Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RsGsf3kmYTkPh0PIM69-vTTVT_Q.roa
File:                     RsGsf3kmYTkPh0PIM69-vTTVT_Q.roa (raw, json)
Hash identifier:          szG27NH5RJYVjl1h2NB/yPuiaT/RiDutChMOmaPbutY=
Subject key identifier:   46:C1:AC:7F:79:26:61:39:0F:87:43:C8:33:AF:7E:BD:34:D5:4F:F4
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0181ED5D1848E7B49379A2B42175B548085C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RsGsf3kmYTkPh0PIM69-vTTVT_Q.roa
Signing time:             Mon 11 Jul 2022 13:05:10 +0000
ROA not before:           Mon 11 Jul 2022 13:05:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        84.46.171.0/24 maxlen: 24
                          82.140.183.0/24 maxlen: 24
                          84.46.240.0/20 maxlen: 20
                          84.46.234.0/23 maxlen: 23
                          84.46.236.0/22 maxlen: 22
                          86.38.246.0/23 maxlen: 23
                          86.38.242.0/23 maxlen: 23
                          86.38.241.0/24 maxlen: 24
                          86.38.248.0/21 maxlen: 21
                          86.38.189.0/24 maxlen: 24
                          86.38.190.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 23
                          86.38.204.0/23 maxlen: 23
                          86.38.214.0/24 maxlen: 24
                          86.38.225.0/24 maxlen: 24
                          86.38.226.0/24 maxlen: 24
                          86.38.37.0/24 maxlen: 24
                          86.38.32.0/24 maxlen: 24
                          86.38.7.0/24 maxlen: 24
                          86.38.24.0/24 maxlen: 24
                          86.38.151.0/24 maxlen: 24
                          86.38.156.0/24 maxlen: 24
                          86.38.175.0/24 maxlen: 24
                          86.38.177.0/24 maxlen: 24
                          86.38.178.0/23 maxlen: 23
                          86.38.184.0/23 maxlen: 23
                          86.38.186.0/23 maxlen: 23
                          86.38.180.0/23 maxlen: 23
                          86.38.182.0/23 maxlen: 23
                          89.117.228.0/23 maxlen: 23
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24
                          89.117.254.0/24 maxlen: 24
                          89.117.68.0/24 maxlen: 24
                          89.117.70.0/23 maxlen: 23
                          89.117.72.0/21 maxlen: 21
                          89.117.80.0/22 maxlen: 22
                          89.117.84.0/23 maxlen: 23
                          89.117.87.0/24 maxlen: 24
                          89.117.88.0/22 maxlen: 22
                          89.117.94.0/23 maxlen: 23
                          89.117.96.0/22 maxlen: 22
                          89.117.101.0/24 maxlen: 24
                          89.117.102.0/23 maxlen: 23
                          89.117.111.0/24 maxlen: 24
                          89.117.112.0/22 maxlen: 22
                          89.117.116.0/23 maxlen: 23
                          89.117.118.0/24 maxlen: 24
                          89.117.16.0/21 maxlen: 21
                          89.117.12.0/23 maxlen: 23
                          89.117.24.0/23 maxlen: 23
                          89.117.28.0/22 maxlen: 22
                          89.117.27.0/24 maxlen: 24
                          89.117.38.0/24 maxlen: 24
                          89.117.36.0/23 maxlen: 23
                          89.117.32.0/23 maxlen: 23
                          89.117.40.0/21 maxlen: 21
                          89.117.48.0/20 maxlen: 20
                          89.117.64.0/22 maxlen: 22
                          89.117.188.0/24 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.218.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.216.0/23 maxlen: 23
                          89.117.222.0/24 maxlen: 24
                          89.117.226.0/23 maxlen: 23
                          89.117.124.0/24 maxlen: 24
                          89.117.120.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.130.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 22
                          89.117.139.0/24 maxlen: 24
                          89.117.136.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 23
                          89.117.144.0/21 maxlen: 21
                          89.117.158.0/23 maxlen: 23
                          89.117.157.0/24 maxlen: 24
