Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WJbsZqt6vaQSr88vWJJ-vZP2h2M.roa
File:                     WJbsZqt6vaQSr88vWJJ-vZP2h2M.roa (raw, json)
Hash identifier:          RrlDZ3kALVDzQTV68iohbVLIIue9K4378uxVxpDLaJk=
Subject key identifier:   58:96:EC:66:AB:7A:BD:A4:12:AF:CF:2F:58:92:7E:BD:93:F6:87:63
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       09B09F6F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WJbsZqt6vaQSr88vWJJ-vZP2h2M.roa
Signing time:             Mon 21 Feb 2022 14:18:28 +0000
ROA not before:           Mon 21 Feb 2022 14:18:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     396356
IP address blocks:        82.140.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162570095 (0x9b09f6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Feb 21 14:18:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5896ec66ab7abda412afcf2f58927ebd93f68763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:76:d6:41:a3:32:e0:26:bf:5b:f0:9f:42:
                    86:07:35:b4:16:7b:a7:1a:43:84:aa:b9:35:31:3b:
                    de:4b:81:7d:03:fa:9a:9c:0c:b0:c0:71:22:0b:73:
                    2b:a2:3b:96:b5:22:de:9c:14:b1:3b:dd:2e:27:01:
                    70:5e:a9:0f:dc:f0:96:ed:8f:bb:44:62:ac:c6:0f:
                    70:9a:44:5a:b1:d2:9a:09:7d:28:ed:b7:f6:67:eb:
                    f9:0f:02:aa:6f:55:30:2f:09:b6:d1:61:97:ca:a1:
                    55:6b:7d:c1:36:4b:2b:a6:8d:ff:a7:ff:f7:2a:f1:
                    95:25:b8:95:ad:d1:41:bb:b7:7a:06:0c:c8:a9:e2:
                    43:1b:b7:8f:53:bb:98:31:8d:3d:a5:f8:17:06:94:
                    ac:0b:76:00:9f:82:04:53:c0:fd:96:99:72:32:02:
                    95:63:f3:44:3c:76:6a:cd:c2:13:3e:1c:ed:ed:7f:
                    50:50:63:76:d0:47:f0:47:7d:fe:47:0f:48:1b:ca:
                    05:46:ed:30:67:08:53:ef:7a:96:2d:33:ed:51:79:
                    14:71:9e:01:34:34:34:2d:a3:02:cc:3b:89:f3:61:
                    60:c1:1a:7b:64:ce:ff:ad:e2:9d:12:99:62:6f:ed:
                    0e:96:80:4e:58:74:a3:42:f0:c7:28:2b:cc:16:96:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:96:EC:66:AB:7A:BD:A4:12:AF:CF:2F:58:92:7E:BD:93:F6:87:63
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/WJbsZqt6vaQSr88vWJJ-vZP2h2M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:3c:c3:73:ce:d4:bd:7d:5f:fb:33:93:04:53:c2:d6:91:03:
         e7:b6:98:b4:4f:47:fe:a2:ad:04:b6:96:df:8c:9a:cf:9c:f8:
         bf:8f:ae:30:dc:9e:65:4d:9b:87:b7:1f:b7:9f:0c:74:c7:91:
         6a:da:1c:9c:8f:93:db:31:a1:5e:31:13:6f:42:2a:3a:32:6c:
         68:fe:3e:f6:6e:d8:f5:09:1b:25:4b:7a:2c:ea:53:10:0e:6d:
         61:c8:5e:3c:39:d5:9c:29:5c:22:b3:0b:8d:cb:38:a9:67:65:
         d6:01:85:4f:59:bb:ba:20:51:e4:1c:6d:93:3a:04:ae:f4:c1:
         72:88:60:ae:63:96:58:b3:07:1b:bc:e3:cd:a7:87:fb:da:2d:
         bf:f7:de:34:df:09:ab:20:41:fc:85:6a:33:4c:16:b0:0d:67:
         6c:f9:fa:72:db:f4:25:1f:12:6f:49:b0:54:d4:60:c1:8d:16:
         ff:cf:8d:bc:f6:c0:84:14:ac:02:4b:63:76:28:85:e7:f1:1c:
         de:09:f4:23:c4:33:74:2c:72:1d:eb:82:ce:82:06:72:51:03:
         13:c0:ff:51:88:6f:87:e8:06:0c:c6:7e:fd:2f:e8:52:b0:cd:
         3d:d6:d3:93:f9:43:93:b9:b3:64:23:68:30:1f:01:09:b1:3b:
         5b:5d:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org