Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eeD4ayrUpciyftEugDBiEXrIP_o.roa
File:                     eeD4ayrUpciyftEugDBiEXrIP_o.roa (raw, json)
Hash identifier:          tiKIB0ZxZLDucWhnmp7LG1W4oU9WV1ZVO1zdu+wJ+TY=
Subject key identifier:   79:E0:F8:6B:2A:D4:A5:C8:B2:7E:D1:2E:80:30:62:11:7A:C8:3F:FA
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0182816E3E35FBC8F4EAC3B13A404CCBF5D3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eeD4ayrUpciyftEugDBiEXrIP_o.roa
Signing time:             Tue 09 Aug 2022 07:07:41 +0000
ROA not before:           Tue 09 Aug 2022 07:07:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        86.38.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:6e:3e:35:fb:c8:f4:ea:c3:b1:3a:40:4c:cb:f5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Aug  9 07:07:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79e0f86b2ad4a5c8b27ed12e803062117ac83ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:cf:9c:f4:15:38:7c:7c:f7:a3:fd:41:f4:
                    18:36:c1:10:31:3b:2b:bf:c7:49:8a:01:f6:3a:74:
                    cb:87:03:bf:0f:23:ce:9d:44:ee:ef:96:75:88:a6:
                    55:93:4a:d3:fc:d5:73:88:1d:9e:86:54:29:67:e0:
                    ca:e5:3d:e7:73:22:3a:41:5a:13:ef:c7:75:ab:28:
                    cc:f8:bb:7d:11:8c:c7:bc:47:69:71:f3:9c:69:62:
                    7d:cd:61:51:3d:b0:e0:35:32:be:f2:ad:67:77:b5:
                    50:b5:2f:a6:62:a2:a3:66:4d:1c:de:66:b3:e7:ca:
                    9f:90:ab:c0:aa:97:c4:37:b0:70:73:4b:2d:8b:7b:
                    f3:d0:f2:a8:99:20:a8:d1:5a:ba:2f:4c:a7:5c:6e:
                    8c:8a:4c:b4:4e:d4:ae:48:9d:b7:2f:9c:3f:2c:ba:
                    38:be:2c:b8:cb:d0:38:19:d8:27:88:4a:f0:d1:21:
                    c1:4b:93:6e:94:7d:23:4a:1a:ca:ea:c4:bd:02:72:
                    09:11:dc:b0:f5:2b:4b:75:d9:fd:ce:79:c1:ce:a3:
                    ac:bd:39:ed:44:96:9f:47:7b:61:96:63:b5:a4:15:
                    d6:d6:74:1d:94:34:4f:f4:1c:04:b3:e6:d7:30:c4:
                    32:d9:48:cf:8b:d7:64:48:6e:31:a0:ed:40:9c:32:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E0:F8:6B:2A:D4:A5:C8:B2:7E:D1:2E:80:30:62:11:7A:C8:3F:FA
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/eeD4ayrUpciyftEugDBiEXrIP_o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.38.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:75:58:2c:3d:66:05:51:96:fd:ee:41:b7:4e:ff:99:c0:ea:
         db:3b:5b:78:46:9a:55:f7:93:4e:35:f5:5b:96:3e:dc:d3:e7:
         e6:dd:2b:0a:a8:f8:5f:1e:1b:ae:45:92:15:09:55:bc:29:33:
         ba:88:a9:bd:08:03:23:ad:a7:91:fd:d4:fb:4d:36:d2:57:5c:
         25:30:ae:45:9c:d4:94:90:90:7a:6e:d4:8f:4e:e5:f8:17:d8:
         9b:d2:43:30:e7:c9:7b:8f:96:1d:a7:9d:a6:46:7c:3c:74:77:
         b5:2b:6b:91:3b:1a:86:93:5d:58:da:06:12:f0:f3:f1:38:b5:
         02:db:19:20:a7:b7:79:be:8d:fa:cf:cc:be:8d:2f:47:d0:40:
         02:ac:f5:cc:8a:57:50:b1:ba:72:85:28:3d:c6:1e:e1:36:fd:
         44:6f:27:85:42:f1:34:17:90:78:e8:9a:8a:ab:a2:04:0d:0b:
         5e:a0:60:9b:65:24:7e:43:9e:79:2e:6b:2d:03:cc:58:7a:22:
         9e:b0:37:4d:fc:1f:5b:a7:cc:8b:3d:57:bb:2f:28:19:62:71:
         1f:a9:2e:84:ec:8e:55:48:97:1d:02:22:b5:4c:56:01:f8:85:
         5d:6e:a8:18:6b:4c:7b:9a:5e:ac:ea:2f:19:78:b5:f0:ea:05:
         13:53:5f:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKBbj41+8j06sOxOkBMy/XTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODA5MDcwNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUwZjg2YjJhZDRhNWM4YjI3ZWQxMmU4MDMwNjIxMTdhYzgzZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLDPnPQVOHx896P9QfQYNsEQMTsr
v8dJigH2OnTLhwO/DyPOnUTu75Z1iKZVk0rT/NVziB2ehlQpZ+DK5T3ncyI6QVoT
78d1qyjM+Lt9EYzHvEdpcfOcaWJ9zWFRPbDgNTK+8q1nd7VQtS+mYqKjZk0c3maz
58qfkKvAqpfEN7Bwc0sti3vz0PKomSCo0Vq6L0ynXG6Miky0TtSuSJ23L5w/LLo4
viy4y9A4GdgniErw0SHBS5NulH0jShrK6sS9AnIJEdyw9StLddn9znnBzqOsvTnt
RJafR3thlmO1pBXW1nQdlDRP9BwEs+bXMMQy2UjPi9dkSG4xoO1AnDL66QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHng+Gsq1KXIsn7RLoAwYhF6yD/6MB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvZWVENGF5clVwY2l5ZnRFdWdEQmlFWHJJUF9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAViboMA0G
CSqGSIb3DQEBCwUAA4IBAQCzdVgsPWYFUZb97kG3Tv+ZwOrbO1t4RppV95NONfVb
lj7c0+fm3SsKqPhfHhuuRZIVCVW8KTO6iKm9CAMjraeR/dT7TTbSV1wlMK5FnNSU
kJB6btSPTuX4F9ib0kMw58l7j5Ydp52mRnw8dHe1K2uROxqGk11Y2gYS8PPxOLUC
2xkgp7d5vo36z8y+jS9H0EACrPXMildQsbpyhSg9xh7hNv1EbyeFQvE0F5B46JqK
q6IEDQteoGCbZSR+Q555LmstA8xYeiKesDdN/B9bp8yLPVe7LygZYnEfqS6E7I5V
SJcdAiK1TFYB+IVdbqgYa0x7ml6s6i8ZeLXw6gUTU1/O
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org