                          89.117.160.0/22 maxlen: 22
                          89.117.164.0/24 maxlen: 24
                          89.117.168.0/23 maxlen: 23
                          89.117.167.0/24 maxlen: 24
                          89.117.171.0/24 maxlen: 24
                          89.117.172.0/22 maxlen: 22
                          89.116.108.0/24 maxlen: 24
                          89.116.112.0/24 maxlen: 24
                          89.116.106.0/23 maxlen: 23
                          89.116.115.0/24 maxlen: 24
                          89.116.113.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 23
                          89.116.126.0/23 maxlen: 23
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.144.0/24 maxlen: 24
                          89.116.140.0/24 maxlen: 24
                          89.116.146.0/23 maxlen: 23
                          89.116.148.0/23 maxlen: 23
                          89.116.150.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.54.0/24 maxlen: 24
                          89.116.52.0/23 maxlen: 23
                          89.116.58.0/23 maxlen: 23
                          89.116.64.0/22 maxlen: 22
                          89.116.70.0/24 maxlen: 24
                          89.116.68.0/23 maxlen: 23
                          89.116.80.0/21 maxlen: 21
                          89.116.88.0/23 maxlen: 23
                          89.116.92.0/24 maxlen: 24
                          89.116.100.0/24 maxlen: 24
                          89.116.103.0/24 maxlen: 24
                          89.116.99.0/24 maxlen: 24
                          89.116.221.0/24 maxlen: 24
                          89.116.223.0/24 maxlen: 24
                          89.116.224.0/21 maxlen: 21
                          89.116.220.0/24 maxlen: 24
                          89.116.233.0/24 maxlen: 24
                          89.116.237.0/24 maxlen: 24
                          89.116.239.0/24 maxlen: 24
                          89.116.248.0/24 maxlen: 24
                          89.116.250.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.117.0.0/22 maxlen: 22
                          89.116.255.0/24 maxlen: 24
                          89.117.5.0/24 maxlen: 24
                          89.117.11.0/24 maxlen: 24
                          89.117.6.0/23 maxlen: 23
                          89.117.8.0/23 maxlen: 23
                          89.116.163.0/24 maxlen: 24
                          89.116.164.0/23 maxlen: 23
                          89.116.166.0/24 maxlen: 24
                          89.116.171.0/24 maxlen: 24
                          89.116.169.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 23
                          89.116.168.0/24 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 23
                          89.116.186.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.198.0/24 maxlen: 24
                          89.116.203.0/24 maxlen: 24
                          89.116.200.0/24 maxlen: 24
                          89.116.202.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 23
                          89.116.209.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.24.0/21 maxlen: 24
                          89.116.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:ed:5d:18:48:e7:b4:93:79:a2:b4:21:75:b5:48:08:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Jul 11 13:05:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=46c1ac7f792661390f8743c833af7ebd34d54ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:02:18:c4:08:a4:08:ff:fd:f5:1e:80:fd:
                    89:bc:bb:64:b1:0c:20:a7:d2:f8:e3:1a:42:2d:98:
                    e2:2f:1c:69:a8:89:e1:6e:41:ee:4a:a7:22:f4:3a:
                    1e:b6:0c:a1:41:00:26:06:17:69:f4:8a:06:f8:62:
                    67:78:03:6f:90:a4:c1:2e:30:1c:89:99:0a:e3:dc:
                    d8:2d:22:d2:13:cb:f8:cc:ef:d8:f0:bf:52:c9:5e:
                    79:fb:be:02:cd:4b:99:d7:ef:99:86:26:70:d2:c4:
                    61:8c:60:70:bc:40:e4:59:32:82:77:6f:88:fa:6b:
                    a8:b8:e4:c8:ae:87:ce:f4:47:3b:f2:6e:f2:a6:8e:
                    b7:d5:01:69:0e:b0:d0:c4:85:90:5b:c1:51:27:9c:
                    a1:f4:0e:3e:99:23:17:dd:f6:ab:17:66:4a:8d:9a:
                    ca:e6:8d:30:e9:f0:4d:c9:ae:69:5c:45:51:56:f2:
                    13:48:0e:b9:cf:bf:cd:40:62:29:98:11:f8:fe:7f:
                    2b:15:61:ef:90:09:35:e1:70:2c:78:56:24:46:b2:
