Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/IJpSeztq4mLzI7-NjeUEMIMAm6w.roa
File:                     IJpSeztq4mLzI7-NjeUEMIMAm6w.roa (raw, json)
Hash identifier:          BycgePtLfL5Xtyk7fIO6DkqrNax0hVPUS64xqYVEEpE=
Subject key identifier:   20:9A:52:7B:3B:6A:E2:62:F3:23:BF:8D:8D:E5:04:30:83:00:9B:AC
Certificate issuer:       /CN=94b21640a951055dfe9c09e345739cb820054dd4
Certificate serial:       01856F824D0AE804F2BFD00082E9A7D7B016
Authority key identifier: 94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/IJpSeztq4mLzI7-NjeUEMIMAm6w.roa
Signing time:             Sun 01 Jan 2023 22:44:48 +0000
ROA not before:           Sun 01 Jan 2023 22:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.3.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:4d:0a:e8:04:f2:bf:d0:00:82:e9:a7:d7:b0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94b21640a951055dfe9c09e345739cb820054dd4
        Validity
            Not Before: Jan  1 22:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=209a527b3b6ae262f323bf8d8de5043083009bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:e1:f7:ae:f2:3d:6a:3a:78:74:07:f4:42:
                    0a:15:74:f5:a8:ae:f3:ed:3f:cb:4d:7d:df:4b:ec:
                    ff:78:7e:d0:ec:b0:67:a4:fc:e8:02:8d:d4:74:8c:
                    6b:dd:67:22:10:51:59:63:6c:ca:11:fb:05:37:dd:
                    e5:72:c4:41:7f:79:ef:66:43:41:3a:d8:84:d4:8a:
                    d0:3a:d2:fe:70:de:34:20:4d:e1:2c:83:cc:f4:b1:
                    99:66:83:ad:ef:ca:ea:ce:60:42:73:64:cd:6e:4e:
                    9f:4b:75:96:f8:6a:c2:1f:b6:c3:50:4b:e4:1d:05:
                    4e:d7:3b:b2:05:2c:68:15:d1:b0:1d:32:8c:a8:23:
                    88:26:39:94:51:05:32:bf:80:22:e5:18:8c:d1:2e:
                    78:95:bc:93:d3:27:c0:b3:00:cb:e2:d9:32:05:3e:
                    64:cb:20:c4:fc:8c:c5:d0:8c:4a:6b:98:06:12:c9:
                    5e:eb:1e:a6:e4:dc:a1:65:aa:72:32:fe:01:c4:a3:
                    71:2f:e5:82:85:90:70:8c:b7:11:c9:5a:24:bf:c6:
                    6c:b1:2d:d7:ee:5a:68:a1:e4:5b:d1:9a:6e:51:99:
                    92:ba:d6:a4:db:3a:b6:44:65:6f:35:56:16:eb:09:
                    aa:fd:45:01:e8:4e:02:bf:e8:f2:c6:f3:5a:d0:20:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9A:52:7B:3B:6A:E2:62:F3:23:BF:8D:8D:E5:04:30:83:00:9B:AC
            X509v3 Authority Key Identifier:
                keyid:94:B2:16:40:A9:51:05:5D:FE:9C:09:E3:45:73:9C:B8:20:05:4D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/IJpSeztq4mLzI7-NjeUEMIMAm6w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0fe64a-fcc5-4a2f-84cc-d264010f45b7/1/lLIWQKlRBV3-nAnjRXOcuCAFTdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:00:3f:aa:86:9b:45:9f:d5:b9:12:f7:72:59:c6:de:0c:69:
