Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/achIO9uDp-zxZDvcmDOf-rLf8cA.roa
File:                     achIO9uDp-zxZDvcmDOf-rLf8cA.roa (raw, json)
Hash identifier:          3ysk5HVU1gNpSKbuvOxHQWRxcN0krz/IGOdqgTOPmVI=
Subject key identifier:   69:C8:48:3B:DB:83:A7:EC:F1:64:3B:DC:98:33:9F:FA:B2:DF:F1:C0
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0182C95A037D92DFD3E296F2019EA0C7CAE2
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/achIO9uDp-zxZDvcmDOf-rLf8cA.roa
Signing time:             Tue 23 Aug 2022 06:18:15 +0000
ROA not before:           Tue 23 Aug 2022 06:18:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        84.46.171.0/24 maxlen: 24
                          82.140.183.0/24 maxlen: 24
                          84.46.240.0/20 maxlen: 20
                          84.46.234.0/23 maxlen: 23
                          84.46.236.0/22 maxlen: 22
                          86.38.246.0/23 maxlen: 23
                          86.38.242.0/23 maxlen: 23
                          86.38.241.0/24 maxlen: 24
                          86.38.248.0/21 maxlen: 21
                          86.38.189.0/24 maxlen: 24
                          86.38.190.0/24 maxlen: 24
                          86.38.202.0/23 maxlen: 23
                          86.38.204.0/23 maxlen: 23
                          86.38.214.0/24 maxlen: 24
                          86.38.225.0/24 maxlen: 24
                          86.38.226.0/24 maxlen: 24
                          86.38.37.0/24 maxlen: 24
                          86.38.32.0/24 maxlen: 24
                          86.38.7.0/24 maxlen: 24
                          86.38.24.0/24 maxlen: 24
                          86.38.151.0/24 maxlen: 24
                          86.38.156.0/24 maxlen: 24
                          86.38.175.0/24 maxlen: 24
                          86.38.177.0/24 maxlen: 24
                          86.38.178.0/23 maxlen: 23
                          86.38.184.0/23 maxlen: 23
                          86.38.186.0/23 maxlen: 23
                          86.38.180.0/23 maxlen: 23
                          86.38.182.0/23 maxlen: 23
                          89.117.228.0/23 maxlen: 23
                          89.117.245.0/24 maxlen: 24
                          89.117.250.0/24 maxlen: 24
                          89.117.254.0/24 maxlen: 24
                          89.117.68.0/24 maxlen: 24
                          89.117.70.0/23 maxlen: 23
                          89.117.72.0/21 maxlen: 21
                          89.117.80.0/22 maxlen: 22
                          89.117.84.0/23 maxlen: 23
                          89.117.87.0/24 maxlen: 24
                          89.117.88.0/22 maxlen: 22
                          89.117.94.0/23 maxlen: 23
                          89.117.96.0/22 maxlen: 22
                          89.117.101.0/24 maxlen: 24
                          89.117.102.0/23 maxlen: 23
                          89.117.111.0/24 maxlen: 24
                          89.117.112.0/22 maxlen: 22
                          89.117.116.0/23 maxlen: 23
                          89.117.118.0/24 maxlen: 24
                          89.117.16.0/21 maxlen: 21
                          89.117.12.0/23 maxlen: 23
                          89.117.24.0/23 maxlen: 23
                          89.117.28.0/22 maxlen: 22
                          89.117.27.0/24 maxlen: 24
                          89.117.38.0/24 maxlen: 24
                          89.117.36.0/23 maxlen: 23
                          89.117.32.0/23 maxlen: 23
                          89.117.40.0/21 maxlen: 21
                          89.117.48.0/20 maxlen: 20
                          89.117.64.0/22 maxlen: 22
                          89.117.188.0/24 maxlen: 24
                          89.117.190.0/24 maxlen: 24
                          89.117.218.0/24 maxlen: 24
                          89.117.215.0/24 maxlen: 24
                          89.117.216.0/23 maxlen: 23
                          89.117.222.0/24 maxlen: 24
                          89.117.226.0/23 maxlen: 23
                          89.117.124.0/24 maxlen: 24
                          89.117.120.0/22 maxlen: 24
                          89.117.129.0/24 maxlen: 24
                          89.117.130.0/24 maxlen: 24
                          89.117.126.0/24 maxlen: 24
                          89.117.132.0/22 maxlen: 22
                          89.117.139.0/24 maxlen: 24
                          89.117.136.0/24 maxlen: 24
                          89.117.142.0/23 maxlen: 23
                          89.117.144.0/21 maxlen: 21
                          89.117.158.0/23 maxlen: 23
                          89.117.157.0/24 maxlen: 24
                          89.117.160.0/22 maxlen: 22
