Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/cZ0D3LSdBYESfKAq1_g8Gg9QZHM.roa
File:                     cZ0D3LSdBYESfKAq1_g8Gg9QZHM.roa (raw, json)
Hash identifier:          lEKsZfrMxmM/7+bF3P2EIke6FmSg/Lu+rFs/zDhHuj0=
Subject key identifier:   71:9D:03:DC:B4:9D:05:81:12:7C:A0:2A:D7:F8:3C:1A:0F:50:64:73
Certificate issuer:       /CN=e7eb26291b9e9ab5afc88ed76d3af81a907e5f9f
Certificate serial:       C1A816
Authority key identifier: E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5-smKRuemrWvyI7XbTr4GpB-X58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/cZ0D3LSdBYESfKAq1_g8Gg9QZHM.roa
Signing time:             Sat 01 Jan 2022 07:54:46 +0000
ROA not before:           Sat 01 Jan 2022 07:54:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     26863
IP address blocks:        62.233.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12691478 (0xc1a816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7eb26291b9e9ab5afc88ed76d3af81a907e5f9f
        Validity
            Not Before: Jan  1 07:54:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=719d03dcb49d0581127ca02ad7f83c1a0f506473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:bb:37:a5:eb:89:cd:00:44:5c:49:08:2f:
                    c9:ba:82:f0:29:d3:c3:3d:81:76:b8:fe:85:df:ba:
                    65:b6:21:3a:a6:7f:fd:1f:c6:67:10:f3:14:d8:24:
                    69:f7:85:1d:82:8e:47:16:59:61:2a:01:0b:88:a8:
                    e0:7d:ed:5e:9a:ac:a6:23:af:11:b9:81:6a:e2:be:
                    82:c3:8a:a5:42:fb:f5:88:92:14:17:d1:03:4f:75:
                    a7:c0:ba:c0:e9:fa:1a:d9:2b:37:e2:44:16:01:6d:
                    26:64:53:d8:c5:4b:91:c6:a6:fb:1a:fa:4e:3d:23:
                    64:97:c3:fc:aa:3d:17:ee:63:86:d6:24:8d:ea:94:
                    f1:bd:12:44:48:92:fb:f6:33:b6:ea:77:7a:f4:b0:
                    8b:7b:a2:16:aa:b7:bb:17:d4:89:e4:fc:39:99:8d:
                    63:c7:36:e3:77:f6:b2:40:94:40:ab:88:13:dc:b1:
                    23:0d:69:56:ac:26:80:f0:76:c2:a1:38:07:49:96:
                    5c:f4:64:d8:d7:9d:0e:4a:a4:89:e1:0c:9f:5f:58:
                    07:a7:6a:5e:31:33:6d:f3:b6:5d:f9:c7:d1:4a:21:
                    ea:f3:4c:5a:4b:7d:8a:da:e6:c6:5e:9a:76:66:6b:
                    8a:30:3c:8b:66:4c:4f:6e:83:ec:b5:ef:3a:aa:05:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:03:DC:B4:9D:05:81:12:7C:A0:2A:D7:F8:3C:1A:0F:50:64:73
            X509v3 Authority Key Identifier:
                keyid:E7:EB:26:29:1B:9E:9A:B5:AF:C8:8E:D7:6D:3A:F8:1A:90:7E:5F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-smKRuemrWvyI7XbTr4GpB-X58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/cZ0D3LSdBYESfKAq1_g8Gg9QZHM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5ea59-b5a9-4c48-ae02-1df65a07630f/1/5-smKRuemrWvyI7XbTr4GpB-X58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.233.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:2f:c9:45:36:77:c0:a0:c1:c3:93:62:d0:68:ef:bc:28:47:
