Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/r05PTO3NwenzEzpsfDsWTD3nXyg.roa
File:                     r05PTO3NwenzEzpsfDsWTD3nXyg.roa (raw, json)
Hash identifier:          De4gz7BghFDVdfzNilY/TaO1w7hX0towN2NK9P6Fzkk=
Subject key identifier:   AF:4E:4F:4C:ED:CD:C1:E9:F3:13:3A:6C:7C:3B:16:4C:3D:E7:5F:28
Certificate issuer:       /CN=81896a2fbabea8e3029a2369115430fc62ced7a8
Certificate serial:       018326EC5C0A5AFD7F7C50DB9A7F1EE1D7DF
Authority key identifier: 81:89:6A:2F:BA:BE:A8:E3:02:9A:23:69:11:54:30:FC:62:CE:D7:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYlqL7q-qOMCmiNpEVQw_GLO16g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/r05PTO3NwenzEzpsfDsWTD3nXyg.roa
Signing time:             Sat 10 Sep 2022 10:22:47 +0000
ROA not before:           Sat 10 Sep 2022 10:22:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39855
IP address blocks:        62.68.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:26:ec:5c:0a:5a:fd:7f:7c:50:db:9a:7f:1e:e1:d7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81896a2fbabea8e3029a2369115430fc62ced7a8
        Validity
            Not Before: Sep 10 10:22:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=af4e4f4cedcdc1e9f3133a6c7c3b164c3de75f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:f8:46:8b:fe:bc:6d:7d:7f:96:8b:a8:8d:
                    86:6d:c7:cf:e6:60:ac:34:5c:21:fa:6a:12:93:26:
                    fa:07:4e:69:26:71:cd:e3:ef:ea:70:47:21:4f:3e:
                    8f:2d:67:3d:cb:93:db:e5:53:95:ba:5e:85:d0:35:
                    7f:d0:36:c1:c6:53:9e:b8:49:71:d2:ed:99:6b:75:
                    be:21:19:cb:c3:8d:59:c8:38:ba:fd:4e:70:be:e7:
                    3e:4f:69:bb:db:d3:bf:1e:64:13:96:fe:c1:07:28:
                    3d:50:74:43:3c:fd:a9:26:51:67:f6:ee:60:9d:07:
                    73:20:8b:02:c6:05:e1:98:74:12:f0:ef:46:8a:74:
                    7c:9e:11:e8:85:bc:a5:49:d2:ce:3e:f5:c3:94:54:
                    95:99:ac:2e:50:75:aa:fb:00:bd:f4:6e:0a:bc:4d:
                    50:bc:f0:fc:d1:f4:11:50:54:1b:52:d1:9d:be:7d:
                    fa:d4:78:7f:e5:a7:c8:bb:12:ab:f4:84:96:af:9e:
                    5d:02:f7:85:9f:df:fc:48:eb:e2:e6:87:93:9f:72:
                    ad:18:14:c6:8a:cc:77:c0:cc:84:50:a8:e2:96:c0:
                    4e:8e:da:67:99:62:d2:49:af:13:65:2b:dc:a1:2c:
                    ff:79:57:e3:f8:e7:65:33:fa:62:36:8d:39:59:c5:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:4F:4C:ED:CD:C1:E9:F3:13:3A:6C:7C:3B:16:4C:3D:E7:5F:28
            X509v3 Authority Key Identifier:
                keyid:81:89:6A:2F:BA:BE:A8:E3:02:9A:23:69:11:54:30:FC:62:CE:D7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYlqL7q-qOMCmiNpEVQw_GLO16g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/r05PTO3NwenzEzpsfDsWTD3nXyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6381b3-41d6-4ed8-bc50-f205e5c32e18/1/gYlqL7q-qOMCmiNpEVQw_GLO16g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:16:82:3d:48:7b:c4:ca:b3:b9:62:9e:0f:7a:7f:fe:a3:b9:
         12:ea:fd:a0:e4:bf:91:1b:57:77:05:3d:91:8a:93:8f:ed:18:
         1b:b8:a7:04:4b:79:d5:ab:88:0a:2b:0a:24:1b:50:63:48:3e:
         25:bb:2f:82:f4:89:f3:6b:69:75:10:64:57:57:e9:92:f0:17:
         6b:7d:8a:61:1e:e2:d6:69:8e:27:8c:e5:2d:8c:34:98:aa:76:
         f2:42:7d:c1:59:2d:98:20:fd:af:71:84:27:39:34:8f:2c:33:
         cc:3f:4d:b9:c4:e1:32:9f:8a:50:05:b8:64:9e:29:b9:ff:60:
         2a:42:9c:53:d0:ee:80:18:48:bf:3c:e8:89:0b:2c:87:99:11:
         d4:86:c7:2b:c4:90:19:88:db:88:33:cd:51:5b:28:34:3e:f7:
         b1:f9:79:fc:d2:35:64:a4:c7:a2:bd:42:9e:70:12:a0:09:56:
         75:1f:bf:80:07:16:60:95:56:a6:b5:4d:0d:e3:7f:52:eb:57:
         4f:f7:4e:c8:be:e1:d8:e7:c2:83:78:33:6b:8f:83:0b:11:a0:
         7a:4c:f3:58:05:9f:9b:9e:f0:33:ed:91:18:c4:6b:94:2d:83:
         0f:96:42:d1:f4:4d:de:c9:33:22:62:83:d0:00:02:0c:8c:d6:
         ad:e5:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org