Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/Xgq9V95NipYevBZoV-0l5bGtmrE.roa
File:                     Xgq9V95NipYevBZoV-0l5bGtmrE.roa (raw, json)
Hash identifier:          Rgf5L/kSZOAiEiq+J7YCMa5yevsnJ4ngC6eAVx4+Rxo=
Subject key identifier:   5E:0A:BD:57:DE:4D:8A:96:1E:BC:16:68:57:ED:25:E5:B1:AD:9A:B1
Certificate issuer:       /CN=78167dd9603b9fb7af501559cb3737d47a2d5437
Certificate serial:       018CC94AA6F160F8AA67ADC833EB95F9E54F
Authority key identifier: 78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/Xgq9V95NipYevBZoV-0l5bGtmrE.roa
Signing time:             Tue 02 Jan 2024 08:29:21 +0000
ROA not before:           Tue 02 Jan 2024 08:29:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9044
IP address blocks:        185.110.100.0/22 maxlen: 22
                          2a01:bf00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4a:a6:f1:60:f8:aa:67:ad:c8:33:eb:95:f9:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78167dd9603b9fb7af501559cb3737d47a2d5437
        Validity
            Not Before: Jan  2 08:29:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5e0abd57de4d8a961ebc166857ed25e5b1ad9ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:ce:a6:9a:5f:eb:16:a2:5a:8a:16:f4:a2:
                    fe:1b:fe:3f:a5:00:5a:6b:4e:4e:ce:cb:72:f6:c9:
                    30:41:6a:d0:9f:3a:18:82:e6:a5:84:85:1d:00:0e:
                    a8:cf:e8:19:3c:3d:a2:ac:9d:54:34:5b:32:70:7d:
                    13:6d:70:62:b5:2f:bc:e2:f8:83:9b:7f:1a:f3:05:
                    20:17:8b:75:5a:50:48:c1:08:42:96:4c:4f:64:bc:
                    4b:5b:56:20:f2:f3:3e:43:a7:eb:9d:2f:bf:1d:c5:
                    35:04:85:65:6f:41:bf:6b:3e:79:ad:68:97:e5:c0:
                    cd:c3:9a:ba:64:f8:21:bc:a5:35:a8:cb:6e:d2:94:
                    f6:92:d4:5b:f9:29:26:2e:6f:1b:a0:37:fb:dc:31:
                    95:ef:24:63:f5:d2:66:eb:df:20:42:cf:7a:6b:7b:
                    96:87:42:88:1f:0c:4d:5c:b3:62:25:36:fe:88:fb:
                    d1:73:b2:97:9c:97:73:a4:82:c7:6b:59:82:5f:63:
                    30:28:87:20:5d:2c:d0:03:25:21:74:a0:cf:c0:6f:
                    b8:61:eb:ae:e9:f4:8b:d5:7a:b6:93:01:26:bc:6a:
                    03:c2:0d:60:ec:dd:d0:d7:89:20:33:ca:fd:18:29:
                    9d:94:0b:9f:be:05:67:fb:c1:90:71:07:91:b5:37:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:BD:57:DE:4D:8A:96:1E:BC:16:68:57:ED:25:E5:B1:AD:9A:B1
            X509v3 Authority Key Identifier:
                keyid:78:16:7D:D9:60:3B:9F:B7:AF:50:15:59:CB:37:37:D4:7A:2D:54:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBZ92WA7n7evUBVZyzc31HotVDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/Xgq9V95NipYevBZoV-0l5bGtmrE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/30f69c-410e-46d4-b6db-ff8658e1356c/1/eBZ92WA7n7evUBVZyzc31HotVDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.100.0/22
                IPv6:
                  2a01:bf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         e6:ba:b5:87:3c:56:91:2b:a5:d0:77:4f:de:ee:24:87:a5:d4:
         0e:32:3f:33:9f:90:04:d9:5c:9f:2f:4d:13:ce:2f:cd:84:f3:
         20:09:a4:64:2e:66:dd:e6:08:6f:13:13:b4:04:77:c7:90:81:
         e2:dc:43:a0:10:4c:fa:a6:e5:4b:35:5e:bd:35:1c:8c:02:77:
         4e:0d:7d:2f:ad:97:52:ec:43:c3:97:f1:f1:3e:1f:dd:4e:2e:
         6c:4d:22:76:b4:6c:6e:1b:f2:ed:e2:4f:ed:3c:6b:b3:1a:be:
         92:35:f7:2d:1a:6f:30:1c:31:5f:2a:95:1e:e4:dc:db:9b:75:
         d9:90:0a:1b:da:99:fa:c6:cc:e9:98:ad:0a:17:96:50:23:99:
         86:40:75:73:bc:93:d9:7c:8a:b1:03:59:c6:62:64:b2:ca:56:
         f4:8f:1c:5d:fa:af:ed:0f:97:1e:ee:9f:8d:a2:34:0b:82:b7:
         59:03:ad:63:9d:9f:01:4b:e2:7c:89:1a:6d:db:d0:33:29:e5:
         c5:78:9c:03:eb:a3:cc:26:5d:50:7f:08:2c:24:df:2c:05:ab:
         f7:4d:2f:f5:1f:da:4f:26:ae:0e:ab:c2:af:a0:ba:1a:c4:6f:
         1a:ab:4e:ad:91:bb:f2:e8:30:c5:5e:2f:da:c0:e2:2a:cd:e3:
         4d:cf:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----