Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/E3QTHlVWpiVTcqaRC_mShKdkyoQ.roa
File:                     E3QTHlVWpiVTcqaRC_mShKdkyoQ.roa (raw, json)
Hash identifier:          l241BLP3rz5DnVvMnE9Jw7vRdrb59hadTA1UkQA8vvM=
Subject key identifier:   13:74:13:1E:55:56:A6:25:53:72:A6:91:0B:F9:92:84:A7:64:CA:84
Certificate issuer:       /CN=e501fe097897739c5bf9b257313a76974e242556
Certificate serial:       01D124CB
Authority key identifier: E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/E3QTHlVWpiVTcqaRC_mShKdkyoQ.roa
Signing time:             Tue 14 Jun 2022 17:29:44 +0000
ROA not before:           Tue 14 Jun 2022 17:29:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60712
IP address blocks:        62.3.35.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30483659 (0x1d124cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501fe097897739c5bf9b257313a76974e242556
        Validity
            Not Before: Jun 14 17:29:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1374131e5556a6255372a6910bf99284a764ca84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a7:75:7c:cf:b5:38:0b:3e:dc:8c:c2:b6:b2:
                    b1:5a:ed:d1:05:4b:bb:fa:f1:ec:78:bf:8b:08:97:
                    33:41:ea:0f:c6:45:b8:75:55:31:b1:69:5d:b2:89:
                    db:44:d0:23:0d:58:a6:54:a5:a6:f4:cf:18:97:6f:
                    e1:32:ce:52:5e:31:17:3b:30:58:35:6e:40:13:41:
                    54:5c:35:f0:fa:4e:cc:90:98:f3:9d:d8:e0:8f:d1:
                    f4:a2:73:d3:0c:36:49:5e:ea:44:2c:d6:c2:cc:02:
                    fb:27:22:ab:07:ca:dd:44:5e:97:1d:38:0e:e0:99:
                    30:b9:fd:6c:e6:cd:0d:b2:c0:86:c0:c5:87:ee:08:
                    33:0d:bd:c3:4b:11:9f:f3:22:c2:f7:4e:04:4b:f0:
                    be:14:4b:49:5f:70:1e:77:cb:f8:41:05:4a:66:46:
                    c7:ab:d9:51:3b:82:bf:1d:e1:6a:64:0d:cc:1c:54:
                    4a:b7:4c:5a:a0:1e:30:0a:64:9f:6c:e0:f8:74:01:
                    ee:7b:30:ae:8a:58:d6:24:51:97:a8:78:f2:aa:02:
                    63:9d:22:32:55:eb:37:ea:2e:89:3c:0b:2e:50:62:
                    de:3c:3e:d0:16:58:ce:1f:35:92:eb:57:54:cd:c3:
                    dd:b7:f5:2a:d3:c6:33:9b:61:a9:88:aa:47:78:64:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:74:13:1E:55:56:A6:25:53:72:A6:91:0B:F9:92:84:A7:64:CA:84
            X509v3 Authority Key Identifier:
                keyid:E5:01:FE:09:78:97:73:9C:5B:F9:B2:57:31:3A:76:97:4E:24:25:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QH-CXiXc5xb-bJXMTp2l04kJVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/E3QTHlVWpiVTcqaRC_mShKdkyoQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/89d8ed-9486-47bd-9153-ff88a44f05ee/1/5QH-CXiXc5xb-bJXMTp2l04kJVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:df:f4:f3:94:11:84:07:b3:96:22:12:50:d8:48:25:65:9b:
