Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d942cc-5152-47c3-9c94-d63fdc401f0b/1/EMx498Sv3piImXUVdt6HR77fMg4.roa
File:                     EMx498Sv3piImXUVdt6HR77fMg4.roa (raw, json)
Hash identifier:          ToL8+i0jiiNYOvg9YA5xbv9mvCyMM/Api9qNEFu00zY=
Subject key identifier:   10:CC:78:F7:C4:AF:DE:98:88:99:75:15:76:DE:87:47:BE:DF:32:0E
Certificate issuer:       /CN=7d7bfb1a073220232e5c8799c4bde9522116fe1f
Certificate serial:       01857343C2D33231F0710E71B09E07713860
Authority key identifier: 7D:7B:FB:1A:07:32:20:23:2E:5C:87:99:C4:BD:E9:52:21:16:FE:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXv7GgcyICMuXIeZxL3pUiEW_h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d942cc-5152-47c3-9c94-d63fdc401f0b/1/EMx498Sv3piImXUVdt6HR77fMg4.roa
Signing time:             Mon 02 Jan 2023 16:14:58 +0000
ROA not before:           Mon 02 Jan 2023 16:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        62.3.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:43:c2:d3:32:31:f0:71:0e:71:b0:9e:07:71:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7bfb1a073220232e5c8799c4bde9522116fe1f
        Validity
            Not Before: Jan  2 16:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10cc78f7c4afde988899751576de8747bedf320e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:04:5e:7d:a0:99:3e:ae:90:c7:fa:1d:3d:
                    a5:ff:be:03:ba:f7:f9:c5:37:1d:37:ad:e7:a3:ae:
                    77:50:5c:97:39:21:de:74:6f:2e:9e:9b:a7:b5:77:
                    dd:69:9e:5d:cb:25:b6:63:37:6a:6e:54:6c:9a:71:
                    f1:9a:de:be:58:97:ee:5c:38:f8:f0:f6:1e:9a:7f:
                    54:80:fc:a4:df:f9:e6:f6:07:8d:f1:39:00:1c:d7:
                    61:44:a8:45:da:03:9f:1c:f2:03:ca:24:cd:c7:c6:
                    d7:96:95:69:d4:49:a4:45:8a:36:8a:8d:97:6d:df:
                    db:e0:95:ab:7b:df:b6:41:9e:95:4c:41:a3:0c:d0:
                    f8:ce:93:d7:26:ef:ba:7e:9b:c5:da:e9:2c:90:16:
                    c1:c3:39:02:b4:a4:aa:7b:1c:97:02:85:5c:57:a7:
                    23:a7:92:21:d4:da:d5:21:57:53:fe:9b:f1:f9:fe:
                    4e:7a:f6:09:3e:df:94:14:df:1c:bb:20:df:d0:2e:
                    c3:a9:26:af:ac:15:8a:c0:0a:1a:03:d5:d3:4e:0b:
                    bc:5e:79:0a:0c:c3:64:b8:35:ff:bc:fd:e7:c7:75:
                    46:8e:61:88:b2:39:99:d0:dc:57:e7:c2:68:85:6c:
                    95:07:7c:1f:e6:3a:8f:0a:44:89:ac:3c:f7:72:b8:
                    aa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:CC:78:F7:C4:AF:DE:98:88:99:75:15:76:DE:87:47:BE:DF:32:0E
            X509v3 Authority Key Identifier:
                keyid:7D:7B:FB:1A:07:32:20:23:2E:5C:87:99:C4:BD:E9:52:21:16:FE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXv7GgcyICMuXIeZxL3pUiEW_h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d942cc-5152-47c3-9c94-d63fdc401f0b/1/EMx498Sv3piImXUVdt6HR77fMg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d942cc-5152-47c3-9c94-d63fdc401f0b/1/fXv7GgcyICMuXIeZxL3pUiEW_h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:df:0a:64:f3:c5:a0:22:e8:2c:8f:ff:90:0d:f4:d3:85:
         0e:20:2d:2f:49:a4:5b:3c:eb:c5:c4:8f:57:39:9b:86:44:90:
         a0:05:04:11:95:da:7b:3e:7a:32:ac:de:b5:a8:f0:09:1b:12:
         e8:c1:20:7e:8b:6d:87:17:f4:9b:fa:50:e3:27:75:43:15:0a:
         92:79:78:b2:29:74:b0:c9:4e:a4:a8:31:1b:f8:0b:bb:58:36:
         1b:11:bc:de:87:4d:b9:fc:17:4d:b2:c5:a0:cf:84:ce:61:e9:
         25:65:ef:f0:f1:5f:d2:f3:c4:c4:95:31:c0:d9:fa:7e:b8:55:
         16:e0:1e:33:53:f9:7c:ba:93:1e:2b:e7:87:f3:65:2b:18:98:
         38:a0:bd:19:f8:13:99:c0:95:c0:2c:4a:06:c8:21:91:2d:29:
         bc:b8:ec:1e:69:45:e1:e1:9b:4f:77:83:dc:a9:df:46:12:c2:
         8f:a7:97:d4:74:67:1a:15:1e:11:18:2c:f8:ac:aa:b3:a2:24:
         ca:37:0e:a9:ed:60:2a:47:26:02:23:e3:f0:8c:0c:1a:9c:13:
         71:5c:6a:d4:7e:7e:cd:e3:d1:3a:03:ac:6b:81:3f:b8:16:68:
         f5:fc:38:ff:81:2b:86:22:56:b8:30:d6:ba:38:5a:93:6e:b9:
         0f:d1:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:30 2024 by rpki-client on console-ams.rpki-client.org