Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/mgBEW9fLd9B30lim7JhebaWqLyY.roa
File:                     mgBEW9fLd9B30lim7JhebaWqLyY.roa (raw, json)
Hash identifier:          big/pWPQvuLyweD/jE8UZEB5DjVYIyMIrt8cymTv+Sk=
Subject key identifier:   9A:00:44:5B:D7:CB:77:D0:77:D2:58:A6:EC:98:5E:6D:A5:AA:2F:26
Certificate issuer:       /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial:       01959459866BCB9B97F17813FCBA355981A5
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/mgBEW9fLd9B30lim7JhebaWqLyY.roa
Signing time:             Fri 14 Mar 2025 11:10:49 +0000
ROA not before:           Fri 14 Mar 2025 11:10:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213922
IP address blocks:        62.164.156.0/24 maxlen: 24
                          2a0c:6ec0:a01::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:94:59:86:6b:cb:9b:97:f1:78:13:fc:ba:35:59:81:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
        Validity
            Not Before: Mar 14 11:10:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9a00445bd7cb77d077d258a6ec985e6da5aa2f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:52:b8:6d:3d:bb:17:cb:40:28:a8:fe:d7:
                    7c:5f:c5:02:41:ba:52:3e:e1:ec:7e:8d:76:31:cb:
                    4e:39:51:b6:1e:16:d3:7f:65:97:47:c8:7e:ce:76:
                    8a:83:c0:e8:23:d1:3c:25:b9:2f:84:4b:18:16:0d:
                    63:e4:27:90:c4:cb:d1:a6:f3:20:ca:6a:cd:58:3c:
                    85:e0:cd:80:75:60:14:9c:39:80:a6:fd:a0:a7:61:
                    66:5d:9c:c6:53:35:60:b9:d3:4e:0c:c6:89:e1:b0:
                    d8:a9:9d:aa:89:84:f2:42:f6:2b:78:ce:2a:43:7c:
                    4b:20:0d:4b:73:57:8f:0d:4b:70:28:3d:a2:6a:2d:
                    7a:75:7b:a0:14:0c:f7:f7:07:9e:3d:e2:26:c7:52:
                    a1:5b:c8:fb:f2:dd:17:24:40:90:29:62:ef:d8:1a:
                    4d:a2:c8:59:0d:cb:9a:f7:70:90:47:c7:a2:b6:7c:
                    25:45:9b:6b:65:4e:05:8e:58:87:ea:5f:fa:f9:de:
                    46:64:03:61:a1:ed:69:4b:c2:b4:4e:9a:5f:ff:78:
                    10:e5:35:40:3c:70:eb:98:60:b8:cd:58:61:98:e0:
                    39:30:0b:a0:9d:1c:88:62:0c:2c:13:42:fe:3a:c1:
                    c2:fc:33:7b:10:49:2a:db:d9:aa:6f:9a:17:5b:9b:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:00:44:5B:D7:CB:77:D0:77:D2:58:A6:EC:98:5E:6D:A5:AA:2F:26
            X509v3 Authority Key Identifier:
                keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/mgBEW9fLd9B30lim7JhebaWqLyY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.156.0/24
                IPv6:
                  2a0c:6ec0:a01::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:bd:67:f6:8c:be:70:03:8a:d6:28:be:d4:7c:1e:c2:b8:12:
         b5:b7:79:4e:92:07:6e:a3:18:49:4f:80:9f:4f:7a:35:7b:6f:
         a9:a4:4b:e9:b7:2d:24:28:54:b4:75:2c:c3:75:27:6f:9d:bb:
         cf:f2:d9:c8:8c:f3:27:88:68:f8:2c:14:61:dd:ff:d9:dc:4f:
         f0:83:50:5a:89:64:e4:d2:bc:12:0e:68:ca:9c:59:f3:9f:cf:
         25:e5:2f:f8:7b:5e:e0:69:21:84:91:70:68:69:ea:94:75:e1:
         5c:6c:d0:82:d9:b7:48:12:2b:19:aa:ad:a7:d2:7e:16:08:12:
         da:50:ce:f8:8a:f4:2e:ff:ff:a0:4a:d6:14:3e:37:5f:bc:b8:
         cb:e7:62:f4:d4:6b:bc:43:58:ed:48:e7:1d:c6:fd:6b:20:9f:
         ee:18:6f:c2:d2:05:5d:9c:eb:1f:f8:4b:7f:f3:c5:1a:e8:56:
         64:a3:5f:81:6a:d2:ac:43:36:fa:a0:1c:8f:73:be:a1:91:08:
         44:05:e2:a5:f9:2e:1e:a5:21:ae:75:da:b7:71:23:cf:19:06:
         5d:9f:f8:01:81:da:bc:64:6c:bf:d3:7d:fa:e8:8f:b3:af:82:
         20:d2:a8:10:89:19:ef:ff:34:a9:b0:01:07:39:ec:71:7f:7f:
         e8:c0:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----