Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa
File:                     CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa (raw, json)
Hash identifier:          Z7Nm6IrHUE/TC8xU7rVqcrz5JoA82LWmN+W14PD9mb8=
Subject key identifier:   08:2C:FB:15:02:27:F2:42:3D:A2:03:08:69:77:3F:6C:E8:C3:C7:E2
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       019426D9CAF19377B52F695EE8A9E1E26D55
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa
Signing time:             Thu 02 Jan 2025 11:49:54 +0000
ROA not before:           Thu 02 Jan 2025 11:49:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197540
IP address blocks:        5.182.200.0/23 maxlen: 23
                          5.182.202.0/23 maxlen: 23
                          2a0f:5b00::/32 maxlen: 32
                          2a0f:5b01::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:ca:f1:93:77:b5:2f:69:5e:e8:a9:e1:e2:6d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Jan  2 11:49:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=082cfb150227f2423da2030869773f6ce8c3c7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:c4:fc:5e:c7:55:5d:72:dd:75:1c:dc:21:
                    cf:20:a4:ee:4f:ab:70:c1:2f:8a:0c:b2:a8:1b:c8:
                    ed:21:9c:36:51:2e:5a:14:a7:d8:39:34:e5:5b:2f:
                    90:41:3c:6f:25:07:eb:19:0c:05:9d:dc:a5:3d:3d:
                    41:64:70:e8:c7:7e:2a:ba:ef:fa:05:f1:62:a6:33:
                    f1:ba:67:92:83:c3:05:62:a7:7a:50:84:56:cd:58:
                    06:4f:f1:19:09:c4:3c:13:2e:6b:d7:5a:d5:35:31:
                    f6:9e:2c:db:47:e8:52:a2:74:71:76:0d:61:92:2d:
                    61:e6:45:88:15:ea:69:1b:25:ed:dc:71:91:b8:12:
                    ef:cf:bc:c4:90:af:c1:5d:af:c6:de:45:85:cb:ec:
                    e1:9c:21:9a:ff:7c:8d:ae:11:2a:0f:f8:67:44:91:
                    05:49:27:36:b4:4e:13:1a:6e:d5:23:c2:8e:4d:d0:
                    e7:dd:1f:0a:77:4b:cb:f3:79:c0:b1:29:d8:da:ae:
                    4c:9f:4f:a3:45:04:f4:c0:db:bb:30:47:09:d0:de:
                    b4:24:de:55:f8:5d:ab:91:ff:24:89:f9:c4:dd:d7:
                    92:57:1d:39:44:1f:d8:1a:b2:51:ad:f8:06:a2:13:
                    a4:ea:3d:72:82:d1:db:dc:e2:f4:8d:84:a7:60:36:
                    99:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2C:FB:15:02:27:F2:42:3D:A2:03:08:69:77:3F:6C:E8:C3:C7:E2
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/CCz7FQIn8kI9ogMIaXc_bOjDx-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.200.0/22
                IPv6:
                  2a0f:5b00::/31

    Signature Algorithm: sha256WithRSAEncryption
         d9:61:59:7a:73:0b:6e:f2:e1:83:38:de:47:8c:c9:d5:cc:77:
         f3:6f:c4:81:ff:13:63:c4:5a:17:27:dc:61:49:e0:65:d2:26:
         96:67:4e:d8:b5:d9:b7:a7:b1:fb:3d:64:71:0a:bc:d6:d9:47:
         56:6d:8f:2b:7c:4b:a0:86:3a:87:a0:75:09:91:f0:33:8c:d2:
         b5:69:53:75:61:12:86:8c:3e:dc:3f:aa:b2:42:02:e4:dd:91:
         78:32:40:af:c7:55:9a:67:88:e0:b8:95:0b:62:e3:07:04:5d:
         2f:f8:42:dd:cd:8c:1a:f5:c7:d1:69:ab:29:a5:d2:26:ed:8e:
         d5:c5:1d:bc:6f:a0:78:b1:7a:48:28:f0:67:5d:98:a3:55:d9:
         0a:91:77:da:52:db:2f:17:b9:53:86:94:e1:6d:10:12:ad:19:
         b2:9d:d9:2a:3c:02:43:a7:c7:be:d1:f4:0b:95:67:f1:1c:43:
         8c:ae:15:bf:49:31:d6:3a:bb:0f:54:a7:03:af:25:3c:11:cb:
         a4:de:e8:c6:6d:ff:87:86:95:f7:94:54:1e:d4:41:b9:9e:86:
         40:0c:d5:3a:5f:d1:70:0c:53:35:e0:7b:12:c0:e6:e5:10:77:
         d6:23:55:ed:96:4c:51:1e:b6:4a:d3:76:51:5f:ab:14:91:78:
         54:44:1b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----