Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa
File:                     9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa (raw, json)
Hash identifier:          KrS5kMRgjKNLYeGspZnIxKhpu5Jw5edgF5efXW+wv08=
Subject key identifier:   F7:0C:F0:13:62:28:CE:0F:62:E9:E3:CF:D8:FB:68:79:3A:E7:D4:B1
Certificate issuer:       /CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
Certificate serial:       F191F2
Authority key identifier: A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa
Signing time:             Wed 23 Feb 2022 20:19:50 +0000
ROA not before:           Wed 23 Feb 2022 20:19:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48031
IP address blocks:        62.3.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15831538 (0xf191f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a669dd121b8b5deb5129f3fdbaeba7ce3d6325ca
        Validity
            Not Before: Feb 23 20:19:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f70cf0136228ce0f62e9e3cfd8fb68793ae7d4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:00:1a:b7:4d:c7:a7:cd:1a:48:06:25:0a:9e:
                    79:fb:82:e2:6b:15:12:d6:91:f5:a8:4c:55:41:c6:
                    ab:d6:d4:25:72:e4:d4:af:a0:46:b5:66:1f:41:50:
                    1c:ca:29:ef:9b:0f:f0:16:c9:d9:e5:f6:de:8c:47:
                    96:fd:f4:7b:c1:8f:17:69:e3:76:ed:05:e9:01:f2:
                    f6:e7:2e:9b:e7:79:4d:7a:bc:e7:12:c4:b5:85:b0:
                    8b:5a:9f:5c:99:4c:77:11:bb:64:4a:88:3b:38:38:
                    bc:72:4b:39:91:9f:92:b6:2e:10:af:60:f5:6c:39:
                    54:d7:51:29:82:c5:38:b1:01:e4:ec:88:4d:b4:46:
                    3c:c8:9b:66:e3:d1:70:89:97:96:ae:ed:73:dc:a2:
                    de:14:90:15:2b:a6:42:bb:61:6b:09:33:42:e9:2d:
                    d5:92:fc:24:23:18:d8:38:16:e5:fd:e2:22:1a:34:
                    7c:9f:ce:cc:f8:67:d3:79:f6:6c:cb:ef:d8:58:b6:
                    c9:a0:f6:d9:64:ba:f7:22:a9:64:85:46:2a:45:3b:
                    0a:2c:3a:2f:c9:82:18:4c:7e:c3:53:09:ab:78:17:
                    8b:59:b0:95:1a:2a:ca:59:bb:3c:1b:da:6d:b7:d4:
                    76:27:6a:55:61:fb:da:7a:83:ad:55:d0:9d:40:05:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:F0:13:62:28:CE:0F:62:E9:E3:CF:D8:FB:68:79:3A:E7:D4:B1
            X509v3 Authority Key Identifier:
                keyid:A6:69:DD:12:1B:8B:5D:EB:51:29:F3:FD:BA:EB:A7:CE:3D:63:25:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmndEhuLXetRKfP9uuunzj1jJco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/9wzwE2Iozg9i6ePP2PtoeTrn1LE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/843f8a-dfa4-4bb8-9b07-dfc1930bbf84/1/pmndEhuLXetRKfP9uuunzj1jJco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:df:c8:e8:a9:25:a5:f2:89:92:33:c0:b5:01:1f:33:4a:
         de:2d:57:91:15:92:ac:fa:b1:58:14:73:00:b7:74:fa:70:22:
         21:fa:b3:68:36:a9:75:a0:0c:90:7b:44:69:73:87:03:a8:84:
         f6:67:56:8b:51:bb:23:00:72:2c:08:57:33:f7:31:44:1b:e1:
         76:99:77:20:dd:f6:4c:8c:37:f7:08:43:e9:dc:15:a4:2f:33:
         b6:f3:4d:b3:3d:96:f0:32:be:25:e5:9a:56:bd:dd:82:58:72:
         c0:30:06:59:21:42:9b:c2:1b:ee:10:69:56:73:7d:be:83:07:
         09:fd:43:34:da:11:44:bc:e4:d9:46:2b:7c:ff:d7:99:28:d8:
         ff:79:0d:5c:c7:04:17:79:a0:06:e5:56:54:5d:9b:81:0c:25:
         d2:3e:be:4a:a1:78:8e:6d:ef:11:b9:93:55:02:7d:c5:01:f5:
         4c:80:3c:b7:cf:08:1f:eb:d5:33:46:67:ec:31:b0:7b:ed:d3:
         1a:3d:ba:d2:8c:8e:c3:ef:d3:81:fd:b7:a4:6f:7e:98:62:e9:
         04:28:3b:86:7b:af:91:68:8d:d4:9d:1b:06:e8:45:1e:8d:78:
         43:e7:06:dc:76:58:0e:28:36:79:6f:19:cb:cf:f5:08:ae:ae:
         27:03:44:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:50 2024 by rpki-client on console-ams.rpki-client.org