Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/pTFGbKH4mGtULNUDrnk5HoyC2Ss.roa
File:                     pTFGbKH4mGtULNUDrnk5HoyC2Ss.roa (raw, json)
Hash identifier:          3GBMYlDT+Ty+OJMgXoP/PXIAd+5qAq/HRJ+QbTqymWQ=
Subject key identifier:   A5:31:46:6C:A1:F8:98:6B:54:2C:D5:03:AE:79:39:1E:8C:82:D9:2B
Certificate issuer:       /CN=22f2779005c937d53f4ba6e484335b1d35e0965e
Certificate serial:       015259AF
Authority key identifier: 22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/pTFGbKH4mGtULNUDrnk5HoyC2Ss.roa
Signing time:             Sat 01 Jan 2022 13:55:27 +0000
ROA not before:           Sat 01 Jan 2022 13:55:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        62.122.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22174127 (0x15259af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f2779005c937d53f4ba6e484335b1d35e0965e
        Validity
            Not Before: Jan  1 13:55:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a531466ca1f8986b542cd503ae79391e8c82d92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:47:3d:02:41:14:9d:55:35:76:fe:d8:59:
                    72:e2:74:09:9d:57:d9:4d:08:98:67:fb:ec:74:e2:
                    8d:85:a8:2c:ca:88:f0:fb:67:af:9e:d9:87:0c:e6:
                    32:67:e9:09:d7:4d:24:df:4f:4e:1d:0b:4c:32:8c:
                    55:74:77:fd:9f:6b:6b:39:20:8c:e8:83:b2:ea:bd:
                    ac:34:bb:14:3f:93:c4:fe:21:4f:00:40:5a:f3:16:
                    1d:61:9d:73:91:85:e8:7b:67:8c:4c:7f:a2:64:ec:
                    5c:4c:1e:84:9f:c2:89:5c:25:d7:5d:8e:e3:40:a4:
                    84:d1:b2:26:0f:57:af:9f:e1:72:e4:64:fe:b8:57:
                    b4:a1:41:38:ab:27:7b:10:fb:64:af:78:cf:ba:f0:
                    d1:15:c9:b2:03:53:47:06:66:65:28:e0:fb:61:a6:
                    2f:d1:46:b0:04:69:2f:4f:b0:cb:3a:b1:e6:e6:db:
                    f3:60:18:e2:cc:59:88:c0:7e:96:02:9a:a7:0a:eb:
                    d5:b4:33:43:1d:2f:47:89:bf:9f:32:88:64:f7:e8:
                    02:1d:1e:d8:66:f8:ed:1a:b9:85:8f:4d:18:23:3d:
                    cd:94:47:57:90:8f:99:9f:4b:4f:e3:e2:11:2f:f0:
                    f3:60:0f:16:b2:e2:2c:98:0c:16:15:f1:ba:20:c5:
                    27:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:46:6C:A1:F8:98:6B:54:2C:D5:03:AE:79:39:1E:8C:82:D9:2B
            X509v3 Authority Key Identifier:
                keyid:22:F2:77:90:05:C9:37:D5:3F:4B:A6:E4:84:33:5B:1D:35:E0:96:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvJ3kAXJN9U_S6bkhDNbHTXgll4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/pTFGbKH4mGtULNUDrnk5HoyC2Ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5eadbe-8022-4234-add3-0b5fd36bd003/1/IvJ3kAXJN9U_S6bkhDNbHTXgll4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:3f:78:75:59:1e:8e:67:0f:50:03:c1:7d:91:0b:1b:77:
         70:eb:44:16:e4:03:95:e2:b8:d8:b1:a2:ad:53:90:33:52:8b:
         53:c9:7e:a9:a9:59:ef:e0:16:bd:ef:16:03:5c:ff:8a:52:f7:
         7e:a6:56:0a:8a:78:a2:43:0b:36:b5:4c:22:da:e8:45:9c:59:
         97:3a:c6:13:93:dd:59:29:1e:73:d8:f1:93:8f:aa:e2:e1:94:
         ae:7f:a1:26:75:1f:d9:41:23:34:d9:92:78:4a:07:35:69:b9:
         6b:12:0e:e2:67:22:1e:e2:2d:70:94:28:e3:2e:06:d5:75:05:
         68:b7:2e:a3:8d:1b:8e:fb:b9:13:49:ee:83:f6:13:36:45:f6:
         23:a1:85:d3:75:e7:80:5b:6d:e2:2b:e0:e3:95:e0:5e:a6:2f:
         3a:9d:e6:19:49:ce:aa:97:91:90:09:23:50:05:b6:19:c5:2e:
         dc:81:8a:f8:76:e9:b4:9e:c6:9c:0d:1d:80:ae:42:87:db:dd:
         aa:da:c1:7c:94:a1:34:7b:52:fd:03:c5:ff:e9:cd:f2:28:f6:
         27:ed:37:5c:c1:76:f6:e4:6a:20:88:8a:c1:ac:55:02:47:6d:
         48:e6:58:f1:53:bb:31:d0:0f:78:9c:aa:29:51:03:60:11:9d:
         4f:9f:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org