Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/zV1j6zU9MvAkTvnr0ZtLCwPnbkw.roa
File:                     zV1j6zU9MvAkTvnr0ZtLCwPnbkw.roa (raw, json)
Hash identifier:          pQMnaRXAzyFHpp7BGbcab9uxmi8GBJnODDqLkv9EonM=
Subject key identifier:   CD:5D:63:EB:35:3D:32:F0:24:4E:F9:EB:D1:9B:4B:0B:03:E7:6E:4C
Certificate issuer:       /CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
Certificate serial:       014BF719
Authority key identifier: 7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/zV1j6zU9MvAkTvnr0ZtLCwPnbkw.roa
Signing time:             Thu 31 Mar 2022 16:02:15 +0000
ROA not before:           Thu 31 Mar 2022 16:02:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        62.3.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21755673 (0x14bf719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad5da58d6ac9c7c26754bf80da9303e0b972617
        Validity
            Not Before: Mar 31 16:02:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cd5d63eb353d32f0244ef9ebd19b4b0b03e76e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:22:6b:49:ff:fb:38:34:5f:b3:40:8c:13:
                    20:48:64:82:d0:0a:f5:45:45:bf:ab:66:7c:fc:db:
                    39:9b:35:fa:3c:c7:f3:c2:7a:c5:48:a8:62:99:3b:
                    fe:6f:d1:09:96:1e:7b:f7:cc:30:cd:e1:9d:8d:9c:
                    eb:55:ac:75:91:f2:01:72:c9:38:13:30:ad:62:94:
                    3c:39:5f:8b:85:e8:dc:17:97:78:35:e3:b0:8b:17:
                    67:48:d5:13:67:0d:ee:cd:6c:86:cc:bb:3c:27:52:
                    ad:d3:39:34:a0:e7:6f:5b:03:9e:84:e2:a5:6d:28:
                    ab:41:68:3a:68:9a:8d:40:65:0a:af:c2:68:1f:b8:
                    ff:95:d0:b8:7e:36:10:a7:0b:ae:be:09:72:4f:94:
                    4e:5e:54:4e:bc:53:cf:98:65:1d:ce:3e:f8:f4:78:
                    90:18:60:54:60:e9:3a:25:da:82:ee:48:db:07:d0:
                    0d:af:74:10:ae:5c:8e:8c:b9:ce:ee:d5:3d:95:ce:
                    9e:45:a1:47:7b:09:c9:3e:91:44:0b:73:66:74:31:
                    6c:8a:92:53:56:b7:60:dc:00:f0:87:7e:ba:fc:26:
                    f1:dd:2a:41:7c:f1:68:0e:0e:b4:76:69:a1:2a:bf:
                    05:bd:e7:09:6c:7f:d2:94:56:b7:9b:5a:02:be:4f:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:63:EB:35:3D:32:F0:24:4E:F9:EB:D1:9B:4B:0B:03:E7:6E:4C
            X509v3 Authority Key Identifier:
                keyid:7A:D5:DA:58:D6:AC:9C:7C:26:75:4B:F8:0D:A9:30:3E:0B:97:26:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etXaWNasnHwmdUv4DakwPguXJhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/zV1j6zU9MvAkTvnr0ZtLCwPnbkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5b6a5-5ba0-4523-aa77-e8f2d682a49e/1/etXaWNasnHwmdUv4DakwPguXJhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7d:94:0f:ea:0e:47:80:ac:ee:68:51:db:77:4b:bc:66:f0:
         02:d2:1d:26:75:17:4e:97:77:bc:ec:16:9b:c9:c2:00:f9:e3:
         5e:37:03:bb:ac:b8:24:46:bb:df:71:ef:5b:03:88:77:19:97:
         5a:3f:7c:6d:27:9c:09:6c:8b:3e:54:92:36:8f:35:3b:b9:e7:
         46:da:a3:f4:08:11:68:04:1f:94:47:a1:b1:5a:2c:64:e7:07:
         cd:e0:c3:71:6a:e6:c4:cf:a7:27:68:39:09:5c:bd:e8:13:03:
         85:07:35:87:13:75:94:99:b8:60:57:df:06:bd:6b:c5:0c:3c:
         a3:7f:f9:8d:a6:70:61:2e:8a:59:d1:52:78:02:b5:b9:f6:60:
         36:b4:b2:a8:96:4b:55:9f:3f:3b:ff:38:44:d6:13:5f:06:f5:
         5b:14:77:0f:32:d4:40:82:99:ff:47:94:7d:a7:49:35:03:64:
         ec:65:2a:f3:49:ab:81:ce:f9:8d:c6:24:e5:b0:1c:8e:84:c6:
         00:e0:98:eb:03:d2:3f:5d:d8:ba:ed:45:9b:ef:d9:4d:fe:eb:
         80:d6:b3:00:6e:50:ea:f3:26:86:53:2c:14:01:69:37:d7:2a:
         ae:3b:2d:cb:ab:60:e5:ff:84:50:b4:34:d5:a8:a0:fd:5d:76:
         db:87:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org