                    d1:4e:c3:e0:95:e4:35:dd:27:82:9a:9b:c6:3d:27:
                    e7:24:ab:d6:5f:f3:da:93:97:8a:92:21:fc:b3:0b:
                    fd:40:a1:21:75:e2:aa:5a:a0:ff:57:b5:9d:c3:3e:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:AC:7F:79:26:61:39:0F:87:43:C8:33:AF:7E:BD:34:D5:4F:F4
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RsGsf3kmYTkPh0PIM69-vTTVT_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.183.0/24
                  84.46.171.0/24
                  84.46.234.0-84.46.255.255
                  86.38.7.0/24
                  86.38.24.0/24
                  86.38.32.0/24
                  86.38.37.0/24
                  86.38.151.0/24
                  86.38.156.0/24
                  86.38.175.0/24
                  86.38.177.0-86.38.187.255
                  86.38.189.0-86.38.190.255
                  86.38.202.0-86.38.205.255
                  86.38.214.0/24
                  86.38.225.0-86.38.226.255
                  86.38.241.0-86.38.243.255
                  86.38.246.0-86.38.255.255
                  89.116.24.0-89.116.39.255
                  89.116.52.0-89.116.54.255
                  89.116.58.0/23
                  89.116.64.0-89.116.70.255
                  89.116.80.0-89.116.89.255
                  89.116.92.0/24
                  89.116.99.0-89.116.100.255
                  89.116.103.0/24
                  89.116.106.0-89.116.108.255
                  89.116.112.0/23
                  89.116.115.0/24
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.140.0/23
                  89.116.144.0/24
                  89.116.146.0-89.116.150.255
                  89.116.154.0/24
                  89.116.163.0-89.116.166.255
                  89.116.168.0/23
                  89.116.171.0-89.116.173.255
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.198.0/24
                  89.116.200.0/24
                  89.116.202.0/23
                  89.116.208.0/22
                  89.116.220.0/23
                  89.116.223.0-89.116.231.255
                  89.116.233.0/24
                  89.116.237.0/24
                  89.116.239.0/24
                  89.116.248.0/24
                  89.116.250.0/24
                  89.116.252.0/23
                  89.116.255.0-89.117.3.255
                  89.117.5.0-89.117.9.255
                  89.117.11.0-89.117.13.255
                  89.117.16.0-89.117.25.255
                  89.117.27.0-89.117.33.255
                  89.117.36.0-89.117.38.255
                  89.117.40.0-89.117.68.255
                  89.117.70.0-89.117.85.255
                  89.117.87.0-89.117.91.255
                  89.117.94.0-89.117.99.255
                  89.117.101.0-89.117.103.255
                  89.117.111.0-89.117.118.255
                  89.117.120.0-89.117.124.255
                  89.117.126.0/24
                  89.117.129.0-89.117.130.255
                  89.117.132.0-89.117.136.255
                  89.117.139.0/24
                  89.117.142.0-89.117.151.255
                  89.117.157.0-89.117.164.255
                  89.117.167.0-89.117.169.255
                  89.117.171.0-89.117.175.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0-89.117.218.255
                  89.117.222.0/24
                  89.117.226.0-89.117.229.255
                  89.117.245.0/24
                  89.117.250.0/24
                  89.117.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:59:16:d8:28:5e:aa:7e:d9:7f:61:7f:3e:17:db:13:c1:
         60:2a:18:7d:3c:b9:db:f5:96:4d:6a:cd:be:9d:0b:a3:90:c3:
         9d:77:da:28:5f:05:5f:70:65:b7:7a:a2:4a:78:c3:74:ba:cf:
         2d:14:1f:ed:7c:a8:fd:9b:5e:d9:97:cd:6d:4b:e0:a3:74:8b:
         7d:13:ec:85:77:e7:4e:ad:9b:b4:f9:4b:88:ba:97:18:74:cf:
         bd:08:51:24:db:25:8b:ee:27:f6:25:4d:77:01:fd:bb:93:b0:
         d3:78:0d:69:12:86:2a:e2:b5:0a:80:fb:e1:29:cb:58:10:25:
         20:b2:ac:d5:50:38:dd:98:f9:43:eb:ab:52:59:5d:62:64:53:
         a8:1e:09:e4:e4:94:41:f0:6a:51:2d:c3:d9:7d:38:23:98:a5:
         ab:93:3f:9c:13:4c:92:d6:32:05:74:99:53:da:be:2b:c8:87:
         59:aa:32:df:56:e3:59:f7:4e:cc:57:98:88:cf:92:cf:e4:d6:
         48:23:24:64:50:61:02:c2:fa:24:c5:1f:5e:27:e4:62:23:a6:
         57:b3:3e:59:a4:c0:cc:68:93:0b:c7:55:84:4d:49:07:7f:ce:
         d2:95:47:ce:42:4e:3e:c2:fc:77:c8:2d:2e:99:1b:42:84:e0:
         c6:ec:91:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org