Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/62ECmOPZtvTILIYLZu9KmNZ1shw.roa
File:                     62ECmOPZtvTILIYLZu9KmNZ1shw.roa (raw, json)
Hash identifier:          hUQ1viTjyje/hdpUw6CE2J6IURmpPcQYbT0TA6D3z+4=
Subject key identifier:   EB:61:02:98:E3:D9:B6:F4:C8:2C:86:0B:66:EF:4A:98:D6:75:B2:1C
Certificate issuer:       /CN=ccb66e7ddf3443919aa58c110f10d76bc46b4330
Certificate serial:       06395362
Authority key identifier: CC:B6:6E:7D:DF:34:43:91:9A:A5:8C:11:0F:10:D7:6B:C4:6B:43:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zLZufd80Q5GapYwRDxDXa8RrQzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/62ECmOPZtvTILIYLZu9KmNZ1shw.roa
Signing time:             Sat 01 Jan 2022 09:58:01 +0000
ROA not before:           Sat 01 Jan 2022 09:58:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200851
IP address blocks:        45.66.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104420194 (0x6395362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb66e7ddf3443919aa58c110f10d76bc46b4330
        Validity
            Not Before: Jan  1 09:58:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb610298e3d9b6f4c82c860b66ef4a98d675b21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:d9:40:b4:83:a2:56:4e:ed:25:7e:00:3d:
                    93:41:47:e6:9b:a4:cf:de:5d:65:77:b9:1a:58:41:
                    e6:07:9b:99:c6:ec:95:b0:fe:4c:bf:e6:71:f2:72:
                    e4:f2:d8:3a:1d:97:3b:a2:ed:fd:53:54:20:8f:81:
                    17:98:d9:1b:39:0a:df:ab:55:96:c2:ff:b5:23:f5:
                    3e:2a:13:8a:96:35:2e:29:02:c7:7f:f9:31:eb:3c:
                    0a:eb:9c:56:e4:f9:59:92:28:89:20:3b:1e:f7:a2:
                    f8:ad:92:58:10:33:c2:a3:eb:38:31:29:9e:ec:fb:
                    98:b5:fd:da:5e:5f:c8:e6:2e:a6:30:15:ff:fd:98:
                    f6:4b:5f:f1:0c:76:d8:63:52:49:07:3e:58:c7:66:
                    fc:11:eb:3d:91:55:36:7b:d3:16:3d:6c:57:71:95:
                    66:e3:48:a8:e4:27:6d:ac:76:a2:a6:9c:34:23:1c:
                    84:d0:27:dc:d7:7c:92:82:96:1d:86:97:e0:d0:f5:
                    38:82:0f:99:ef:98:56:49:54:50:55:b9:4b:13:4b:
                    4a:81:03:18:66:76:ef:a8:8c:6e:5b:bb:d1:db:b6:
                    be:14:9e:e2:d9:e9:a5:27:56:c5:ef:ed:5a:26:b1:
                    c3:a2:49:38:2c:4b:0e:40:aa:e7:b1:32:e1:f7:35:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:61:02:98:E3:D9:B6:F4:C8:2C:86:0B:66:EF:4A:98:D6:75:B2:1C
            X509v3 Authority Key Identifier:
                keyid:CC:B6:6E:7D:DF:34:43:91:9A:A5:8C:11:0F:10:D7:6B:C4:6B:43:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLZufd80Q5GapYwRDxDXa8RrQzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/62ECmOPZtvTILIYLZu9KmNZ1shw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b6dd11-a42e-4145-826d-cd7488c7e5f1/1/zLZufd80Q5GapYwRDxDXa8RrQzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:d2:a8:aa:13:4c:b1:18:fc:89:ec:4b:d2:a8:57:c8:7c:
         ca:c6:db:23:77:b7:d0:5f:a8:e0:13:47:26:d2:30:74:fb:30:
         73:51:41:9f:c4:3e:c5:1b:af:02:ce:4d:a7:ce:a8:29:65:21:
         8d:5f:d0:a8:b1:92:ac:16:9f:99:7e:21:97:7a:6f:5c:c5:46:
         a0:de:1c:73:d2:a5:f0:82:3a:2e:49:18:25:6c:e8:8d:fb:69:
         1f:32:6e:67:f4:d8:45:d0:34:5c:b6:b0:86:65:03:26:7d:90:
         9e:4f:db:fb:37:ef:a2:28:9e:b5:b3:86:3c:a0:4f:33:fb:6d:
         a5:be:7e:d0:54:f3:c1:37:5b:3f:37:66:f8:41:79:64:80:e7:
         db:b0:33:c3:c4:ca:68:1e:2d:ef:14:02:2a:a9:60:5a:08:cb:
         5b:15:f8:a5:d6:96:74:d0:7a:e0:94:33:ce:db:c5:86:19:25:
         86:33:ea:e9:06:06:17:d8:d3:0c:18:75:30:3b:a4:5c:05:7b:
         d9:75:aa:b9:73:13:1c:fb:6f:87:e6:08:16:4c:88:ed:f8:ce:
         39:79:66:12:76:52:70:d8:4a:b9:0f:cb:c8:0f:49:60:d3:29:
         a5:e1:8b:8b:ca:4e:62:08:37:72:2e:f8:e8:74:da:4f:40:5f:
         ff:62:97:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org