Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/S3eETcAKWFHFGh2UlOA4AySaHHs.roa
File:                     S3eETcAKWFHFGh2UlOA4AySaHHs.roa (raw, json)
Hash identifier:          V2Clf9s8xYLVt37FCdoUFPfWncsjrJtYOmLowsuOyGI=
Subject key identifier:   4B:77:84:4D:C0:0A:58:51:C5:1A:1D:94:94:E0:38:03:24:9A:1C:7B
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       0182214AC00D582CC4EE3D7D2FE21B2F7C6D
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/S3eETcAKWFHFGh2UlOA4AySaHHs.roa
Signing time:             Thu 21 Jul 2022 15:05:23 +0000
ROA not before:           Thu 21 Jul 2022 15:05:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397423
IP address blocks:        62.112.128.0/20 maxlen: 20
                          62.112.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:21:4a:c0:0d:58:2c:c4:ee:3d:7d:2f:e2:1b:2f:7c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Jul 21 15:05:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b77844dc00a5851c51a1d9494e03803249a1c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8c:f5:56:88:de:5a:6a:05:f9:01:f8:58:25:
                    0c:f3:3b:10:10:de:cc:a3:32:3e:2f:ab:c6:03:8e:
                    fe:47:04:95:1e:d2:35:2e:ac:48:7b:33:79:80:6e:
                    74:e3:67:b3:be:51:94:5c:b8:b7:e0:db:46:4a:83:
                    7a:9a:77:b8:9c:65:0a:ae:6f:d7:7e:a2:8c:dc:59:
                    1e:9a:4f:c4:63:c8:ce:90:6a:36:4e:f4:cd:10:db:
                    a1:1b:55:04:39:4a:bc:c2:7b:2b:14:b3:4e:a5:9c:
                    ab:f1:2c:f2:46:5e:b2:0a:3c:85:3c:5a:a4:4b:f6:
                    d0:ce:69:98:37:d3:e4:06:c4:ee:5f:75:a8:0c:ce:
                    6a:bd:57:b1:d9:92:bc:60:03:02:82:b5:65:ae:ca:
                    47:39:89:de:71:94:98:4c:7a:f4:a4:cc:e8:12:f9:
                    f0:c6:e0:b0:44:ca:71:66:59:9d:65:cb:54:84:6d:
                    88:72:c0:92:56:2b:eb:53:c8:14:3b:7f:71:d9:1e:
                    cc:85:1f:80:12:b1:ff:ff:78:ee:55:f1:c2:08:17:
                    74:05:c0:ca:f0:84:a4:12:c2:6c:ec:f4:c7:ef:d1:
                    45:4b:69:63:17:f8:2b:af:9c:4b:b9:9f:43:29:68:
                    f1:7d:a8:51:00:36:72:4a:7b:1f:94:ae:21:d7:d9:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:84:4D:C0:0A:58:51:C5:1A:1D:94:94:E0:38:03:24:9A:1C:7B
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/S3eETcAKWFHFGh2UlOA4AySaHHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:cf:09:d3:b2:fd:10:bc:06:32:b6:b3:71:77:95:19:8d:0d:
         7e:cb:d2:e5:63:a4:ae:4c:ab:e9:9e:70:f9:9a:f0:d9:a9:7f:
         0a:ea:bd:3f:e6:a2:a0:e4:ef:35:bc:29:59:20:34:9c:d0:f6:
         bb:1e:b1:5e:a2:48:d7:0a:20:c0:dd:e4:57:13:de:0e:ab:0b:
         a1:c9:38:9f:ba:46:96:f8:3d:f0:ba:2e:9e:4e:15:9f:67:16:
         6c:ef:a1:ba:1c:c1:7f:66:c2:17:ea:d1:bd:0f:13:0e:54:9f:
         5c:d5:e0:1f:59:98:33:0b:4a:51:ae:33:bc:26:b5:9b:a2:dc:
         d8:b3:b0:86:45:51:3f:32:d4:da:e7:aa:16:82:97:72:a0:eb:
         ef:1c:a4:d4:d8:29:45:3e:ec:be:41:e4:25:f5:a9:26:89:21:
         cb:48:d1:ac:3c:26:35:5f:7d:8c:3f:59:e6:35:9d:92:1b:18:
         24:52:eb:18:8d:86:84:70:ea:70:af:36:03:4a:e4:f7:48:43:
         15:e5:40:66:aa:9e:4d:6a:b3:6a:ae:bf:66:b1:b0:cc:da:a3:
         46:6c:87:1a:dc:c1:44:75:61:ed:56:76:f9:af:c3:e6:7e:45:
         e0:07:51:02:76:1a:43:f6:68:eb:e9:a7:27:53:43:c8:ce:47:
         2d:d4:1f:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIhSsANWCzE7j19L+IbL3xtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTBiODczY2MxYTc4ZDQzYmI3MDMxOWZmYTU0OTUwNTc5
MDFhNjQwHhcNMjIwNzIxMTUwNTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjc3ODQ0ZGMwMGE1ODUxYzUxYTFkOTQ5NGUwMzgwMzI0OWExYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoz1VojeWmoF+QH4WCUM8zsQEN7M
ozI+L6vGA47+RwSVHtI1LqxIezN5gG5042ezvlGUXLi34NtGSoN6mne4nGUKrm/X
fqKM3Fkemk/EY8jOkGo2TvTNENuhG1UEOUq8wnsrFLNOpZyr8SzyRl6yCjyFPFqk
S/bQzmmYN9PkBsTuX3WoDM5qvVex2ZK8YAMCgrVlrspHOYnecZSYTHr0pMzoEvnw
xuCwRMpxZlmdZctUhG2IcsCSVivrU8gUO39x2R7MhR+AErH//3juVfHCCBd0BcDK
8ISkEsJs7PTH79FFS2ljF/grr5xLuZ9DKWjxfahRADZySnsflK4h19mr5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEt3hE3AClhRxRodlJTgOAMkmhx7MB8GA1UdIwQY
MBaAFHHguHPMGnjUO7cDGf+lSVBXkBpkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUt
ZTBjYTRkMTY2ZjFmLzEvUzNlRVRjQUtXRkhGR2gyVWxPQTRBeVNhSEhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xMGNjMmMtN2VhMS00Y2JiLTg0ZDUtZTBjYTRkMTY2ZjFm
LzEvY2VDNGM4d2FlTlE3dHdNWl82VkpVRmVRR21RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPnCAMA0G
CSqGSIb3DQEBCwUAA4IBAQByzwnTsv0QvAYytrNxd5UZjQ1+y9LlY6SuTKvpnnD5
mvDZqX8K6r0/5qKg5O81vClZIDSc0Pa7HrFeokjXCiDA3eRXE94OqwuhyTifukaW
+D3wui6eThWfZxZs76G6HMF/ZsIX6tG9DxMOVJ9c1eAfWZgzC0pRrjO8JrWbotzY
s7CGRVE/MtTa56oWgpdyoOvvHKTU2ClFPuy+QeQl9akmiSHLSNGsPCY1X32MP1nm
NZ2SGxgkUusYjYaEcOpwrzYDSuT3SEMV5UBmqp5NarNqrr9msbDM2qNGbIca3MFE
dWHtVnb5r8PmfkXgB1ECdhpD9mjr6acnU0PIzkct1B+y
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org