Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vVbAkoKCnH0GZzG-8q2HJBTWrl8.roa
File:                     vVbAkoKCnH0GZzG-8q2HJBTWrl8.roa (raw, json)
Hash identifier:          mtL4DNeDKZdhCIsluP08SeVzkewPledPJrk80aaKBXU=
Subject key identifier:   BD:56:C0:92:82:82:9C:7D:06:67:31:BE:F2:AD:87:24:14:D6:AE:5F
Certificate issuer:       /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial:       01829762A96F32AC0EFE05FBD6FF4C295ECE
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vVbAkoKCnH0GZzG-8q2HJBTWrl8.roa
Signing time:             Sat 13 Aug 2022 13:26:41 +0000
ROA not before:           Sat 13 Aug 2022 13:26:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        109.122.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:97:62:a9:6f:32:ac:0e:fe:05:fb:d6:ff:4c:29:5e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
        Validity
            Not Before: Aug 13 13:26:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd56c09282829c7d066731bef2ad872414d6ae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:13:c9:d5:31:45:7d:79:1e:80:0f:5f:dd:
                    4c:d5:5b:ba:23:00:85:5d:fa:62:d5:15:93:1e:cb:
                    66:42:78:8b:80:38:37:20:48:de:bf:49:62:81:93:
                    3d:4d:98:9c:67:22:1d:93:04:2e:22:f0:5e:25:4c:
                    60:a1:37:f1:0a:73:9a:13:4d:d7:21:e4:8e:70:12:
                    f7:ac:34:ad:d2:e6:6d:3f:ca:db:3f:90:8a:b6:3f:
                    9e:27:39:1f:71:43:d0:44:18:6e:c9:28:66:a8:d7:
                    68:d6:2d:04:de:49:5e:98:58:a1:14:6d:d5:10:90:
                    51:dc:9a:90:84:d3:72:e2:cb:bb:3e:fd:47:67:2b:
                    28:09:a5:0e:b8:cb:8e:76:a3:16:6b:f0:94:6b:a1:
                    9f:5d:66:77:52:a8:1d:d5:08:1e:f6:d8:93:59:b8:
                    a4:24:c6:bd:5b:d1:a9:b4:9a:3d:58:8a:6a:b3:39:
                    8e:a3:b4:85:21:9f:3c:ef:fb:32:d5:eb:2c:13:03:
                    b9:e2:04:32:0e:c0:05:2e:04:5a:55:6a:a2:ca:e0:
                    32:05:10:87:4b:4d:af:62:17:82:d2:bf:9c:30:76:
                    ee:bf:4b:cb:07:a0:69:69:5f:17:1e:96:0a:b7:26:
                    13:e3:e7:2e:77:d0:a6:7b:e8:f5:67:24:e0:e7:22:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:56:C0:92:82:82:9C:7D:06:67:31:BE:F2:AD:87:24:14:D6:AE:5F
            X509v3 Authority Key Identifier:
                keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/vVbAkoKCnH0GZzG-8q2HJBTWrl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:cb:b9:2d:f9:de:31:06:b8:3c:c7:c2:8b:32:67:20:0f:e6:
         8c:7c:9a:ec:21:05:b2:b4:b2:cf:5c:73:d6:c1:c5:7e:62:3d:
         8b:9b:88:24:a1:ee:93:e2:b5:df:00:d5:a2:d2:32:33:47:27:
         f0:31:95:90:31:14:46:d8:9d:ce:d5:8c:5d:cd:b8:09:9d:5e:
         8b:d5:d3:04:97:f8:44:8c:c3:23:14:fa:e1:ea:6d:6e:85:ac:
         af:c7:25:ba:8b:b0:44:9c:80:18:8f:d7:44:b0:49:e6:b1:b6:
         74:70:f7:35:16:f2:35:fe:b9:cd:00:7d:15:0f:88:dd:5c:81:
         a4:0e:8b:c0:47:8c:5a:8b:9e:51:88:29:bc:0f:92:da:d9:4e:
         5d:ed:7f:d8:be:b0:5b:5d:af:1b:7b:c3:c0:14:6a:d0:12:e4:
         fc:2f:35:79:36:ec:2d:1c:d1:d3:41:69:b6:71:bc:9b:06:a2:
         d6:d6:d9:22:da:1f:a5:2a:32:90:19:7a:95:98:19:36:eb:51:
         92:a0:a7:fa:d2:aa:06:53:83:4f:e8:ad:21:50:c2:86:17:11:
         01:37:dd:cc:96:3c:b5:05:cc:86:f6:a0:60:52:82:26:c7:64:
         74:b2:cd:65:f3:41:b5:ea:6c:43:d9:64:55:dc:eb:5b:4c:52:
         93:be:37:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:37 2023 by rpki-client on console-fra.rpki-client.org