Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/AEqI1pOhYYVSesuEK9S7Oq2LiOk.roa
File:                     AEqI1pOhYYVSesuEK9S7Oq2LiOk.roa (raw, json)
Hash identifier:          NW8bUF/cBwTYUVcq30IJnXoM6TcUBPWrSNYNpW9Qj5A=
Subject key identifier:   00:4A:88:D6:93:A1:61:85:52:7A:CB:84:2B:D4:BB:3A:AD:8B:88:E9
Certificate issuer:       /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial:       0183D640D4F03D84FA7DF6F968AD07BD8162
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/AEqI1pOhYYVSesuEK9S7Oq2LiOk.roa
Signing time:             Fri 14 Oct 2022 11:28:36 +0000
ROA not before:           Fri 14 Oct 2022 11:28:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29119
IP address blocks:        62.122.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d6:40:d4:f0:3d:84:fa:7d:f6:f9:68:ad:07:bd:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
        Validity
            Not Before: Oct 14 11:28:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=004a88d693a16185527acb842bd4bb3aad8b88e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:fa:94:8f:cb:bd:13:e0:b9:d0:da:e9:68:
                    eb:ef:04:60:3f:9d:c9:15:76:80:23:ce:a8:26:36:
                    36:2b:d5:43:72:c3:a0:dd:ab:96:5c:fb:bb:e4:f5:
                    66:35:ac:ff:5c:c1:e8:ec:09:81:c2:5c:2c:f7:29:
                    92:80:04:0f:ae:a6:6c:c1:fd:b3:c8:00:79:1d:61:
                    0b:ce:cf:0d:4a:da:98:24:55:21:dd:7f:69:4b:8b:
                    eb:2b:44:d6:08:f3:6d:11:9a:fe:88:c9:48:d3:da:
                    3e:8d:22:ea:f1:e1:7a:25:0b:00:fb:6d:29:1e:3b:
                    72:f9:6a:9d:33:22:83:35:71:42:21:ce:b4:12:43:
                    e3:61:c8:fd:3c:99:7e:2f:43:d6:e2:a9:ff:dd:36:
                    62:12:83:be:f4:37:64:05:04:22:3c:8a:ea:fe:4e:
                    5f:28:25:30:e2:18:7e:d3:d4:e2:26:b9:2e:20:bc:
                    47:c4:62:85:09:34:4d:66:7b:ce:53:04:c1:b6:92:
                    d4:f8:9a:bc:f8:9c:f0:fa:41:7f:9a:80:7e:5b:0e:
                    30:a4:a0:7a:14:ec:86:1a:44:ae:52:f8:09:f0:5d:
                    c0:05:25:d8:f6:ee:16:b2:86:3e:54:dd:42:83:7d:
                    8d:a0:11:64:18:09:7d:a6:c5:79:fa:ca:21:59:bc:
                    2f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4A:88:D6:93:A1:61:85:52:7A:CB:84:2B:D4:BB:3A:AD:8B:88:E9
            X509v3 Authority Key Identifier:
                keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/AEqI1pOhYYVSesuEK9S7Oq2LiOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.122.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b1:2e:a6:75:b2:43:5a:28:a0:a1:b0:2b:40:dd:e6:91:19:
         55:5c:57:1d:e2:a9:eb:80:69:35:57:5e:b9:ff:f8:87:96:55:
         b9:46:88:1f:ef:90:f5:aa:be:d1:bf:5a:08:b0:75:16:28:02:
         26:fe:9e:a2:3e:3a:d0:33:a9:b7:13:fd:3a:c5:4b:c6:83:c9:
         71:22:b3:b9:67:09:39:0d:29:85:c7:cc:da:5e:83:3e:bf:a8:
         3e:6e:91:f6:be:30:54:07:ba:fb:15:1f:61:2d:5f:94:6c:87:
         f3:81:1f:c7:e9:63:e6:a8:79:38:6c:9d:30:ba:7e:94:85:c6:
         3e:91:8c:ca:89:46:71:2d:49:58:30:f8:54:8b:ca:c5:9c:48:
         6c:f5:c9:4e:95:21:76:7f:01:ee:1b:a0:e3:87:d0:cb:4a:16:
         64:82:d2:47:a8:b2:36:ef:14:32:29:62:ff:bd:97:1c:ca:86:
         70:6d:dd:95:27:1e:72:a9:36:e2:1f:fe:50:96:d8:43:1a:84:
         a9:a6:51:2f:0d:a8:ad:1e:38:13:63:db:c2:cf:10:e8:b0:3e:
         5f:bb:5a:15:ab:0a:f4:0b:f0:c2:61:38:bc:42:d5:7c:ae:9f:
         34:6c:c2:54:85:2a:db:40:ad:d4:4b:ed:df:03:a4:28:a7:fa:
         be:72:b8:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPWQNTwPYT6ffb5aK0HvYFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmE1ZDNlYTE5MmFlZDJkMzA2NjZjNzk0OTkwNjlkYWY2
ZGMzNzQwHhcNMjIxMDE0MTEyODM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDRhODhkNjkzYTE2MTg1NTI3YWNiODQyYmQ0YmIzYWFkOGI4OGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzX76lI/LvRPgudDa6Wjr7wRgP53J
FXaAI86oJjY2K9VDcsOg3auWXPu75PVmNaz/XMHo7AmBwlws9ymSgAQPrqZswf2z
yAB5HWELzs8NStqYJFUh3X9pS4vrK0TWCPNtEZr+iMlI09o+jSLq8eF6JQsA+20p
Hjty+WqdMyKDNXFCIc60EkPjYcj9PJl+L0PW4qn/3TZiEoO+9DdkBQQiPIrq/k5f
KCUw4hh+09TiJrkuILxHxGKFCTRNZnvOUwTBtpLU+Jq8+Jzw+kF/moB+Ww4wpKB6
FOyGGkSuUvgJ8F3ABSXY9u4WsoY+VN1Cg32NoBFkGAl9psV5+sohWbwvSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABKiNaToWGFUnrLhCvUuzqti4jpMB8GA1UdIwQY
MBaAFFG6XT6hkq7S0wZmx5SZBp2vbcN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJwZFBxR1NydExUQm1iSGxKa0duYTl0dzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xMzIxZmQtMjk0ZC00YTU0LTk3M2Ut
ZGZkNjlmZTZmZDYxLzEvQUVxSTFwT2hZWVZTZXN1RUs5UzdPcTJMaU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xMzIxZmQtMjk0ZC00YTU0LTk3M2UtZGZkNjlmZTZmZDYx
LzEvVWJwZFBxR1NydExUQm1iSGxKa0duYTl0dzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPnrkMA0G
CSqGSIb3DQEBCwUAA4IBAQAFsS6mdbJDWiigobArQN3mkRlVXFcd4qnrgGk1V165
//iHllW5Rogf75D1qr7Rv1oIsHUWKAIm/p6iPjrQM6m3E/06xUvGg8lxIrO5Zwk5
DSmFx8zaXoM+v6g+bpH2vjBUB7r7FR9hLV+UbIfzgR/H6WPmqHk4bJ0wun6UhcY+
kYzKiUZxLUlYMPhUi8rFnEhs9clOlSF2fwHuG6Djh9DLShZkgtJHqLI27xQyKWL/
vZccyoZwbd2VJx5yqTbiH/5QlthDGoSpplEvDaitHjgTY9vCzxDosD5fu1oVqwr0
C/DCYTi8QtV8rp80bMJUhSrbQK3US+3fA6Qop/q+crie
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:28 2024 by rpki-client on console-fra.rpki-client.org