Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Jio83fwZinOkH5K8XiyrFpJ9La4.roa
File:                     Jio83fwZinOkH5K8XiyrFpJ9La4.roa (raw, json)
Hash identifier:          WWnI6gp1luhAG8EoQzsWId1LFyJdN3rkbEKZ1/s+Apg=
Subject key identifier:   26:2A:3C:DD:FC:19:8A:73:A4:1F:92:BC:5E:2C:AB:16:92:7D:2D:AE
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       0183658219EB456056687609D81CDB1D848A
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Jio83fwZinOkH5K8XiyrFpJ9La4.roa
Signing time:             Thu 22 Sep 2022 14:02:48 +0000
ROA not before:           Thu 22 Sep 2022 14:02:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202848
IP address blocks:        86.62.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:65:82:19:eb:45:60:56:68:76:09:d8:1c:db:1d:84:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Sep 22 14:02:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=262a3cddfc198a73a41f92bc5e2cab16927d2dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:e7:0f:5a:96:ab:6f:04:d3:e7:e4:dc:5b:
                    9a:82:d6:40:af:78:67:22:01:42:8c:2d:bd:86:15:
                    59:06:76:34:d7:1a:22:21:f5:d9:f7:5f:76:29:36:
                    60:dc:e9:3d:f5:23:4b:82:67:5e:69:4d:15:aa:08:
                    c4:a4:3a:cc:be:04:b2:d9:f0:5a:c6:d1:62:12:b3:
                    43:ab:de:da:e8:68:23:f3:3a:4b:e3:d4:cf:e3:31:
                    87:36:81:1c:bc:07:07:34:bf:0c:68:4d:a7:75:80:
                    ce:7d:22:4d:19:3e:db:89:43:62:ea:77:e9:d9:76:
                    e6:1b:e1:61:61:42:a0:5b:54:cd:38:c1:27:37:b7:
                    a6:0a:e3:7b:b7:1c:a9:88:56:a2:21:4f:c8:68:3a:
                    9c:86:d1:3c:4f:74:62:79:fd:b5:50:7e:71:a7:71:
                    19:3b:a1:31:57:fd:7f:27:32:9a:42:c6:d6:df:19:
                    9f:ed:ef:68:1c:5e:10:f6:61:3c:89:b9:53:6b:9f:
                    2b:30:15:67:ef:70:34:03:a0:a5:78:1f:2d:be:81:
                    a6:d8:5b:fb:82:92:ba:7c:8a:e2:cc:64:c6:82:c2:
                    77:9e:3f:78:4b:4b:5b:0a:f0:aa:44:a4:7f:d6:e0:
                    58:d3:bc:37:06:2f:87:3c:29:13:52:71:e5:32:d3:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:3C:DD:FC:19:8A:73:A4:1F:92:BC:5E:2C:AB:16:92:7D:2D:AE
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/Jio83fwZinOkH5K8XiyrFpJ9La4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.62.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8a:d4:53:88:51:e6:cb:9d:09:9d:b3:ec:29:ce:60:01:1a:
         d8:d9:32:23:d7:97:1a:16:b2:d6:3e:f0:ba:04:03:04:1c:6c:
         03:7e:f2:6b:c7:cd:72:0f:31:53:5a:8b:e4:23:66:cd:2b:ef:
         a3:ee:c8:3b:50:68:3f:66:89:47:fe:e6:c8:17:da:37:51:99:
         01:8e:7e:bc:ae:f7:49:23:19:a5:76:e9:93:f3:46:02:25:8d:
         df:27:73:5e:ff:d5:59:b7:5e:ea:50:17:f6:f4:7b:95:18:3f:
         f2:85:7b:52:3f:6a:9f:88:99:46:dd:a2:da:4d:ca:b6:00:db:
         2e:ac:ad:9a:51:72:66:bd:a2:a1:01:62:17:4b:c1:36:fb:6f:
         ee:da:25:89:4f:09:61:29:bb:dd:80:68:26:fd:3a:9e:ad:f6:
         bb:d5:33:3d:07:38:64:07:b0:2d:d9:9f:0a:a1:43:05:36:cd:
         ac:a8:a3:55:c8:90:8e:d6:e1:c3:78:16:6e:cd:10:d1:c6:30:
         48:ed:2b:4c:fc:f5:6d:6e:32:73:f3:15:a2:8b:59:a2:75:20:
         0c:4b:f3:83:18:b4:cf:2f:88:39:03:56:08:c4:4c:f0:45:32:
         f0:97:e5:2b:e5:95:2d:c0:af:8f:2b:8b:aa:2b:d7:28:55:07:
         da:3f:4b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:07 2025 by rpki-client