Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Mi0ozoE4mfihxXSNS6hAEALfbt0.roa
File:                     Mi0ozoE4mfihxXSNS6hAEALfbt0.roa (raw, json)
Hash identifier:          gzOyZcb1wqSABcPuyaAssyGzWgihCo2lEEnBT2P+rI8=
Subject key identifier:   32:2D:28:CE:81:38:99:F8:A1:C5:74:8D:4B:A8:40:10:02:DF:6E:DD
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       0563B7F9
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Mi0ozoE4mfihxXSNS6hAEALfbt0.roa
Signing time:             Mon 13 Jun 2022 01:33:05 +0000
ROA not before:           Mon 13 Jun 2022 01:33:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212921
IP address blocks:        185.202.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90421241 (0x563b7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Jun 13 01:33:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=322d28ce813899f8a1c5748d4ba8401002df6edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:49:c2:d9:82:59:3f:ee:ba:c3:11:14:f5:
                    2c:7d:dc:41:86:94:29:ad:45:11:4c:07:aa:09:bc:
                    fc:13:7a:31:82:c6:cf:97:0e:0b:5d:ec:15:9e:aa:
                    f7:34:cf:4e:d6:98:26:ac:03:fd:d7:71:fc:27:bc:
                    d9:cd:8b:0a:23:b5:a4:6a:3f:b9:9c:85:25:9d:e0:
                    eb:88:0c:28:10:2c:b6:f8:9c:de:93:b0:e0:83:7c:
                    8b:d9:31:f0:55:19:99:8a:f5:98:a8:bc:9c:ab:a5:
                    ac:89:a7:3b:b0:54:5e:1d:f4:e4:81:7b:cb:a1:70:
                    e3:56:7b:0e:ef:0a:73:b7:1d:26:8d:22:7c:d1:3e:
                    8f:89:67:df:e1:4d:52:e5:a8:b8:c7:1f:e2:c9:73:
                    21:f2:22:1a:af:40:7e:20:79:ec:92:b5:2f:24:d9:
                    3f:52:04:34:8d:01:7e:a6:13:41:02:4e:74:9d:fc:
                    ba:bc:3f:25:8e:53:9a:9e:99:55:12:e9:d7:81:44:
                    5e:8a:c3:50:34:9a:a3:46:4c:ea:94:c4:1e:27:f2:
                    81:03:ad:66:ee:5c:de:d2:1a:64:5c:12:b8:46:22:
                    f5:d0:a8:92:14:23:1d:c2:eb:a1:43:6a:b6:78:ba:
                    9f:ef:a7:1b:89:e0:c8:03:78:7a:65:d0:23:1b:e9:
                    04:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2D:28:CE:81:38:99:F8:A1:C5:74:8D:4B:A8:40:10:02:DF:6E:DD
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/Mi0ozoE4mfihxXSNS6hAEALfbt0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6f:0f:b7:fc:18:74:c9:96:d5:1f:b2:41:5f:78:36:27:13:
         0b:05:02:bb:b6:24:09:c6:16:a3:cf:8a:74:c1:eb:a3:b2:31:
         4b:d2:b7:27:1a:72:89:bb:c0:22:fb:29:dc:c7:4f:d4:10:38:
         bc:0a:db:13:d8:ef:9c:ba:fa:18:a9:09:e4:22:2f:19:ac:df:
         3a:79:1d:a1:85:79:35:38:cd:00:ca:84:bd:3d:09:5e:03:e3:
         b1:45:a5:a7:18:95:3c:c6:a3:d9:af:14:40:4d:51:54:ef:4d:
         c7:6a:81:8c:ed:d8:06:85:5f:f7:33:a7:3d:37:50:da:52:49:
         e6:ca:ba:2c:0b:ad:df:67:46:43:59:0c:35:42:00:6f:b9:bd:
         8b:b9:c1:b9:fb:1a:bc:fb:34:1f:f9:f3:10:65:7e:0e:46:0c:
         4d:12:24:e2:14:48:71:85:e9:46:89:04:c9:02:58:6b:d2:fd:
         96:58:01:96:d3:09:a7:5d:b3:76:12:8b:eb:27:02:fa:7a:f3:
         63:92:72:70:ef:66:13:cd:00:b6:bf:b0:2b:29:cb:5f:f7:15:
         34:b5:32:e7:ce:57:ef:d7:c2:f4:ff:05:3b:23:07:0f:72:e4:
         28:a7:2b:99:58:fa:1c:b4:d1:bc:5e:d2:98:c9:91:f1:cd:c0:
         3b:8e:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org