         4a:39:62:da:41:fb:53:ff:d6:2b:9f:66:75:12:07:71:ba:76:
         3f:05:37:15:9a:fc:8a:fb:0f:7d:62:70:87:0c:e1:63:a9:c5:
         f5:73:b7:e9:2f:dc:22:43:9d:42:26:4c:2d:d6:1d:23:bc:88:
         9c:27:7f:9f:09:ad:4c:ef:3e:39:1d:9a:91:98:9f:73:7e:ca:
         62:36:1e:04:9e:ed:25:32:c3:95:37:90:5a:ab:ec:f5:ae:45:
         04:81:fc:a4:b0:08:8e:06:a0:83:53:1f:26:12:a0:9f:14:cc:
         0d:4e:21:1a:19:b2:43:48:ea:fd:8a:de:90:d4:c0:a0:04:42:
         a8:e3:92:d2:e4:0a:6f:58:ce:94:0f:cd:2f:c5:5b:57:60:94:
         8e:bb:22:a2:ad:e2:37:4e:43:62:47:df:a4:d6:5a:4f:ff:83:
         bf:5d:5b:12:9e:e0:ca:f1:62:12:94:d8:4a:6a:ad:e3:df:d1:
         ae:da:7a:fc:86:30:40:42:18:4f:49:b6:5d:2c:54:ed:8d:a0:
         57:a6:be:3c:06:d1:a5:d5:71:bd:94:e7:70:18:2a:46:b8:09:
         08:2a:43:16:ca:d2:3c:ed:30:3a:e1:fe:27:f7:a6:b5:29:68:
         b4:95:69:1b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMGoFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2ViMjYyOTFiOWU5YWI1YWZjODhlZDc2ZDNhZjgxYTkwN2U1ZjlmMB4XDTIyMDEw
MTA3NTQ0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzE5ZDAzZGNiNDlk
MDU4MTEyN2NhMDJhZDdmODNjMWEwZjUwNjQ3MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbGuzel64nNAERcSQgvybqC8CnTwz2Bdrj+hd+6ZbYhOqZ/
/R/GZxDzFNgkafeFHYKORxZZYSoBC4io4H3tXpqspiOvEbmBauK+gsOKpUL79YiS
FBfRA091p8C6wOn6GtkrN+JEFgFtJmRT2MVLkcam+xr6Tj0jZJfD/Ko9F+5jhtYk
jeqU8b0SREiS+/Yztup3evSwi3uiFqq3uxfUieT8OZmNY8c243f2skCUQKuIE9yx
Iw1pVqwmgPB2wqE4B0mWXPRk2NedDkqkieEMn19YB6dqXjEzbfO2XfnH0Uoh6vNM
Wkt9itrmxl6admZrijA8i2ZMT26D7LXvOqoFvucCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRxnQPctJ0FgRJ8oCrX+DwaD1BkczAfBgNVHSMEGDAWgBTn6yYpG56ata/I
jtdtOvgakH5fnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzUtc21LUnVlbXJXdnlJN1hiVHI0R3BCLVg1OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvYjVlYTU5LWI1YTktNGM0OC1hZTAyLTFkZjY1YTA3NjMwZi8x
L2NaMEQzTFNkQllFU2ZLQXExX2c4R2c5UVpITS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
YjVlYTU5LWI1YTktNGM0OC1hZTAyLTFkZjY1YTA3NjMwZi8xLzUtc21LUnVlbXJX
dnlJN1hiVHI0R3BCLVg1OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD7pIjANBgkqhkiG9w0BAQsFAAOC
AQEAzS/JRTZ3wKDBw5Ni0GjvvChHSjli2kH7U//WK59mdRIHcbp2PwU3FZr8ivsP
fWJwhwzhY6nF9XO36S/cIkOdQiZMLdYdI7yInCd/nwmtTO8+OR2akZifc37KYjYe
BJ7tJTLDlTeQWqvs9a5FBIH8pLAIjgagg1MfJhKgnxTMDU4hGhmyQ0jq/YrekNTA
oARCqOOS0uQKb1jOlA/NL8VbV2CUjrsioq3iN05DYkffpNZaT/+Dv11bEp7gyvFi
EpTYSmqt49/Rrtp6/IYwQEIYT0m2XSxU7Y2gV6a+PAbRpdVxvZTncBgqRrgJCCpD
FsrSPO0wOuH+J/emtSlotJVpGw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:14 2024 by rpki-client on console-ams.rpki-client.org