Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Cj4Q1ivjyXTo3Tx-T9MrxfE2UiA.roa
File:                     Cj4Q1ivjyXTo3Tx-T9MrxfE2UiA.roa (raw, json)
Hash identifier:          x2RqJWhXV5h6RN8Uw9Up2FTZf9IJhQQe5FGLbs54S8c=
Subject key identifier:   0A:3E:10:D6:2B:E3:C9:74:E8:DD:3C:7E:4F:D3:2B:C5:F1:36:52:20
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       01856C2ECE41CF4A5E8CB59AC649DEA330CD
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Cj4Q1ivjyXTo3Tx-T9MrxfE2UiA.roa
Signing time:             Sun 01 Jan 2023 07:14:44 +0000
ROA not before:           Sun 01 Jan 2023 07:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     996
IP address blocks:        62.112.128.0/20 maxlen: 20
                          62.112.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:2e:ce:41:cf:4a:5e:8c:b5:9a:c6:49:de:a3:30:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Jan  1 07:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a3e10d62be3c974e8dd3c7e4fd32bc5f1365220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:09:8c:89:3f:13:63:a1:72:49:91:27:4e:
                    6c:50:a7:86:d1:7f:45:52:73:40:9d:84:bf:34:46:
                    98:54:d6:81:21:94:9e:c2:e8:c7:39:c7:d4:d9:3d:
                    e5:1b:32:14:20:2b:25:11:3c:99:c8:ff:32:01:7f:
                    5a:3f:e4:02:5d:2d:9d:d4:12:58:a9:1a:95:ea:b2:
                    08:37:eb:4e:53:51:59:22:69:93:f1:03:00:52:11:
                    07:53:33:6e:11:cb:19:db:e3:e5:dc:5d:a5:4e:c7:
                    a9:45:e2:39:43:74:43:43:af:de:7a:b0:c1:8f:5e:
                    b5:59:4d:e2:62:01:f6:2a:81:e6:2b:2e:5b:e1:79:
                    ea:cf:05:7a:a6:c8:88:55:28:df:20:8a:51:75:0b:
                    e8:18:ea:d3:d3:7a:84:42:d7:77:08:bd:99:1b:db:
                    90:e3:48:ad:36:bb:72:d9:80:27:fc:27:63:61:e6:
                    a4:d6:02:7d:a6:a2:83:11:3c:02:97:54:2c:8b:a9:
                    41:e7:8a:18:b4:a4:2b:77:1f:73:a5:ff:e9:56:bd:
                    c6:3b:39:bb:05:43:da:8a:5b:87:c6:de:c0:00:d9:
                    56:e9:f4:0b:1e:85:e4:43:5f:9b:8d:cc:9d:48:51:
                    99:34:e3:9c:a4:5f:ff:8b:86:c5:f4:25:f1:25:de:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3E:10:D6:2B:E3:C9:74:E8:DD:3C:7E:4F:D3:2B:C5:F1:36:52:20
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/Cj4Q1ivjyXTo3Tx-T9MrxfE2UiA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:2a:af:94:9a:d0:fe:ee:02:cd:d7:ac:a3:9f:ce:8e:ec:
         eb:20:53:12:6a:22:d3:96:6c:91:f8:60:38:fa:39:de:34:f0:
         b8:b6:d1:74:2b:cf:40:46:39:d4:b7:1e:87:5e:e4:d1:f4:30:
         96:99:8f:cc:48:11:8d:91:90:a9:5d:5f:42:9f:98:a5:f4:35:
         f1:14:80:1a:00:31:14:b6:bd:eb:29:63:63:35:aa:72:de:fa:
         c2:a2:2d:ee:30:0a:a3:9a:14:56:79:6e:b1:78:73:75:aa:72:
         f5:38:52:70:4c:d9:c9:ec:07:c4:55:29:d2:55:d2:e7:66:ca:
         7c:34:d4:4d:e0:db:89:e7:c0:1f:70:00:43:e0:44:5e:4f:68:
         9a:27:ea:ee:0b:9c:75:34:3a:b0:b6:6b:5b:49:60:e0:e5:39:
         f8:1d:24:b5:17:23:ac:43:0a:e2:1b:19:77:f4:5b:69:a1:7f:
         d1:27:1f:f7:58:52:2b:51:26:d6:92:35:be:b3:ee:7c:2c:15:
         62:99:7c:93:8c:55:6e:ef:5f:58:1e:ba:bd:1b:33:cd:f7:0e:
         e1:42:12:90:60:de:db:79:94:18:09:14:95:ce:7a:25:4d:2c:
         52:21:2c:9c:47:55:dc:91:70:f6:2b:d9:51:36:6c:47:81:8a:
         84:4c:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org