         e3:f8:a5:55:c2:5f:d1:5a:bb:9f:5d:8f:cb:7b:c0:07:e8:eb:
         96:ed:72:80:b9:f0:fc:f0:71:e2:aa:ea:00:44:e1:b7:5a:93:
         3c:05:0c:9f:83:25:53:9a:eb:28:67:1a:c0:4f:c4:3e:4b:f6:
         a8:3b:c4:00:2d:df:a3:17:fc:87:b6:e6:ad:72:ca:84:01:f7:
         c5:57:fe:e6:32:e6:26:dc:6a:66:2b:1a:72:57:3e:e7:d2:17:
         db:d8:4f:7d:7a:8b:11:34:c8:42:c3:39:25:1a:a4:7d:b8:36:
         e6:a2:6d:6a:6f:6f:14:77:12:e8:dc:07:05:e5:f4:0e:00:61:
         83:ed:c5:98:ce:50:6a:ba:2b:a5:ba:e8:79:5c:38:cc:34:d5:
         79:34:4a:29:97:1c:04:fd:37:50:e2:ef:04:8c:b8:f9:8a:95:
         83:dd:40:bf:55:63:1a:c9:18:da:83:99:fb:b0:9b:85:c4:80:
         af:27:ae:10:a0:cd:3f:92:e0:7d:68:13:30:50:a6:fb:9a:04:
         8a:e5:32:d8:06:da:9a:d3:aa:f7:51:4a:3e:da:71:eb:01:33:
         d1:85:b8:e9:c6:a1:b8:de:ca:74:9f:02:36:00:7c:e3:e9:f8:
         48:3d:31:f9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAdEkyzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
NTAxZmUwOTc4OTc3MzljNWJmOWIyNTczMTNhNzY5NzRlMjQyNTU2MB4XDTIyMDYx
NDE3Mjk0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTM3NDEzMWU1NTU2
YTYyNTUzNzJhNjkxMGJmOTkyODRhNzY0Y2E4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPendXzPtTgLPtyMwraysVrt0QVLu/rx7Hi/iwiXM0HqD8ZF
uHVVMbFpXbKJ20TQIw1YplSlpvTPGJdv4TLOUl4xFzswWDVuQBNBVFw18PpOzJCY
853Y4I/R9KJz0ww2SV7qRCzWwswC+yciqwfK3URelx04DuCZMLn9bObNDbLAhsDF
h+4IMw29w0sRn/MiwvdOBEvwvhRLSV9wHnfL+EEFSmZGx6vZUTuCvx3hamQNzBxU
SrdMWqAeMApkn2zg+HQB7nswropY1iRRl6h48qoCY50iMlXrN+ouiTwLLlBi3jw+
0BZYzh81kutXVM3D3bf1KtPGM5thqYiqR3hkosMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQTdBMeVVamJVNyppEL+ZKEp2TKhDAfBgNVHSMEGDAWgBTlAf4JeJdznFv5
slcxOnaXTiQlVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVRSC1DWGlYYzV4Yi1iSlhNVHAybDA0a0pWWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvODlkOGVkLTk0ODYtNDdiZC05MTUzLWZmODhhNDRmMDVlZS8x
L0UzUVRIbFZXcGlWVGNxYVJDX21TaEtka3lvUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
ODlkOGVkLTk0ODYtNDdiZC05MTUzLWZmODhhNDRmMDVlZS8xLzVRSC1DWGlYYzV4
Yi1iSlhNVHAybDA0a0pWWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD4DIzANBgkqhkiG9w0BAQsFAAOC
AQEApt/085QRhAezliISUNhIJWWb4/ilVcJf0Vq7n12Py3vAB+jrlu1ygLnw/PBx
4qrqAETht1qTPAUMn4MlU5rrKGcawE/EPkv2qDvEAC3foxf8h7bmrXLKhAH3xVf+
5jLmJtxqZisaclc+59IX29hPfXqLETTIQsM5JRqkfbg25qJtam9vFHcS6NwHBeX0
DgBhg+3FmM5QarorpbroeVw4zDTVeTRKKZccBP03UOLvBIy4+YqVg91Av1VjGskY
2oOZ+7CbhcSAryeuEKDNP5LgfWgTMFCm+5oEiuUy2AbamtOq91FKPtpx6wEz0YW4
6cahuN7KdJ8CNgB84+n4SD0x+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org