Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/BXtjyOGS7efDEK1Xp41lBzW-t5k.roa
File:                     BXtjyOGS7efDEK1Xp41lBzW-t5k.roa (raw, json)
Hash identifier:          bX7xV3wChxxdVngnKqQ4d9/3BJfjGE/deawp7hmHKRo=
Subject key identifier:   05:7B:63:C8:E1:92:ED:E7:C3:10:AD:57:A7:8D:65:07:35:BE:B7:99
Certificate issuer:       /CN=5e397df22e9d4829862d8cd710d6b3257b4df95e
Certificate serial:       01857315E119E158758E2825F3A588CC907B
Authority key identifier: 5E:39:7D:F2:2E:9D:48:29:86:2D:8C:D7:10:D6:B3:25:7B:4D:F9:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xjl98i6dSCmGLYzXENazJXtN-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/BXtjyOGS7efDEK1Xp41lBzW-t5k.roa
Signing time:             Mon 02 Jan 2023 15:24:51 +0000
ROA not before:           Mon 02 Jan 2023 15:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8849
IP address blocks:        62.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:e1:19:e1:58:75:8e:28:25:f3:a5:88:cc:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e397df22e9d4829862d8cd710d6b3257b4df95e
        Validity
            Not Before: Jan  2 15:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=057b63c8e192ede7c310ad57a78d650735beb799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:09:bf:af:9d:4d:39:54:17:aa:ce:68:e2:
                    e7:b8:9c:af:70:b8:60:fe:ab:69:fb:b5:b1:df:13:
                    25:ac:21:fd:03:b9:82:0e:e1:f7:62:81:22:86:e7:
                    a3:47:33:88:81:ae:45:04:c5:7e:73:0a:31:eb:c7:
                    f2:df:72:64:6c:0e:be:54:5b:87:a0:f3:6c:9f:ed:
                    9e:77:1b:d2:97:89:0a:3c:ed:ca:4b:b5:db:e9:e6:
                    08:e0:46:dc:d2:59:81:9b:45:64:d5:63:ff:93:d3:
                    f7:5f:b9:d7:78:e8:ac:4e:71:b0:a9:77:f0:84:b4:
                    dc:75:8d:81:25:bd:a7:46:cd:39:cf:b0:a8:95:95:
                    9d:50:45:5d:03:84:9e:b6:53:5d:f7:08:88:12:dd:
                    fc:34:0a:08:92:e5:0a:77:13:66:85:fd:8a:eb:e4:
                    05:e2:bb:98:6c:5c:7d:0f:57:65:0d:e9:8d:2c:43:
                    43:aa:84:24:92:5e:71:ea:8c:1c:8f:92:f9:cf:6b:
                    c7:7e:34:b6:98:f2:41:ac:ca:44:a9:e3:35:43:25:
                    7b:89:80:96:dd:f3:49:31:a8:51:cb:04:cb:9f:01:
                    8a:61:98:66:00:dc:08:57:60:f0:a0:ba:e9:97:f3:
                    12:a4:a7:fd:70:02:5d:25:0f:36:b9:cc:35:cd:4c:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:63:C8:E1:92:ED:E7:C3:10:AD:57:A7:8D:65:07:35:BE:B7:99
            X509v3 Authority Key Identifier:
                keyid:5E:39:7D:F2:2E:9D:48:29:86:2D:8C:D7:10:D6:B3:25:7B:4D:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjl98i6dSCmGLYzXENazJXtN-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/BXtjyOGS7efDEK1Xp41lBzW-t5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/505f6a-cce8-4f0d-80ef-4e338b16cf2f/1/Xjl98i6dSCmGLYzXENazJXtN-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:5e:92:4a:f0:59:a9:d4:e0:74:56:4c:d6:47:0c:91:00:f1:
