Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/sAWM4S75rqiSLxpWdeh3INhcmLo.roa
File:                     sAWM4S75rqiSLxpWdeh3INhcmLo.roa (raw, json)
Hash identifier:          8Qpdh8TpPPYGNue6SvwraN6jGhnRCS+B0nzYKwvT8bM=
Subject key identifier:   B0:05:8C:E1:2E:F9:AE:A8:92:2F:1A:56:75:E8:77:20:D8:5C:98:BA
Certificate issuer:       /CN=c3dc0c14f757e5b7ff030a3fa04fdc8443ad7b3d
Certificate serial:       01896C8E875B986BE1D4DC2F284A892E6D26
Authority key identifier: C3:DC:0C:14:F7:57:E5:B7:FF:03:0A:3F:A0:4F:DC:84:43:AD:7B:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w9wMFPdX5bf_Awo_oE_chEOtez0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/sAWM4S75rqiSLxpWdeh3INhcmLo.roa
Signing time:             Wed 19 Jul 2023 05:10:27 +0000
ROA not before:           Wed 19 Jul 2023 05:10:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203105
IP address blocks:        62.3.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6c:8e:87:5b:98:6b:e1:d4:dc:2f:28:4a:89:2e:6d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dc0c14f757e5b7ff030a3fa04fdc8443ad7b3d
        Validity
            Not Before: Jul 19 05:10:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0058ce12ef9aea8922f1a5675e87720d85c98ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c1:c6:da:f6:a5:f1:58:97:f7:79:74:8e:02:
                    6b:69:4f:69:5f:01:f7:e1:03:98:47:05:70:cc:87:
                    0c:5e:aa:5d:1b:e2:30:a2:13:3c:97:a5:d9:12:32:
                    86:9d:2a:bb:2c:d7:76:22:b9:08:66:f9:15:74:58:
                    04:f7:e6:14:12:10:eb:ed:75:59:eb:07:40:a5:12:
                    f4:ca:df:2d:c2:18:ae:b3:f9:1c:da:8e:89:5c:cb:
                    b4:65:2d:53:60:f4:57:37:0d:d1:7d:f5:67:38:d7:
                    42:30:c8:34:1a:04:05:73:c6:29:72:7f:20:87:43:
                    53:ad:36:8f:48:31:7b:f3:de:73:55:ea:bc:27:7e:
                    19:f9:68:7a:92:96:4c:fa:b2:bf:f9:40:68:db:dd:
                    26:02:e4:e1:ff:04:5b:70:6f:a0:d3:c4:19:eb:3c:
                    86:70:39:38:c4:e5:13:6d:31:d5:6b:61:79:b8:a3:
                    82:a7:6e:36:8b:16:90:53:68:90:01:9a:83:c2:ad:
                    7e:7d:c9:9e:76:02:ca:89:ea:60:70:32:90:53:38:
                    f7:f5:99:d2:01:84:8c:2f:1d:8f:59:55:0f:22:81:
                    ea:44:d7:4a:ef:36:68:de:53:74:c3:e2:23:5b:b7:
                    e4:06:56:05:df:77:e6:9b:84:2a:ed:4f:22:6a:cd:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:8C:E1:2E:F9:AE:A8:92:2F:1A:56:75:E8:77:20:D8:5C:98:BA
            X509v3 Authority Key Identifier:
                keyid:C3:DC:0C:14:F7:57:E5:B7:FF:03:0A:3F:A0:4F:DC:84:43:AD:7B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9wMFPdX5bf_Awo_oE_chEOtez0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/sAWM4S75rqiSLxpWdeh3INhcmLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4851a0-d1ed-4fb8-bd5f-1e24aad2acbc/1/w9wMFPdX5bf_Awo_oE_chEOtez0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:19:3b:35:e3:1e:a6:ee:9b:2c:f8:9c:e0:bc:dc:d8:71:3c:
         fc:c3:f7:8c:da:6c:c4:dc:3c:df:0a:22:ce:b1:96:8c:6d:09:
         24:3a:e7:18:a9:90:72:e1:5b:06:95:a4:8c:af:4a:8f:4e:b5:
         c0:81:13:c7:1b:60:e3:dd:50:10:e3:9e:66:a8:1f:94:bc:d2:
         45:e2:49:86:0f:2d:03:92:a0:1e:73:03:4c:d6:bb:60:25:44:
         ff:eb:05:64:de:31:ae:af:e6:52:3e:7f:81:16:28:b9:7e:fc:
         b2:e7:9d:f0:f0:b1:2d:1b:cd:97:77:01:14:78:a5:3d:1a:7a:
         8a:1d:2b:0a:70:48:77:dd:d4:43:68:7d:78:21:ba:52:ae:8f:
         6e:c0:39:9e:2f:d0:66:0d:ff:71:26:f7:3b:43:93:0f:e1:ee:
         50:51:a2:ea:d4:21:b8:a3:af:72:a5:c5:e4:07:e1:94:dd:55:
         e8:a7:fe:9d:56:e7:0b:77:a0:ed:61:24:6c:1b:09:af:36:ff:
         7e:52:05:ec:22:c7:ba:a5:ba:8a:5f:e6:d8:fb:5c:f9:6e:e2:
         f9:50:c9:2f:b3:23:05:e2:4a:c9:8a:d6:8f:50:c4:a2:31:7f:
         92:9f:1f:ce:b7:c9:50:b2:64:69:85:2d:a5:ea:7d:54:31:54:
         90:c7:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:16 2024 by rpki-client on console-ams.rpki-client.org