Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa
File:                     1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa (raw, json)
Hash identifier:          fltwqIioPSuzKLuXGtdMjJVRWOd9cnpy/Vmxbwnrchg=
Subject key identifier:   F9:2B:F1:BE:AB:67:80:61:E9:62:6E:0C:6F:F2:BB:D8:9D:49:D1:25
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019503B1902B24B133AD4119E61ABD17F706
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa
Signing time:             Fri 14 Feb 2025 09:02:03 +0000
ROA not before:           Fri 14 Feb 2025 09:02:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56465
IP address blocks:        31.128.172.0/24 maxlen: 24
                          31.128.174.0/24 maxlen: 24
                          31.128.182.0/24 maxlen: 24
                          94.124.162.0/24 maxlen: 24
                          94.124.163.0/24 maxlen: 24
                          94.124.167.0/24 maxlen: 24
                          195.140.224.0/24 maxlen: 24
                          195.140.225.0/24 maxlen: 24
                          195.140.226.0/24 maxlen: 24
                          195.140.227.0/24 maxlen: 24
                          2a0c:29c1::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:03:b1:90:2b:24:b1:33:ad:41:19:e6:1a:bd:17:f7:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Feb 14 09:02:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f92bf1beab678061e9626e0c6ff2bbd89d49d125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:45:29:f3:c6:1b:16:33:52:b6:74:57:f9:
                    18:a8:77:0d:61:8c:35:a1:77:31:ca:7a:38:c1:6d:
                    35:0a:56:da:96:0c:99:39:7a:65:ac:3b:b5:e4:ee:
                    ee:00:1f:28:e2:bb:51:29:a8:8a:44:2c:f8:f0:7d:
                    42:12:02:22:53:62:98:4f:04:f1:d8:72:59:bb:7b:
                    b9:6c:be:4f:61:6a:d5:89:20:6e:0c:08:85:28:ee:
                    b3:95:44:41:5f:8a:39:7f:c2:0a:a9:1d:2c:4d:7f:
                    25:09:31:6f:ee:21:99:c1:7b:ae:88:26:0f:25:da:
                    46:fd:1c:e8:62:ea:b8:2a:d3:6e:97:36:69:32:60:
                    d1:01:a8:39:d3:3f:14:20:cf:19:cb:39:29:1b:99:
                    3a:19:0e:25:03:f7:b5:1e:b2:fe:d8:a7:50:5b:53:
                    6c:9f:de:14:70:0f:b9:1f:02:06:bf:e3:50:93:cf:
                    48:1c:92:6f:b9:f2:bf:d1:f3:aa:66:63:44:7c:d8:
                    c8:be:f8:d7:7a:e7:f1:59:14:39:a0:7c:b0:69:66:
                    96:18:c2:5b:46:01:68:b1:70:62:5a:d7:04:08:96:
                    b1:25:90:01:c4:e3:55:0f:d1:e6:58:24:dc:d0:3e:
                    d6:fa:3a:09:77:a3:05:4e:e0:14:63:53:a5:fa:a5:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2B:F1:BE:AB:67:80:61:E9:62:6E:0C:6F:F2:BB:D8:9D:49:D1:25
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/1-SvxvqtngGHpYm4Mb_K72J1J0SU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.128.172.0/24
                  31.128.174.0/24
                  31.128.182.0/24
                  94.124.162.0/23
                  94.124.167.0/24
                  195.140.224.0/22
                IPv6:
                  2a0c:29c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:ef:47:b6:4e:71:23:8b:a9:f6:0a:a8:a8:e9:92:52:86:
         86:a6:e9:a9:d6:17:11:d4:d3:54:94:51:a6:10:dd:1c:85:d6:
         e5:5c:98:be:39:54:ea:e0:e5:8b:42:7f:64:9f:be:81:7b:2e:
         a9:e3:80:7b:f8:37:2d:65:69:5d:e6:43:ee:96:fb:52:55:24:
         dc:d5:9f:f7:08:56:c9:23:df:1c:31:b5:3a:e6:b5:e3:49:9e:
         4a:3a:df:9a:7e:93:b4:8a:2a:16:76:59:a2:95:f1:87:8b:4b:
         3f:76:76:08:d4:f0:d3:d5:c4:d8:cb:f0:77:22:01:f4:b4:10:
         05:15:26:1a:fb:ec:21:1f:42:ad:ca:ef:93:47:f3:70:eb:79:
         05:88:63:a2:26:13:3e:36:01:6e:a8:98:cd:35:73:d3:8c:1b:
         b3:4c:0f:ae:45:b3:51:7b:a9:28:e0:20:94:ae:36:6c:39:66:
         c6:67:55:a7:e7:fe:ca:49:c9:5f:b7:6f:34:26:23:31:9d:4a:
         0d:86:74:41:9b:66:89:24:50:f0:97:5a:91:ae:90:77:d7:9d:
         4b:9a:54:a5:d6:91:ae:e2:ba:85:ad:d0:3d:44:0d:52:c2:4f:
         84:17:e7:3c:b2:df:fc:f9:e7:da:6d:76:22:1f:ad:9c:53:06:
         f9:04:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----