         0d:3b:6a:22:d1:9c:f9:fa:f3:c8:66:62:66:4d:16:71:40:fe:
         3a:bf:72:5e:63:cc:44:2d:a4:60:29:b9:81:4b:03:68:a2:d4:
         21:f2:90:34:3e:44:27:4d:de:03:54:27:96:4a:e3:6c:07:c4:
         32:a9:b9:ca:83:5d:ff:9a:f3:f3:0f:b6:ee:c5:7c:69:44:3c:
         ba:60:71:df:ca:21:58:b5:52:36:45:bc:10:f4:fe:00:df:a5:
         14:bf:bd:3a:e6:e6:76:85:ac:63:a5:68:1d:73:be:df:b6:31:
         a4:77:18:cc:4c:74:6c:06:86:fb:8d:40:69:ab:8c:0e:7f:01:
         9e:04:17:6b:c5:eb:44:30:80:59:92:41:b9:9d:d6:af:d5:7b:
         37:3b:1c:c8:92:73:99:47:64:0c:29:39:c5:03:81:6f:b5:63:
         ad:ec:db:a4:63:a6:67:c4:54:26:d7:46:e6:cb:b8:2e:3a:92:
         ae:83:30:2b:06:14:eb:d7:82:9d:75:97:49:07:cb:ab:af:ea:
         fd:06:bd:1d:3d:8f:e6:2e:e6:90:54:cc:78:89:ac:6b:f7:bb:
         d5:ef:28:8a:3a:4e:12:ec:9b:e6:c6:04:97:95:2a:45:28:3c:
         ab:07:44:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzFeEZ4Vh1jigl86WIzJB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMzk3ZGYyMmU5ZDQ4Mjk4NjJkOGNkNzEwZDZiMzI1N2I0
ZGY5NWUwHhcNMjMwMTAyMTUyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTdiNjNjOGUxOTJlZGU3YzMxMGFkNTdhNzhkNjUwNzM1YmViNzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFUJv6+dTTlUF6rOaOLnuJyvcLhg
/qtp+7Wx3xMlrCH9A7mCDuH3YoEihuejRzOIga5FBMV+cwox68fy33JkbA6+VFuH
oPNsn+2edxvSl4kKPO3KS7Xb6eYI4Ebc0lmBm0Vk1WP/k9P3X7nXeOisTnGwqXfw
hLTcdY2BJb2nRs05z7ColZWdUEVdA4SetlNd9wiIEt38NAoIkuUKdxNmhf2K6+QF
4ruYbFx9D1dlDemNLENDqoQkkl5x6owcj5L5z2vHfjS2mPJBrMpEqeM1QyV7iYCW
3fNJMahRywTLnwGKYZhmANwIV2DwoLrpl/MSpKf9cAJdJQ82ucw1zUw3qwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAV7Y8jhku3nwxCtV6eNZQc1vreZMB8GA1UdIwQY
MBaAFF45ffIunUgphi2M1xDWsyV7TfleMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpsOThpNmRTQ21HTFl6WEVOYXpKWHROLVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MDVmNmEtY2NlOC00ZjBkLTgwZWYt
NGUzMzhiMTZjZjJmLzEvQlh0anlPR1M3ZWZERUsxWHA0MWxCelctdDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MDVmNmEtY2NlOC00ZjBkLTgwZWYtNGUzMzhiMTZjZjJm
LzEvWGpsOThpNmRTQ21HTFl6WEVOYXpKWHROLVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnq7MA0G
CSqGSIb3DQEBCwUAA4IBAQCqXpJK8Fmp1OB0VkzWRwyRAPENO2oi0Zz5+vPIZmJm
TRZxQP46v3JeY8xELaRgKbmBSwNootQh8pA0PkQnTd4DVCeWSuNsB8QyqbnKg13/
mvPzD7buxXxpRDy6YHHfyiFYtVI2RbwQ9P4A36UUv7065uZ2haxjpWgdc77ftjGk
dxjMTHRsBob7jUBpq4wOfwGeBBdrxetEMIBZkkG5ndav1Xs3OxzIknOZR2QMKTnF
A4FvtWOt7NukY6ZnxFQm10bmy7guOpKugzArBhTr14KddZdJB8urr+r9Br0dPY/m
LuaQVMx4iaxr97vV7yiKOk4S7JvmxgSXlSpFKDyrB0QN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:21 2024 by rpki-client on console-ams.rpki-client.org