                          89.117.164.0/24 maxlen: 24
                          89.117.168.0/23 maxlen: 23
                          89.117.167.0/24 maxlen: 24
                          89.117.171.0/24 maxlen: 24
                          89.117.172.0/22 maxlen: 22
                          89.116.108.0/24 maxlen: 24
                          89.116.112.0/24 maxlen: 24
                          89.116.106.0/23 maxlen: 23
                          89.116.115.0/24 maxlen: 24
                          89.116.113.0/24 maxlen: 24
                          89.116.125.0/24 maxlen: 24
                          89.116.130.0/23 maxlen: 23
                          89.116.126.0/23 maxlen: 23
                          89.116.132.0/24 maxlen: 24
                          89.116.128.0/24 maxlen: 24
                          89.116.141.0/24 maxlen: 24
                          89.116.144.0/24 maxlen: 24
                          89.116.140.0/24 maxlen: 24
                          89.116.146.0/23 maxlen: 23
                          89.116.148.0/23 maxlen: 23
                          89.116.150.0/24 maxlen: 24
                          89.116.154.0/24 maxlen: 24
                          89.116.54.0/24 maxlen: 24
                          89.116.52.0/23 maxlen: 23
                          89.116.58.0/23 maxlen: 23
                          89.116.64.0/22 maxlen: 22
                          89.116.70.0/24 maxlen: 24
                          89.116.68.0/23 maxlen: 23
                          89.116.80.0/21 maxlen: 21
                          89.116.88.0/23 maxlen: 23
                          89.116.92.0/24 maxlen: 24
                          89.116.100.0/24 maxlen: 24
                          89.116.103.0/24 maxlen: 24
                          89.116.99.0/24 maxlen: 24
                          89.116.221.0/24 maxlen: 24
                          89.116.223.0/24 maxlen: 24
                          89.116.224.0/21 maxlen: 21
                          89.116.220.0/24 maxlen: 24
                          89.116.233.0/24 maxlen: 24
                          89.116.237.0/24 maxlen: 24
                          89.116.239.0/24 maxlen: 24
                          89.116.248.0/24 maxlen: 24
                          89.116.250.0/24 maxlen: 24
                          89.116.252.0/24 maxlen: 24
                          89.116.253.0/24 maxlen: 24
                          89.117.0.0/22 maxlen: 22
                          89.116.255.0/24 maxlen: 24
                          89.117.5.0/24 maxlen: 24
                          89.117.11.0/24 maxlen: 24
                          89.117.6.0/23 maxlen: 23
                          89.117.8.0/23 maxlen: 23
                          89.116.163.0/24 maxlen: 24
                          89.116.164.0/23 maxlen: 23
                          89.116.166.0/24 maxlen: 24
                          89.116.171.0/24 maxlen: 24
                          89.116.169.0/24 maxlen: 24
                          89.116.172.0/23 maxlen: 23
                          89.116.168.0/24 maxlen: 24
                          89.116.179.0/24 maxlen: 24
                          89.116.184.0/23 maxlen: 23
                          89.116.186.0/24 maxlen: 24
                          89.116.189.0/24 maxlen: 24
                          89.116.190.0/24 maxlen: 24
                          89.116.198.0/24 maxlen: 24
                          89.116.203.0/24 maxlen: 24
                          89.116.200.0/24 maxlen: 24
                          89.116.210.0/23 maxlen: 23
                          89.116.209.0/24 maxlen: 24
                          89.116.208.0/24 maxlen: 24
                          89.116.24.0/21 maxlen: 24
                          89.116.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c9:5a:03:7d:92:df:d3:e2:96:f2:01:9e:a0:c7:ca:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Aug 23 06:18:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69c8483bdb83a7ecf1643bdc98339ffab2dff1c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:40:cd:c3:10:05:d1:c0:d9:b8:72:1a:32:
                    12:ce:7a:e1:00:56:bb:f9:ca:18:5a:46:a1:68:e1:
                    89:9d:d5:94:e1:47:09:33:eb:78:30:0f:0c:b0:54:
                    7c:ee:c3:6f:6d:e1:27:dc:a4:e8:fe:e2:70:be:63:
                    19:08:dc:7d:8c:5c:3a:fc:8d:ca:ad:83:0c:cb:98:
                    e0:d8:25:3e:25:ee:97:43:d8:c7:e8:3e:e4:c9:31:
                    b3:2f:48:b9:8b:e4:7e:3b:04:7c:28:f0:c1:f9:d9:
                    ad:24:62:a0:90:6e:5a:a5:24:9a:96:10:23:e8:97:
                    2a:16:3e:f5:0b:0a:43:a5:8a:8f:74:9c:e2:cd:25:
                    59:40:41:1c:69:b9:15:29:98:c8:61:bb:db:f2:f2:
                    32:d7:71:1d:bd:ff:8b:2a:30:d3:ec:f6:f8:fb:be:
                    fe:74:d0:2d:35:0d:11:e4:06:22:2c:f0:22:47:db:
