Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/Ux2iE6dwfB4dhc9EFodO6nkzkBA.roa
File:                     Ux2iE6dwfB4dhc9EFodO6nkzkBA.roa (raw, json)
Hash identifier:          opbjDrEBIxIEwb6zmYV4B5bP+X1bE1ILtxzfYG5R7xs=
Subject key identifier:   53:1D:A2:13:A7:70:7C:1E:1D:85:CF:44:16:87:4E:EA:79:33:90:10
Certificate issuer:       /CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
Certificate serial:       0182394D9A572EDE2AC75C11E52866384A40
Authority key identifier: A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/Ux2iE6dwfB4dhc9EFodO6nkzkBA.roa
Signing time:             Tue 26 Jul 2022 06:59:23 +0000
ROA not before:           Tue 26 Jul 2022 06:59:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398465
IP address blocks:        185.218.224.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:39:4d:9a:57:2e:de:2a:c7:5c:11:e5:28:66:38:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7fffa0278ed8655ebe6482a876dfc7c9de1bc
        Validity
            Not Before: Jul 26 06:59:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=531da213a7707c1e1d85cf4416874eea79339010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5e:ca:fa:ac:3f:17:07:4d:a0:14:69:fd:b6:
                    42:a0:1f:20:87:d6:19:3c:8c:30:98:28:00:81:22:
                    81:6a:a3:2e:07:82:d3:1b:7e:a7:14:e5:15:19:c8:
                    9e:ba:7a:cb:3b:60:27:cf:3c:36:99:f4:d0:91:a3:
                    cd:10:51:37:0a:2d:29:48:d2:81:e7:1f:3b:d7:ef:
                    e5:22:f5:a7:50:f5:9c:ff:2b:85:b9:a2:73:54:e9:
                    65:f7:1c:85:fd:15:19:f4:67:cd:03:c0:6d:d9:32:
                    f4:3a:ca:36:f7:85:50:01:b1:62:57:42:14:1a:5e:
                    5f:1d:82:f2:04:e3:d3:05:f5:72:8e:e8:cb:6b:2a:
                    1e:f9:3b:6c:8d:08:65:82:27:32:1a:59:f7:32:ed:
                    cd:64:60:58:b9:ef:7a:6b:e4:73:98:fc:75:ea:01:
                    aa:5d:37:ad:33:3c:7f:7c:79:21:ce:b3:0c:81:c1:
                    13:85:37:c5:32:aa:24:8b:9f:7f:4e:0e:10:84:18:
                    69:f2:83:34:20:b5:e1:d6:58:16:e9:78:b8:bc:f1:
                    f2:0e:18:1c:64:81:36:de:0b:94:3b:fd:2b:76:b7:
                    12:55:29:5a:f2:5c:72:b7:2d:43:c2:22:00:1a:06:
                    e0:4b:cf:a1:42:af:a9:67:d5:3c:9d:68:9c:0d:3a:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1D:A2:13:A7:70:7C:1E:1D:85:CF:44:16:87:4E:EA:79:33:90:10
            X509v3 Authority Key Identifier:
                keyid:A1:B7:FF:FA:02:78:ED:86:55:EB:E6:48:2A:87:6D:FC:7C:9D:E1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obf_-gJ47YZV6-ZIKodt_Hyd4bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/Ux2iE6dwfB4dhc9EFodO6nkzkBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5d1d57-fdea-4526-ae64-82a48dfe61bd/1/obf_-gJ47YZV6-ZIKodt_Hyd4bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.218.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:16:0a:30:6f:3f:45:eb:7e:ab:a0:8d:84:e0:ce:b9:3e:2e:
         91:f7:6c:a5:15:b4:64:80:7a:84:ed:ab:32:25:07:8c:45:6e:
         78:3c:06:bf:db:26:4f:af:27:86:83:97:f4:34:64:40:8a:d9:
         d0:fe:ba:1a:18:37:8a:a7:68:26:9d:06:53:2f:6e:ee:40:34:
         47:3e:59:01:27:ea:94:3a:97:cf:7d:a3:13:5b:7c:40:0d:49:
         e0:94:d3:23:d4:95:64:2c:85:7a:c5:44:fd:b3:4a:7f:ff:8b:
         c9:81:df:65:83:2d:12:0f:56:be:4a:19:ca:71:4b:0d:06:73:
         0e:12:92:63:b8:f8:14:17:fa:72:32:84:de:23:b9:6d:c5:1b:
         0c:16:93:7a:9b:3b:b6:a3:90:9a:24:7d:7f:b6:c7:51:e6:d7:
         17:05:db:23:8f:28:f0:31:5d:2a:5d:a4:cd:28:fa:0c:8b:d5:
         5f:e5:9f:1b:70:a2:f1:89:8b:2a:ab:fe:67:63:3d:07:54:d0:
         4c:7c:4f:45:3b:8b:83:c8:51:46:8a:21:ec:e0:18:13:14:d5:
         0f:ce:02:96:a5:94:ef:80:de:3c:58:b4:1e:70:32:6f:21:78:
         84:a4:2d:1f:30:08:32:f8:e7:cb:69:b1:2c:19:22:73:7f:0c:
         57:12:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-fra.rpki-client.org