         af:b5:24:77:cb:80:fa:1f:91:f4:ad:66:a1:e9:11:bf:c4:56:
         b3:41:42:bb:51:ca:f3:89:f1:3d:1d:27:7d:7b:bd:34:55:a3:
         57:a8:f7:4f:c0:52:5d:db:4f:ff:d8:53:85:98:87:21:51:85:
         93:38:43:38:30:91:9b:e8:05:6b:f6:69:ee:7b:98:fa:31:7c:
         85:72:c4:69:f1:9e:56:f6:e4:2f:b0:f3:59:01:72:fb:61:cb:
         1c:22:12:4d:3b:50:e2:db:13:09:16:bd:3e:10:0e:9a:b6:72:
         8b:20:98:fd:d2:1c:52:02:cc:18:eb:2d:f5:7e:63:51:2c:f5:
         91:f2:53:16:18:b9:0f:71:ed:58:51:8c:d3:4b:0f:de:55:70:
         6a:93:3a:05:e7:0d:d9:1e:ff:28:47:08:73:b1:a9:f8:a4:5b:
         d9:33:84:19:cb:e0:b6:bf:e4:e8:f0:41:de:00:dd:d9:05:e5:
         bd:ef:54:a0:30:18:31:11:65:b0:f1:83:a4:7d:9b:07:e6:43:
         e0:23:20:bc:ea:b4:1b:56:a7:97:c0:99:03:61:7f:19:37:f4:
         d9:50:a9:1a:9d:c1:2b:23:13:f1:51:ee:6b:ef:7f:cc:30:93:
         33:2f:4b:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgk0K6ATyv9AAgumn17AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0YjIxNjQwYTk1MTA1NWRmZTljMDllMzQ1NzM5Y2I4MjAw
NTRkZDQwHhcNMjMwMTAxMjI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDlhNTI3YjNiNmFlMjYyZjMyM2JmOGQ4ZGU1MDQzMDgzMDA5YmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiALh967yPWo6eHQH9EIKFXT1qK7z
7T/LTX3fS+z/eH7Q7LBnpPzoAo3UdIxr3WciEFFZY2zKEfsFN93lcsRBf3nvZkNB
OtiE1IrQOtL+cN40IE3hLIPM9LGZZoOt78rqzmBCc2TNbk6fS3WW+GrCH7bDUEvk
HQVO1zuyBSxoFdGwHTKMqCOIJjmUUQUyv4Ai5RiM0S54lbyT0yfAswDL4tkyBT5k
yyDE/IzF0IxKa5gGEsle6x6m5NyhZapyMv4BxKNxL+WChZBwjLcRyVokv8ZssS3X
7lpooeRb0ZpuUZmSutak2zq2RGVvNVYW6wmq/UUB6E4Cv+jyxvNa0CBGUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCaUns7auJi8yO/jY3lBDCDAJusMB8GA1UdIwQY
MBaAFJSyFkCpUQVd/pwJ40VznLggBU3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbExJV1FLbFJCVjMtbkFualJYT2N1Q0FGVGRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wZmU2NGEtZmNjNS00YTJmLTg0Y2Mt
ZDI2NDAxMGY0NWI3LzEvSUpwU2V6dHE0bUx6STctTmplVUVNSU1BbTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wZmU2NGEtZmNjNS00YTJmLTg0Y2MtZDI2NDAxMGY0NWI3
LzEvbExJV1FLbFJCVjMtbkFualJYT2N1Q0FGVGRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgM+MA0G
CSqGSIb3DQEBCwUAA4IBAQBVAD+qhptFn9W5EvdyWcbeDGmvtSR3y4D6H5H0rWah
6RG/xFazQUK7UcrzifE9HSd9e700VaNXqPdPwFJd20//2FOFmIchUYWTOEM4MJGb
6AVr9mnue5j6MXyFcsRp8Z5W9uQvsPNZAXL7YcscIhJNO1Di2xMJFr0+EA6atnKL
IJj90hxSAswY6y31fmNRLPWR8lMWGLkPce1YUYzTSw/eVXBqkzoF5w3ZHv8oRwhz
san4pFvZM4QZy+C2v+To8EHeAN3ZBeW971SgMBgxEWWw8YOkfZsH5kPgIyC86rQb
VqeXwJkDYX8ZN/TZUKkancErIxPxUe5r73/MMJMzL0so
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:54 2024 by rpki-client on console-ams.rpki-client.org