Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa
File:                     IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa (raw, json)
Hash identifier:          1zcxhGAttFQP5ld0bDKnJ/ztckFUeO0GInmPR3RRBiI=
Subject key identifier:   21:9F:A7:08:30:99:FD:61:4F:42:B5:78:6F:9D:46:BE:7E:1A:D4:65
Certificate issuer:       /CN=085787e65eb4fcd66e3340b62ade47ca00919dce
Certificate serial:       0194236A44F33D8E58900C3B8F6D9E5A1B51
Authority key identifier: 08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa
Signing time:             Wed 01 Jan 2025 19:49:14 +0000
ROA not before:           Wed 01 Jan 2025 19:49:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215602
IP address blocks:        194.164.244.0/24 maxlen: 24
                          2a0c:28c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:44:f3:3d:8e:58:90:0c:3b:8f:6d:9e:5a:1b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085787e65eb4fcd66e3340b62ade47ca00919dce
        Validity
            Not Before: Jan  1 19:49:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=219fa7083099fd614f42b5786f9d46be7e1ad465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e1:af:9e:df:eb:dd:a7:6e:75:d7:20:6e:b6:
                    19:44:be:aa:59:35:5e:a2:64:34:88:fc:52:be:3c:
                    28:b4:c6:5e:01:88:24:83:14:72:3d:9b:51:b9:f2:
                    d4:d8:16:7d:c7:a8:ca:ce:a0:55:1f:5c:7e:70:27:
                    b9:1d:2f:24:9b:39:a4:b0:80:6d:28:17:a5:20:a3:
                    36:2e:f8:98:44:2f:b0:f1:49:df:ce:83:67:43:82:
                    1d:13:02:53:f9:4a:ef:34:ee:01:1a:af:97:e4:31:
                    5f:72:18:3a:68:39:86:c3:6c:48:f0:db:6f:34:f9:
                    18:7e:bc:5c:e9:bb:a8:bb:2f:fe:b3:fe:2b:62:fd:
                    1f:98:90:1c:ba:60:58:eb:31:50:f6:cb:e6:20:3d:
                    08:42:3f:20:48:de:a3:3e:e8:19:48:9c:24:88:62:
                    3d:1f:3e:e9:37:05:63:3d:8b:28:29:df:5a:16:21:
                    c2:f7:82:b9:f1:24:42:37:6d:bf:d1:4e:d4:05:65:
                    76:4a:c3:f0:08:69:ca:95:86:b4:2f:aa:88:17:ac:
                    d9:f6:f0:32:b7:37:e0:93:b3:87:c0:47:d8:0b:6a:
                    7d:25:99:fe:bc:46:a6:4e:fe:7c:e5:36:12:2e:75:
                    49:68:c7:c0:c2:b6:e5:cd:b3:a9:f4:17:00:45:9c:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9F:A7:08:30:99:FD:61:4F:42:B5:78:6F:9D:46:BE:7E:1A:D4:65
            X509v3 Authority Key Identifier:
                keyid:08:57:87:E6:5E:B4:FC:D6:6E:33:40:B6:2A:DE:47:CA:00:91:9D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFeH5l60_NZuM0C2Kt5HygCRnc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/IZ-nCDCZ_WFPQrV4b51Gvn4a1GU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/d2bbf6-3b69-442e-b490-7e54c32abed8/1/CFeH5l60_NZuM0C2Kt5HygCRnc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.164.244.0/24
                IPv6:
                  2a0c:28c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:0c:d2:71:dd:70:83:26:a7:d9:d5:ad:3c:4c:58:dd:cd:
         6e:44:b0:f3:88:81:22:b0:5f:fa:b9:65:81:31:0a:9a:97:29:
         da:1f:27:fc:d2:69:35:6d:db:57:59:03:03:d8:41:0d:60:3f:
         3c:cd:33:25:cc:c0:1c:44:d9:12:fb:2a:51:ff:65:ad:1f:4a:
         67:c1:4c:62:51:2b:3d:90:9f:44:8a:fc:64:5a:da:4c:26:84:
         cf:31:22:d0:e6:82:90:63:8a:32:73:87:f4:07:f0:e2:96:61:
         54:ab:46:f0:3a:1f:f5:52:13:be:74:a2:77:e1:3f:fc:8e:08:
         0d:eb:31:1c:9c:2e:e5:29:a5:df:f0:dd:55:f1:33:9e:55:8c:
         81:21:0e:b1:8a:3a:da:8b:d5:2a:85:47:4d:bd:80:c4:50:50:
         fa:75:ce:d7:e3:56:00:f5:52:09:1b:f6:d6:51:47:38:ab:f2:
         e0:59:b6:ee:1f:b7:4c:c1:12:84:9f:8c:c3:26:21:57:e3:35:
         85:63:d3:07:ae:43:f5:04:86:91:3a:71:41:eb:e7:a5:a9:b9:
         29:8e:36:44:ee:22:a3:be:dc:b5:a8:55:94:be:33:2b:83:15:
         33:f7:d0:67:54:ea:64:c0:5c:70:43:9d:4f:53:b6:8f:32:ce:
         ac:75:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----