Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VBspiq0gD3kdZRZC3bZvmHjSp6U.roa
File:                     VBspiq0gD3kdZRZC3bZvmHjSp6U.roa (raw, json)
Hash identifier:          8/T6GkzmZJY/dUKUxAdRK85W1s5OrCDq82F1KX+3EEs=
Subject key identifier:   54:1B:29:8A:AD:20:0F:79:1D:65:16:42:DD:B6:6F:98:78:D2:A7:A5
Certificate issuer:       /CN=71e0b873cc1a78d43bb70319ffa5495057901a64
Certificate serial:       01860DE6C2488045E5DB317F9910B227D3BA
Authority key identifier: 71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VBspiq0gD3kdZRZC3bZvmHjSp6U.roa
Signing time:             Wed 01 Feb 2023 16:54:32 +0000
ROA not before:           Wed 01 Feb 2023 16:54:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        62.112.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0d:e6:c2:48:80:45:e5:db:31:7f:99:10:b2:27:d3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e0b873cc1a78d43bb70319ffa5495057901a64
        Validity
            Not Before: Feb  1 16:54:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=541b298aad200f791d651642ddb66f9878d2a7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:63:66:a7:3a:12:e6:c3:a9:3d:21:bd:f4:b9:
                    f2:97:32:42:dd:49:3f:67:52:5c:48:74:90:a1:f6:
                    da:4d:39:ef:2d:da:2c:d8:a5:4d:ec:e6:84:e7:ce:
                    e2:4a:77:7d:82:c6:71:a3:62:20:47:2c:17:0c:68:
                    cf:40:2e:3d:de:ae:39:99:ee:80:51:04:55:4c:12:
                    f0:16:13:0d:81:e1:2b:1a:eb:4c:e3:94:46:3f:b0:
                    9a:55:f9:a7:28:b7:f4:f2:ea:1d:6a:a2:e9:a1:20:
                    32:7a:53:29:39:9a:d8:12:f2:1d:59:cf:d6:9f:15:
                    b3:55:7d:3c:4c:ed:f3:40:24:95:d0:85:50:24:da:
                    77:dd:87:9c:0a:89:db:1c:e3:c7:94:b1:87:63:29:
                    70:3e:84:14:bd:f3:ac:6f:61:c0:e6:7d:8f:7b:f0:
                    38:58:0e:13:3a:80:18:64:63:b5:d1:b5:d3:6b:b4:
                    7d:26:07:3b:8e:de:c6:ee:34:c6:ba:29:ef:87:d7:
                    4d:5a:da:65:bc:10:ed:d7:f1:d4:50:ae:c4:a6:99:
                    e1:08:55:29:fd:0c:d4:56:3a:0b:48:62:20:2a:eb:
                    d1:75:57:f3:35:7c:c0:4d:4d:97:c0:2d:4a:fa:18:
                    1f:26:e6:ec:ee:9f:f8:31:5d:aa:de:73:d9:4a:94:
                    91:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1B:29:8A:AD:20:0F:79:1D:65:16:42:DD:B6:6F:98:78:D2:A7:A5
            X509v3 Authority Key Identifier:
                keyid:71:E0:B8:73:CC:1A:78:D4:3B:B7:03:19:FF:A5:49:50:57:90:1A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/VBspiq0gD3kdZRZC3bZvmHjSp6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/10cc2c-7ea1-4cbb-84d5-e0ca4d166f1f/1/ceC4c8waeNQ7twMZ_6VJUFeQGmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:08:8c:5b:e9:a9:70:b6:7d:a6:d3:37:40:c7:c7:68:c4:90:
         36:21:7f:cf:03:58:c3:d6:a5:9f:ba:3c:a1:9d:cb:a4:df:a4:
         d6:36:dc:07:6c:c3:fc:81:b4:1f:c5:d1:a9:7e:52:1f:80:0c:
         09:5b:2a:0d:38:0f:0e:c3:82:75:6a:cd:cf:8b:f4:da:bc:bb:
         cf:94:94:b9:7c:a3:c5:10:47:c4:9d:0c:3d:d8:2f:4a:bf:ce:
         75:f5:9f:42:22:73:f3:49:c2:9a:c3:56:d2:0a:8e:85:ea:91:
         ba:72:ac:3a:fd:ee:a4:a3:89:39:4e:e7:6a:79:25:c4:a5:07:
         77:d4:2a:ff:b9:6c:12:b8:01:e2:88:a2:ae:56:cd:d1:6b:9a:
         b9:ed:d1:2c:45:93:7d:dd:cc:6c:51:0e:93:f1:cd:21:8a:fe:
         34:59:9c:f9:bc:5f:90:14:00:d2:6e:45:b9:73:01:46:d3:57:
         91:cd:d5:9f:38:b3:9b:a3:eb:48:63:cd:ed:d0:6b:74:21:d5:
         f9:96:92:0c:df:f0:5c:6d:bf:19:90:59:44:8c:5a:98:1e:76:
         3b:01:ee:00:95:02:7f:7d:7b:d0:f0:44:51:f1:11:8c:14:d4:
         e1:a3:f1:a0:ba:7b:4f:c6:8d:3f:12:ad:ec:82:4e:f9:1f:8f:
         79:93:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org