Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/3PSNMypFtPLV7gleCHuvEW3JJRc.roa
File:                     3PSNMypFtPLV7gleCHuvEW3JJRc.roa (raw, json)
Hash identifier:          OvJb3w2Swwm4l8tDDJ/i2fodQWnhEToLpx3Y5GY8PNA=
Subject key identifier:   DC:F4:8D:33:2A:45:B4:F2:D5:EE:09:5E:08:7B:AF:11:6D:C9:25:17
Certificate issuer:       /CN=a2ba304d9c599ef2667cca07033690aa2af871e4
Certificate serial:       0223F781
Authority key identifier: A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orowTZxZnvJmfMoHAzaQqir4ceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/3PSNMypFtPLV7gleCHuvEW3JJRc.roa
Signing time:             Wed 16 Mar 2022 16:22:56 +0000
ROA not before:           Wed 16 Mar 2022 16:22:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        194.62.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35911553 (0x223f781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ba304d9c599ef2667cca07033690aa2af871e4
        Validity
            Not Before: Mar 16 16:22:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcf48d332a45b4f2d5ee095e087baf116dc92517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:d7:f3:27:e0:16:e6:61:25:b9:f0:02:90:
                    55:da:80:f7:83:76:33:9d:d3:78:23:4b:06:36:3e:
                    dc:98:1d:7c:70:7c:ce:6b:91:a0:c1:2b:a0:8d:e5:
                    a2:70:75:ce:91:e9:7b:3f:85:2d:30:0b:d8:58:a3:
                    d2:36:d6:8f:c6:97:88:3f:c9:df:cf:71:25:e0:06:
                    e8:55:f6:d0:13:ee:aa:19:cf:7a:56:df:26:28:f6:
                    4a:61:28:55:e0:a1:1b:5e:28:a5:3c:80:6d:35:9a:
                    9b:14:97:3d:da:73:97:df:1b:7b:cc:6e:a7:fd:7a:
                    b8:f2:5a:0f:97:9a:a3:67:78:17:52:e5:88:b7:46:
                    7c:7c:11:8a:25:4d:c8:b8:3c:23:85:60:c6:b9:54:
                    d8:96:7c:44:84:76:ed:95:df:d5:5b:04:fd:ad:ea:
                    26:17:0c:97:2f:f8:8e:e1:86:ca:dc:66:21:14:6d:
                    2a:05:79:96:2d:43:9b:c6:28:67:75:32:d2:91:3a:
                    c9:ad:a9:b3:d0:71:87:60:a7:18:4b:6a:cc:52:71:
                    da:02:13:d7:2a:e6:e9:8c:fb:b0:a3:2a:db:6f:96:
                    3d:29:cd:60:a5:8a:a4:ab:a3:10:aa:bf:e3:ac:64:
                    bc:e4:c3:23:3e:e0:d5:ab:84:b8:c4:41:38:5d:fb:
                    31:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:8D:33:2A:45:B4:F2:D5:EE:09:5E:08:7B:AF:11:6D:C9:25:17
            X509v3 Authority Key Identifier:
                keyid:A2:BA:30:4D:9C:59:9E:F2:66:7C:CA:07:03:36:90:AA:2A:F8:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orowTZxZnvJmfMoHAzaQqir4ceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/3PSNMypFtPLV7gleCHuvEW3JJRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/31f813-e5c0-4882-bd53-d09d5306a6d7/1/orowTZxZnvJmfMoHAzaQqir4ceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:ef:13:b2:2e:b6:c0:41:4c:6f:98:fb:12:84:f7:79:a5:
         ba:f0:01:14:bb:d9:89:fa:bd:68:f1:32:90:4f:80:d6:1b:03:
         aa:b2:f8:7e:86:40:32:dc:88:b3:4a:a1:75:35:61:1e:3c:75:
         e8:0d:07:e8:72:cc:cd:50:2f:39:c1:6d:4b:d0:0e:bc:5b:5c:
         ad:f1:4f:53:49:05:b4:60:41:08:51:c7:d3:e9:1d:58:2f:a7:
         7d:23:67:a4:0c:23:f1:03:4e:4f:3f:2d:59:8a:15:a4:72:aa:
         87:c3:a9:f7:7d:80:08:ef:eb:d8:ef:5a:9a:e2:ca:0c:79:c8:
         f8:4c:6e:db:b4:d8:5a:2c:7c:fb:cb:a7:78:50:eb:8d:89:c6:
         2c:15:31:07:be:0a:f9:b8:1e:26:0d:85:91:18:14:b4:fe:5d:
         b1:cb:e7:a8:3d:21:c7:f2:9a:a6:8a:ca:78:4c:3e:0f:22:0c:
         f5:5d:30:64:bb:44:5b:b7:12:51:36:e1:91:e0:b1:ea:fd:f2:
         98:84:28:07:0f:ce:e9:72:40:a6:8b:65:d2:a9:c8:6b:2b:c3:
         88:5c:4b:44:23:68:be:b5:e8:dc:41:0a:89:aa:f8:46:87:4e:
         72:d6:a9:f9:94:85:cb:f7:b1:91:99:02:99:10:21:7f:f8:88:
         40:f5:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:21 2024 by rpki-client on console-ams.rpki-client.org