c:d8:f3:79:5e:54:5c:cd:00:b7:0e:be:ec:
                    2e:0a:a8:6a:db:0d:9d:8c:6f:d7:34:92:8b:89:08:
                    44:c7:eb:46:ce:ab:ea:37:b8:6e:77:74:4c:20:cd:
                    7f:e8:d6:31:5f:b9:b2:0f:09:05:99:6d:f9:90:4e:
                    ac:ed:d4:c2:c7:26:7e:40:b9:c0:5b:eb:39:59:ba:
                    cc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4A:FA:12:BA:C1:C2:D1:AC:55:AB:54:F6:26:D5:85:07:E0:ED:08
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/40r6ErrBwtGsVatU9ibVhQfg7Qg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.183.0/24
                  84.46.171.0/24
                  84.46.234.0-84.46.255.255
                  86.38.7.0/24
                  86.38.24.0/24
                  86.38.32.0/24
                  86.38.37.0/24
                  86.38.151.0/24
                  86.38.156.0/24
                  86.38.175.0/24
                  86.38.177.0-86.38.187.255
                  86.38.189.0-86.38.190.255
                  86.38.202.0-86.38.205.255
                  86.38.214.0/24
                  86.38.225.0/24
                  86.38.241.0-86.38.243.255
                  86.38.246.0-86.38.255.255
                  89.116.24.0-89.116.39.255
                  89.116.52.0-89.116.54.255
                  89.116.58.0/23
                  89.116.64.0-89.116.70.255
                  89.116.80.0-89.116.89.255
                  89.116.92.0/24
                  89.116.99.0-89.116.100.255
                  89.116.103.0/24
                  89.116.106.0-89.116.108.255
                  89.116.112.0/23
                  89.116.115.0/24
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.140.0/23
                  89.116.144.0/24
                  89.116.146.0-89.116.150.255
                  89.116.154.0/24
                  89.116.163.0-89.116.166.255
                  89.116.168.0/23
                  89.116.171.0-89.116.173.255
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.198.0/24
                  89.116.203.0/24
                  89.116.208.0/22
                  89.116.220.0/24
                  89.116.223.0-89.116.231.255
                  89.116.233.0/24
                  89.116.237.0/24
                  89.116.239.0/24
                  89.116.248.0/24
                  89.116.250.0/24
                  89.116.252.0/23
                  89.116.255.0/24
                  89.117.5.0-89.117.9.255
                  89.117.11.0-89.117.13.255
                  89.117.16.0-89.117.25.255
                  89.117.27.0-89.117.33.255
                  89.117.36.0-89.117.38.255
                  89.117.40.0-89.117.68.255
                  89.117.70.0-89.117.85.255
                  89.117.87.0-89.117.91.255
                  89.117.94.0-89.117.99.255
                  89.117.101.0/24
                  89.117.111.0-89.117.118.255
                  89.117.120.0-89.117.124.255
                  89.117.126.0/24
                  89.117.129.0-89.117.130.255
                  89.117.132.0-89.117.136.255
                  89.117.139.0/24
                  89.117.142.0-89.117.151.255
                  89.117.157.0-89.117.164.255
                  89.117.167.0-89.117.169.255
                  89.117.171.0-89.117.175.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0-89.117.218.255
                  89.117.222.0/24
                  89.117.226.0-89.117.229.255
                  89.117.245.0/24
                  89.117.250.0/24
                  89.117.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:14:c0:6b:a8:84:8e:ad:a1:b3:03:5b:fc:67:90:63:1d:34:
         fc:af:32:60:29:04:cf:bf:81:98:44:34:65:42:23:56:a6:61:
         c8:cf:62:37:ce:9d:51:30:d8:c4:8b:14:6f:13:af:53:8d:29:
         49:96:94:00:b7:f4:bf:ec:36:9e:49:a0:99:bb:1b:10:08:6d:
         f1:15:b3:39:59:c8:b8:56:a7:28:34:67:e7:be:5a:d6:59:22:
         35:79:72:f6:9a:49:86:f7:fb:7f:18:68:24:de:94:62:ef:78:
         d1:69:38:4d:e7:5f:7f:de:f5:5a:76:96:a2:74:36:83:ad:7e:
         d4:49:b1:77:28:59:f6:1e:f5:d5:a2:da:21:78:5d:0c:0e:fc:
         9d:d6:c8:ee:ed:df:46:ea:ed:26:7a:9c:67:3c:b3:81:e2:fb:
         df:c1:1a:94:e8:d7:f0:03:5c:ee:17:16:9f:79:41:df:b1:84:
         39:a3:1c:92:b1:5f:96:de:d3:0e:2e:a4:f2:41:08:39:5d:8a:
         e6:15:e1:37:71:0b:d4:9b:9b:28:96:38:3a:d6:2f:53:cf:40:
         0d:24:de:3b:8a:81:d1:14:a6:42:e5:1c:74:63:ed:59:8f:23:
         64:5c:ac:72:24:b0:cd:d8:03:53:f0:3f:72:d0:7c:e2:0d:af:
         59:7c:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org