Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wG6Qd0NnMj2RaHP9MFCYpLEqsAY.roa
File:                     wG6Qd0NnMj2RaHP9MFCYpLEqsAY.roa (raw, json)
Hash identifier:          otnDMsbYpqVye/InS75a32z/j1eyolOBMpdVzuQvE/M=
Subject key identifier:   C0:6E:90:77:43:67:32:3D:91:68:73:FD:30:50:98:A4:B1:2A:B0:06
Certificate issuer:       /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial:       0182EEBDF9B62480E75724AA7A1FE8B4ADF8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wG6Qd0NnMj2RaHP9MFCYpLEqsAY.roa
Signing time:             Tue 30 Aug 2022 12:33:23 +0000
ROA not before:           Tue 30 Aug 2022 12:33:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     30807
IP address blocks:        89.116.58.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ee:bd:f9:b6:24:80:e7:57:24:aa:7a:1f:e8:b4:ad:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
        Validity
            Not Before: Aug 30 12:33:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c06e90774367323d916873fd305098a4b12ab006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:66:06:a6:38:ba:02:21:65:b5:c9:9e:79:
                    cb:3e:a0:c7:29:51:21:f2:47:51:e0:7d:5b:30:a0:
                    19:88:97:fa:d9:91:e1:3d:03:51:9e:0c:5b:6c:17:
                    f9:38:38:ed:5a:c7:33:3c:8d:f0:13:89:a5:56:b5:
                    79:8b:a7:66:62:20:e1:b4:7c:65:8c:3e:13:b5:b8:
                    c6:b7:5a:2f:cd:a4:dd:4c:5d:ab:2b:6e:e5:7b:6e:
                    db:2b:f7:cb:f5:09:d5:45:15:74:eb:0b:06:11:05:
                    37:f7:8f:ca:87:30:c3:e5:28:b2:0c:53:d7:6c:cf:
                    76:11:69:e5:4a:aa:45:86:ef:90:a1:40:e3:15:78:
                    d0:cb:c0:99:d4:18:7a:31:7a:62:0a:e3:04:dd:0d:
                    c7:26:12:8e:f8:1a:9c:80:8a:40:9d:7a:92:09:68:
                    c0:e5:b6:f5:24:f3:c4:5d:25:dd:b5:22:e6:17:50:
                    94:b9:32:a7:62:1f:fd:71:70:3f:9d:cf:6e:4c:ad:
                    49:27:1b:4f:ba:2a:2a:35:3b:96:cc:cf:8f:d3:f0:
                    98:03:4b:31:21:6f:61:80:50:aa:63:35:74:f9:2e:
                    37:6c:d4:1f:d9:52:11:a7:69:49:74:c1:d7:81:1c:
                    55:f6:d9:47:01:b4:9e:3d:e0:66:09:2a:b0:03:52:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:90:77:43:67:32:3D:91:68:73:FD:30:50:98:A4:B1:2A:B0:06
            X509v3 Authority Key Identifier:
                keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wG6Qd0NnMj2RaHP9MFCYpLEqsAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.116.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:1e:7c:fb:c8:9e:6b:77:07:21:9b:ed:d8:77:d2:02:49:
         3f:b4:91:b1:44:e9:07:23:7c:4a:5b:3c:61:96:2c:0e:bd:23:
         d2:99:fb:d3:ba:0c:6d:f5:73:cd:31:c5:a9:99:ca:7c:ea:6b:
         f9:a5:88:f0:c6:e2:d5:8d:34:fa:c5:f5:48:9e:33:6e:91:77:
         dc:df:f7:2f:f8:44:d3:6d:6e:cf:dd:35:53:6b:69:99:4d:81:
         a8:21:d3:8f:51:d1:1f:fe:6a:be:9d:98:80:b9:9c:40:51:47:
         fd:50:74:a4:e0:61:ee:5e:cc:9c:d1:e5:c6:1f:6b:68:1c:f7:
         20:f1:e5:19:b5:f8:04:8f:0d:f1:be:4c:66:95:16:7e:26:12:
         27:0d:a8:af:b9:3d:09:9f:bc:b8:d2:c4:9c:e5:4c:9e:92:8e:
         ae:bc:c4:a2:b1:c3:71:46:a6:45:54:80:29:51:e2:7c:6d:29:
         06:af:fe:d1:93:b9:b3:6c:d6:f3:c0:5b:5e:1a:dd:2f:11:ce:
         7c:d2:53:2e:cc:ef:54:98:29:37:01:b7:e4:f0:c7:44:84:d2:
         60:8d:5a:7e:82:06:41:26:5a:c1:ce:92:30:10:09:27:3f:e1:
         b7:52:4d:5f:b4:18:77:a1:bd:b3:6a:dc:6d:e9:c3:4f:6d:27:
         4d:53:38:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLuvfm2JIDnVySqeh/otK34MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODMwMTIzMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDZlOTA3NzQzNjczMjNkOTE2ODczZmQzMDUwOThhNGIxMmFiMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzpmBqY4ugIhZbXJnnnLPqDHKVEh
8kdR4H1bMKAZiJf62ZHhPQNRngxbbBf5ODjtWsczPI3wE4mlVrV5i6dmYiDhtHxl
jD4TtbjGt1ovzaTdTF2rK27le27bK/fL9QnVRRV06wsGEQU394/KhzDD5SiyDFPX
bM92EWnlSqpFhu+QoUDjFXjQy8CZ1Bh6MXpiCuME3Q3HJhKO+BqcgIpAnXqSCWjA
5bb1JPPEXSXdtSLmF1CUuTKnYh/9cXA/nc9uTK1JJxtPuioqNTuWzM+P0/CYA0sx
IW9hgFCqYzV0+S43bNQf2VIRp2lJdMHXgRxV9tlHAbSePeBmCSqwA1J0AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMBukHdDZzI9kWhz/TBQmKSxKrAGMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvd0c2UWQwTm5NajJSYUhQOU1GQ1lwTEVxc0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXQ6MA0G
CSqGSIb3DQEBCwUAA4IBAQCi6h58+8iea3cHIZvt2HfSAkk/tJGxROkHI3xKWzxh
liwOvSPSmfvTugxt9XPNMcWpmcp86mv5pYjwxuLVjTT6xfVInjNukXfc3/cv+ETT
bW7P3TVTa2mZTYGoIdOPUdEf/mq+nZiAuZxAUUf9UHSk4GHuXsyc0eXGH2toHPcg
8eUZtfgEjw3xvkxmlRZ+JhInDaivuT0Jn7y40sSc5Uyeko6uvMSiscNxRqZFVIAp
UeJ8bSkGr/7Rk7mzbNbzwFteGt0vEc580lMuzO9UmCk3Abfk8MdEhNJgjVp+ggZB
JlrBzpIwEAknP+G3Uk1ftBh3ob2zatxt6cNPbSdNUzgx
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org