                    95:3d:b2:52:eb:b3:7f:fd:4e:22:20:1b:88:9b:57:
                    f0:75:f8:4f:0d:d5:1d:47:ee:d6:4a:b0:fe:18:9a:
                    32:22:ca:a2:96:50:f0:b3:e3:4d:a7:6c:77:09:d3:
                    eb:19:37:cd:9e:d3:83:b4:52:25:b1:4b:96:d5:9f:
                    e5:a4:27:c6:7d:21:b8:1e:28:d1:88:d3:e5:c6:85:
                    1a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:48:3B:DB:83:A7:EC:F1:64:3B:DC:98:33:9F:FA:B2:DF:F1:C0
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/achIO9uDp-zxZDvcmDOf-rLf8cA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.140.183.0/24
                  84.46.171.0/24
                  84.46.234.0-84.46.255.255
                  86.38.7.0/24
                  86.38.24.0/24
                  86.38.32.0/24
                  86.38.37.0/24
                  86.38.151.0/24
                  86.38.156.0/24
                  86.38.175.0/24
                  86.38.177.0-86.38.187.255
                  86.38.189.0-86.38.190.255
                  86.38.202.0-86.38.205.255
                  86.38.214.0/24
                  86.38.225.0-86.38.226.255
                  86.38.241.0-86.38.243.255
                  86.38.246.0-86.38.255.255
                  89.116.24.0-89.116.39.255
                  89.116.52.0-89.116.54.255
                  89.116.58.0/23
                  89.116.64.0-89.116.70.255
                  89.116.80.0-89.116.89.255
                  89.116.92.0/24
                  89.116.99.0-89.116.100.255
                  89.116.103.0/24
                  89.116.106.0-89.116.108.255
                  89.116.112.0/23
                  89.116.115.0/24
                  89.116.125.0-89.116.128.255
                  89.116.130.0-89.116.132.255
                  89.116.140.0/23
                  89.116.144.0/24
                  89.116.146.0-89.116.150.255
                  89.116.154.0/24
                  89.116.163.0-89.116.166.255
                  89.116.168.0/23
                  89.116.171.0-89.116.173.255
                  89.116.179.0/24
                  89.116.184.0-89.116.186.255
                  89.116.189.0-89.116.190.255
                  89.116.198.0/24
                  89.116.200.0/24
                  89.116.203.0/24
                  89.116.208.0/22
                  89.116.220.0/23
                  89.116.223.0-89.116.231.255
                  89.116.233.0/24
                  89.116.237.0/24
                  89.116.239.0/24
                  89.116.248.0/24
                  89.116.250.0/24
                  89.116.252.0/23
                  89.116.255.0-89.117.3.255
                  89.117.5.0-89.117.9.255
                  89.117.11.0-89.117.13.255
                  89.117.16.0-89.117.25.255
                  89.117.27.0-89.117.33.255
                  89.117.36.0-89.117.38.255
                  89.117.40.0-89.117.68.255
                  89.117.70.0-89.117.85.255
                  89.117.87.0-89.117.91.255
                  89.117.94.0-89.117.99.255
                  89.117.101.0-89.117.103.255
                  89.117.111.0-89.117.118.255
                  89.117.120.0-89.117.124.255
                  89.117.126.0/24
                  89.117.129.0-89.117.130.255
                  89.117.132.0-89.117.136.255
                  89.117.139.0/24
                  89.117.142.0-89.117.151.255
                  89.117.157.0-89.117.164.255
                  89.117.167.0-89.117.169.255
                  89.117.171.0-89.117.175.255
                  89.117.188.0/24
                  89.117.190.0/24
                  89.117.215.0-89.117.218.255
                  89.117.222.0/24
                  89.117.226.0-89.117.229.255
                  89.117.245.0/24
                  89.117.250.0/24
                  89.117.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:4c:ba:54:5f:7c:72:a8:ea:4c:89:34:45:5a:6f:74:33:9e:
         b4:0f:d5:07:4e:db:7d:b5:c4:83:4c:4d:05:35:8c:12:c9:80:
         4f:d8:19:62:71:59:11:af:42:c7:28:f9:0b:1d:16:15:76:f6:
         8a:e5:2d:36:20:1c:48:ab:d2:80:91:1f:b4:8e:3e:e5:bd:41:
         1f:2a:ac:a7:7e:50:cc:5c:30:d6:63:38:3b:03:d2:85:64:a9:
         91:31:13:3f:b4:e5:f5:9f:0d:71:86:68:06:da:65:3e:a1:df:
         31:1f:a5:6a:86:70:90:fc:66:b9:6e:b0:28:03:85:a7:d9:81:
         95:e5:b3:70:20:7e:a1:5a:14:74:ef:ae:a1:c5:bf:a1:0f:a8:
         88:53:a9:45:ac:30:0c:fd:20:bd:f4:f3:7a:30:48:46:9e:7a:
         89:2b:8e:96:c1:59:fa:4c:a8:91:9c:67:b1:6b:21:6c:b4:bd:
         cb:2c:4a:db:0f:07:2b:d2:f0:7f:a2:6a:71:52:1b:a2:86:18:
         36:5f:49:99:b4:90:97:98:4d:ce:b1:d4:33:5e:96:aa:85:ec:
         72:fb:9d:ab:9d:33:2f:d1:46:f5:47:62:96:c7:4f:48:9e:34:
         96:28:fd:5b:65:68:91:42:bc:f4:56:a6:42:b4:1b:d5:9b:27:
         f2:f2:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org