Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/go1QZ0e22NiGhCdbGFP80uaB__o.roa
File:                     go1QZ0e22NiGhCdbGFP80uaB__o.roa (raw, json)
Hash identifier:          CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=
Subject key identifier:   82:8D:50:67:47:B6:D8:D8:86:84:27:5B:18:53:FC:D2:E6:81:FF:FA
Certificate issuer:       /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial:       019427B5AD79839A0563FE567785EBFA8DCD
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/go1QZ0e22NiGhCdbGFP80uaB__o.roa
Signing time:             Thu 02 Jan 2025 15:50:05 +0000
ROA not before:           Thu 02 Jan 2025 15:50:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8271
IP address blocks:        62.48.0.0/19 maxlen: 19
                          2001:4bf8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:ad:79:83:9a:05:63:fe:56:77:85:eb:fa:8d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
        Validity
            Not Before: Jan  2 15:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=828d506747b6d8d88684275b1853fcd2e681fffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:0e:70:f9:a8:32:be:be:a7:e5:8e:77:a5:
                    d9:e0:1f:c3:92:55:5b:d0:c1:93:06:57:74:5d:a1:
                    a5:8c:b1:e2:c7:e4:07:85:a6:ee:87:66:ce:8d:8f:
                    ef:d0:d3:dd:8a:d5:71:9c:3c:27:0f:5f:d7:16:87:
                    ce:cf:e0:3b:80:03:7e:ba:2e:6c:ba:22:a0:8a:e9:
                    db:14:d2:72:f1:5d:48:d1:79:72:bd:13:6c:ad:07:
                    14:0a:25:54:51:89:95:41:00:9e:ca:d7:02:83:b0:
                    cf:12:f6:f5:62:3a:fd:41:55:4a:b0:63:25:22:8b:
                    d0:5f:f0:09:85:ec:84:f7:70:4f:c4:3f:73:30:68:
                    5e:3b:c0:bc:ad:85:95:40:a2:1c:02:78:c3:3c:01:
                    4f:84:d5:7b:48:f9:1e:d4:89:a7:a5:a0:dd:6c:f7:
                    0c:03:41:6c:56:3f:8a:a5:86:7a:df:80:4a:d2:86:
                    c5:79:73:91:69:cf:4b:3e:8d:84:f8:e5:62:2a:58:
                    47:14:92:f2:74:f6:12:66:39:9f:2e:57:2f:0a:94:
                    7b:61:91:7b:92:90:50:c1:6c:d9:80:54:fe:f5:47:
                    a1:04:4f:ed:f8:e9:41:ac:cc:8e:6e:be:47:ae:92:
                    09:97:b0:c1:9c:59:e2:a7:49:69:4f:5c:ee:d6:eb:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8D:50:67:47:B6:D8:D8:86:84:27:5B:18:53:FC:D2:E6:81:FF:FA
            X509v3 Authority Key Identifier:
                keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/go1QZ0e22NiGhCdbGFP80uaB__o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.48.0.0/19
                IPv6:
                  2001:4bf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:75:38:02:de:16:e0:5c:20:d4:0a:ed:e6:4d:61:3c:7a:18:
         ec:2c:45:d3:3b:d1:bf:6e:b9:ba:48:69:bb:15:37:8b:e7:5b:
         fd:53:09:65:46:a6:04:ac:a6:e5:c0:a6:12:2f:57:2e:ef:72:
         ab:94:05:9c:a3:f0:1d:8e:bc:3b:ec:37:a9:55:03:81:b8:35:
         57:39:6e:a9:44:21:8c:90:14:4a:7d:8f:9a:3f:f8:af:86:b6:
         72:2a:bd:36:ad:f7:e4:ac:c5:5f:65:c8:25:92:a9:f7:d5:9f:
         5e:b4:65:f8:64:51:b2:f7:eb:39:5a:b1:1f:b6:3a:a4:f7:2f:
         a7:d6:88:4f:6d:e5:04:5d:84:b2:7c:c3:3f:56:47:b9:d1:df:
         8b:1a:a3:6f:12:fe:cf:41:1b:5f:f0:5a:ec:3f:aa:3f:3d:4b:
         0d:94:07:29:32:a8:fc:d0:c4:5b:86:ac:d7:15:ae:66:9d:9e:
         a0:e7:b6:10:d9:2a:eb:b6:bb:a0:87:9b:ef:e3:73:df:2e:b8:
         44:f3:2a:48:f3:3b:68:28:04:b0:9d:82:28:84:c7:61:ed:fe:
         f0:c4:18:7d:6e:80:b7:49:10:54:1e:44:83:10:88:1d:79:12:
         d1:0e:94:c9:ec:3f:89:54:a1:27:c4:de:97:c4:32:9a:5d:f6:
         69:13:c5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----