Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/1G_Aa-1ZzIFMehmwFLB0xgCn9dk.roa
File:                     1G_Aa-1ZzIFMehmwFLB0xgCn9dk.roa (raw, json)
Hash identifier:          qnuBqT8RRSgU2mloTAsXqisuWs40/upTnif/+/URYUM=
Subject key identifier:   D4:6F:C0:6B:ED:59:CC:81:4C:7A:19:B0:14:B0:74:C6:00:A7:F5:D9
Certificate issuer:       /CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
Certificate serial:       015BA65B
Authority key identifier: A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/1G_Aa-1ZzIFMehmwFLB0xgCn9dk.roa
Signing time:             Sat 01 Jan 2022 11:02:07 +0000
ROA not before:           Sat 01 Jan 2022 11:02:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49392
IP address blocks:        62.122.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22783579 (0x15ba65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
        Validity
            Not Before: Jan  1 11:02:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d46fc06bed59cc814c7a19b014b074c600a7f5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:0e:8d:9f:bb:82:98:2d:2e:5b:b9:a6:d1:
                    68:5f:20:02:92:f8:07:8a:97:a1:67:f6:97:7d:70:
                    74:9f:a9:5e:86:59:16:f6:e1:b1:8f:a5:f8:b3:7f:
                    9b:12:42:b1:86:aa:db:d1:8d:fb:3a:16:79:9b:7a:
                    ce:8a:d5:09:7f:ae:e1:3d:b2:8a:94:58:e3:9f:be:
                    d0:81:86:13:0d:2f:cd:86:d3:52:e8:2e:cc:bb:90:
                    0d:43:83:6c:8d:d8:d7:11:fb:8c:c1:39:ac:61:20:
                    e9:b1:ef:5b:72:83:25:a2:6f:ae:ae:2c:82:00:3c:
                    84:ad:6f:9b:6e:ba:49:3a:43:ef:a2:49:46:79:15:
                    53:5e:6b:c6:f7:cf:7c:f7:7e:cd:42:98:b1:b6:80:
                    5e:22:70:3e:81:22:06:f3:b9:d7:5d:cf:ed:45:d0:
                    d0:62:5c:46:44:74:dc:61:0b:91:cc:40:5e:39:f6:
                    4f:27:51:f3:4c:60:5b:a7:ca:4a:4b:4c:af:21:84:
                    17:0c:7c:3d:43:c5:74:b6:b4:0b:48:c8:0e:0c:6c:
                    1d:bc:eb:3f:2a:21:09:f0:a1:5d:d0:5e:c1:4f:d4:
                    80:64:a2:e7:b9:38:2c:55:f1:d6:39:5b:4a:ca:1a:
                    6b:3b:52:67:29:5a:be:3b:9d:1b:68:8f:e3:28:5a:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:C0:6B:ED:59:CC:81:4C:7A:19:B0:14:B0:74:C6:00:A7:F5:D9
            X509v3 Authority Key Identifier:
                keyid:A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/1G_Aa-1ZzIFMehmwFLB0xgCn9dk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:06:12:2e:08:13:f1:be:ac:4c:b3:80:3c:54:81:20:ba:28:
         67:1a:b9:77:11:9d:8a:25:8a:3a:2e:e3:cc:23:cd:3f:bb:d2:
         9c:c2:01:e6:7d:a3:c4:38:7c:5a:db:8a:04:bd:cb:03:dc:3d:
         d4:9d:41:0b:e9:7b:be:9e:2d:ec:25:05:22:bf:6e:32:65:ad:
         13:63:ca:a2:73:a8:ed:10:2b:05:0f:c4:d2:6c:71:64:ec:f7:
         8b:48:d0:57:5b:dd:7c:4a:a2:fb:20:79:c8:56:ab:91:d3:87:
         b2:3a:0d:02:a3:6a:de:0b:a4:6d:dc:f7:71:ce:8a:10:f4:08:
         9d:a1:73:04:46:3d:be:ab:84:35:95:8a:16:04:9c:a1:15:b8:
         99:61:ae:41:d3:49:64:ab:32:bc:d2:bf:87:8f:fe:ad:b6:50:
         73:38:bb:5f:a6:d8:ae:da:76:3c:bc:cf:a0:43:da:e7:66:af:
         88:dc:8d:01:86:6c:05:0a:02:a7:2b:44:1d:7e:4a:54:86:4b:
         e5:04:34:95:6d:5f:dc:e9:fc:c0:47:ec:cf:d3:a8:96:62:48:
         e6:e2:a0:87:ad:41:e0:49:da:91:0e:b0:12:37:91:e7:02:3e:
         ad:f1:cc:c6:4f:9b:99:48:2b:05:88:d6:36:2c:f3:fb:30:47:
         57:30:b2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:03 2024 by rpki-client on console-ams.rpki-client.org