Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa
File:                     reh6dAwNUlMBVicBizdYmcvEIAg.roa (raw, json)
Hash identifier:          RYMWpqf8xX1AVSryT+zjOMu9g0dQSjLh7NsOWPTTMFA=
Subject key identifier:   AD:E8:7A:74:0C:0D:52:53:01:56:27:01:8B:37:58:99:CB:C4:20:08
Certificate issuer:       /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial:       01217DD1
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa
Signing time:             Mon 07 Mar 2022 17:38:48 +0000
ROA not before:           Mon 07 Mar 2022 17:38:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        62.3.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18972113 (0x1217dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
        Validity
            Not Before: Mar  7 17:38:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ade87a740c0d5253015627018b375899cbc42008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:6b:e5:4a:d7:df:9e:5d:51:2f:a8:3e:62:
                    5c:f9:f9:0b:20:68:f1:f8:e1:cb:b5:0c:1d:02:e2:
                    7a:db:22:84:b2:16:03:e5:df:e7:aa:a3:1a:99:7a:
                    ad:be:07:c9:09:12:a2:1d:6c:7b:e2:e4:c5:dc:12:
                    f4:74:97:1b:5f:21:d6:30:ec:e3:9f:1d:45:34:f8:
                    a4:4c:c0:51:f4:39:bc:f6:46:a5:05:88:64:ca:b0:
                    91:e6:4b:7f:ca:e8:ef:0c:02:76:a8:22:4f:2e:36:
                    c3:74:22:6a:2c:49:55:93:c2:d4:5b:70:05:c7:c4:
                    86:64:52:3d:e4:97:3f:79:23:ae:8a:ac:88:4a:f1:
                    39:cc:ab:22:1e:28:44:05:5b:d4:45:6f:13:d1:8d:
                    1f:ea:d1:1c:6a:35:99:37:89:d3:ca:d3:49:31:47:
                    de:4b:08:b9:1d:c6:d9:56:e8:9d:b3:d3:04:9a:4a:
                    b1:4d:f2:bb:ce:86:e1:06:0e:15:c9:53:ba:3a:16:
                    99:48:54:3b:c7:f8:c2:ba:2c:d5:f9:c9:bc:e8:d5:
                    df:37:5e:23:52:80:41:54:b4:b4:9f:94:95:e1:63:
                    6e:3a:2a:b0:1c:24:5d:e6:6b:97:9b:83:3b:87:60:
                    f0:79:2e:78:3c:e8:88:f5:5e:6a:b1:9c:45:9a:eb:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:7A:74:0C:0D:52:53:01:56:27:01:8B:37:58:99:CB:C4:20:08
            X509v3 Authority Key Identifier:
                keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/reh6dAwNUlMBVicBizdYmcvEIAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:eb:6e:ac:e2:a1:a8:bf:f6:0e:5d:bd:11:f0:75:d0:c4:cf:
         b9:2e:8f:00:a8:80:52:d0:31:54:c3:30:77:c8:8c:75:2b:61:
         62:4f:3c:20:07:f3:27:75:1a:a1:e7:f5:1f:c5:41:47:a1:40:
         c3:2c:d4:20:88:28:2b:58:b6:0d:7a:c4:95:00:ba:6c:59:b3:
         d9:7e:87:75:55:af:90:d3:6b:db:26:3e:46:da:c4:05:35:40:
         5f:e3:b8:64:87:0e:f5:67:a8:48:0d:0a:cc:b6:1c:29:c0:5b:
         48:08:14:ad:d4:bc:31:32:0d:73:4c:a1:bc:90:b1:ad:78:9a:
         b5:35:50:d6:ce:02:9f:f3:d2:e2:ab:ab:5b:89:03:f9:90:2b:
         2c:b7:a9:f1:dd:66:68:59:fc:7b:09:8f:5c:89:ec:3b:72:e0:
         90:40:21:a3:2b:99:00:52:b6:63:51:5d:41:a7:25:12:7c:e3:
         48:f2:eb:a0:d3:b6:32:f4:df:67:50:70:9c:b0:9f:24:28:95:
         47:0a:4a:4d:3d:eb:32:07:fb:79:e6:f6:50:5b:99:0d:16:a0:
         7a:c2:96:24:74:3f:97:23:87:ee:99:1f:d0:bc:ac:24:c2:5b:
         dd:2e:f1:82:c4:23:c3:9e:dd:71:c9:8a:2f:66:19:6f:36:82:
         18:8b:9b:a1
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEASF90TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
N2MyMzJkM2YwMDVjYTc0NWQ4MThjZDY0MzllODA4NzkwNTAxMGU0MB4XDTIyMDMw
NzE3Mzg0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWRlODdhNzQwYzBk
NTI1MzAxNTYyNzAxOGIzNzU4OTljYmM0MjAwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKHba+VK19+eXVEvqD5iXPn5CyBo8fjhy7UMHQLietsihLIW
A+Xf56qjGpl6rb4HyQkSoh1se+LkxdwS9HSXG18h1jDs458dRTT4pEzAUfQ5vPZG
pQWIZMqwkeZLf8ro7wwCdqgiTy42w3QiaixJVZPC1FtwBcfEhmRSPeSXP3kjroqs
iErxOcyrIh4oRAVb1EVvE9GNH+rRHGo1mTeJ08rTSTFH3ksIuR3G2VbonbPTBJpK
sU3yu86G4QYOFclTujoWmUhUO8f4wros1fnJvOjV3zdeI1KAQVS0tJ+UleFjbjoq
sBwkXeZrl5uDO4dg8HkueDzoiPVearGcRZrrEvUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSt6Hp0DA1SUwFWJwGLN1iZy8QgCDAfBgNVHSMEGDAWgBSHwjLT8AXKdF2B
jNZDnoCHkFAQ5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2g4SXkwX0FGeW5SZGdZeldRNTZBaDVCUUVPUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvNWY1NzY3LTdhZjUtNGM2Ni05NjkyLTVkNGIwYjc4ZTRlYi8x
L3JlaDZkQXdOVWxNQlZpY0JpemRZbWN2RUlBZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
NWY1NzY3LTdhZjUtNGM2Ni05NjkyLTVkNGIwYjc4ZTRlYi8xL2g4SXkwX0FGeW5S
ZGdZeldRNTZBaDVCUUVPUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DMzANBgkqhkiG9w0BAQsFAAOC
AQEAM+turOKhqL/2Dl29EfB10MTPuS6PAKiAUtAxVMMwd8iMdSthYk88IAfzJ3Ua
oef1H8VBR6FAwyzUIIgoK1i2DXrElQC6bFmz2X6HdVWvkNNr2yY+RtrEBTVAX+O4
ZIcO9WeoSA0KzLYcKcBbSAgUrdS8MTINc0yhvJCxrXiatTVQ1s4Cn/PS4qurW4kD
+ZArLLep8d1maFn8ewmPXInsO3LgkEAhoyuZAFK2Y1FdQaclEnzjSPLroNO2MvTf
Z1BwnLCfJCiVRwpKTT3rMgf7eeb2UFuZDRagesKWJHQ/lyOH7pkf0LysJMJb3S7x
gsQjw57dccmKL2YZbzaCGIuboQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org