Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/_3l5IDn3xoKCx9gk6CDmJc9PemQ.roa
File:                     _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (raw, json)
Hash identifier:          tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=
Subject key identifier:   FF:79:79:20:39:F7:C6:82:82:C7:D8:24:E8:20:E6:25:CF:4F:7A:64
Certificate issuer:       /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial:       0194CAD1FB4D8907F57D5D532420FD2795EC
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/_3l5IDn3xoKCx9gk6CDmJc9PemQ.roa
Signing time:             Mon 03 Feb 2025 07:59:06 +0000
ROA not before:           Mon 03 Feb 2025 07:59:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8881
IP address blocks:        212.23.205.0/24 maxlen: 24
                          2a0c:8480::/30 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:ca:d1:fb:4d:89:07:f5:7d:5d:53:24:20:fd:27:95:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
        Validity
            Not Before: Feb  3 07:59:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ff79792039f7c68282c7d824e820e625cf4f7a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:56:e9:9d:72:33:d4:44:2d:34:96:87:43:
                    f6:54:4c:c9:70:b7:c7:c0:c1:c3:00:cd:72:1a:02:
                    36:3c:9e:7d:7e:0c:50:3e:d2:bd:09:5c:83:8b:cb:
                    85:37:3f:49:72:a2:4d:06:44:30:ba:cf:49:42:b2:
                    70:81:ce:5b:de:a9:df:01:12:6a:04:7f:6e:0a:49:
                    06:a4:73:09:6f:cc:38:b7:61:fd:c6:36:a0:73:9e:
                    58:20:f6:dc:ad:3e:c6:f0:ff:f0:75:27:22:d6:4f:
                    19:65:d8:41:d1:b8:2e:a6:b4:f5:3c:51:e2:0c:89:
                    58:d4:2b:15:ac:7e:36:56:36:b0:26:99:65:e3:74:
                    31:5d:dc:d9:f6:8a:df:28:f4:82:5d:fa:ba:d1:1c:
                    db:22:64:6e:a6:1e:5b:be:a0:71:2f:29:29:61:88:
                    00:64:91:4b:a1:35:09:d0:f3:43:af:5c:92:73:77:
                    f5:30:5c:2d:2d:d9:ac:92:5b:75:11:1b:6a:83:35:
                    ad:15:a9:f7:4d:76:5a:54:b4:e8:68:c9:65:05:fc:
                    4c:44:18:18:eb:e6:00:15:43:75:8b:92:39:22:25:
                    54:6f:b8:96:b0:88:bb:7c:cb:7d:96:4b:08:12:f7:
                    1e:2a:83:25:d3:d6:74:8a:69:b8:54:c4:5f:34:be:
                    d8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:79:79:20:39:F7:C6:82:82:C7:D8:24:E8:20:E6:25:CF:4F:7A:64
            X509v3 Authority Key Identifier:
                keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/_3l5IDn3xoKCx9gk6CDmJc9PemQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.23.205.0/24
                IPv6:
                  2a0c:8480::/30

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:1c:b3:e7:6f:50:17:f9:da:24:d5:9a:ff:e9:0e:4b:88:
         71:05:d6:c6:b5:ac:48:bc:08:cd:95:76:50:98:99:79:90:53:
         89:52:ac:04:ef:a3:ca:81:c6:bb:53:2b:d7:a1:86:83:2d:fc:
         89:b3:b3:7c:ab:cc:ce:5c:b2:27:90:d5:fd:5e:55:a4:9c:77:
         7a:33:42:36:f4:46:e3:af:0c:c4:8a:6f:07:c7:7c:0a:db:a9:
         e1:b7:3c:c8:0f:2f:94:57:39:20:4f:00:69:b7:d2:b7:dc:b3:
         e2:14:2a:97:bf:91:a4:c5:32:32:7a:6e:9e:7b:ff:ac:f0:03:
         ee:2a:51:48:ad:9a:4b:92:2c:22:b8:42:23:3c:25:b5:99:c4:
         30:bb:99:92:ea:c5:36:f1:91:9c:a3:68:6a:8a:a9:db:e8:e4:
         40:2c:c8:17:6f:11:23:81:00:1c:f7:fe:71:ee:85:5d:88:32:
         cb:9a:36:ed:3b:6c:15:e6:07:b4:60:2d:39:94:c5:f2:e6:4e:
         c3:5a:cc:22:b2:a3:c4:26:17:05:5f:7e:4f:66:53:4a:b8:7e:
         3d:9e:a9:b8:60:58:02:7c:aa:d9:45:06:00:35:b2:f9:be:71:
         a5:77:52:ac:9f:26:ec:90:f7:85:a8:f3:43:6e:cd:18:b0:b3:
         a8:ae:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----