Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/zXjqftbJPl4WMlTVqYwCCC34rp0.roa
File:                     zXjqftbJPl4WMlTVqYwCCC34rp0.roa (raw, json)
Hash identifier:          JlLjbihRwnZcBC1XS3nZ9UdUKk69BSC90fR3Qh4dmgY=
Subject key identifier:   CD:78:EA:7E:D6:C9:3E:5E:16:32:54:D5:A9:8C:02:08:2D:F8:AE:9D
Certificate issuer:       /CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
Certificate serial:       019420D638A41CB31D43D67924A6F36AB9EC
Authority key identifier: EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/zXjqftbJPl4WMlTVqYwCCC34rp0.roa
Signing time:             Wed 01 Jan 2025 07:48:17 +0000
ROA not before:           Wed 01 Jan 2025 07:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200635
IP address blocks:        185.100.196.0/22 maxlen: 32
                          2a06:1900::/29 maxlen: 120

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:38:a4:1c:b3:1d:43:d6:79:24:a6:f3:6a:b9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7a264dbccd75aa86cd361c6d366bd88c90da23
        Validity
            Not Before: Jan  1 07:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cd78ea7ed6c93e5e163254d5a98c02082df8ae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:64:6f:a0:63:1b:c8:7f:3c:31:c9:58:56:
                    4e:5f:7d:2f:9e:c2:19:d7:eb:e1:f9:55:5a:84:f2:
                    77:0f:2f:00:5e:0e:c9:dd:31:eb:63:f0:ef:6f:77:
                    37:d2:7f:f3:06:76:6f:b4:61:90:75:65:66:13:ac:
                    4a:7e:5c:5d:57:41:80:27:00:36:87:15:35:bf:6a:
                    bc:99:77:fc:28:93:8c:19:78:39:e6:65:b7:27:d6:
                    01:da:d1:bc:57:6c:46:6b:f8:4c:a8:2d:c6:fa:9a:
                    f5:b7:e8:01:ea:1f:8f:44:02:67:2c:8c:75:ab:f1:
                    d4:82:82:6e:17:60:87:07:9e:8a:ff:e1:58:16:53:
                    56:9f:eb:04:fe:2c:7b:3c:bb:99:1b:22:9c:c7:e5:
                    ad:5d:e7:62:f0:cc:98:f3:a1:76:95:f2:ac:b4:eb:
                    45:0b:53:88:41:ca:0d:2b:3d:30:56:73:c9:84:5d:
                    35:8a:4e:0c:1e:49:38:78:ef:cf:72:60:b8:bd:ba:
                    0a:ab:0b:42:71:d3:73:bf:15:b0:72:36:c9:a7:41:
                    7a:f1:ae:c8:6a:7a:6c:51:a0:51:c6:a0:1d:85:f5:
                    f7:b6:08:dd:83:e2:d7:61:0e:71:7a:ee:d1:66:f7:
                    13:7e:c1:28:0d:df:68:cd:73:37:9d:33:3f:75:70:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:78:EA:7E:D6:C9:3E:5E:16:32:54:D5:A9:8C:02:08:2D:F8:AE:9D
            X509v3 Authority Key Identifier:
                keyid:EE:7A:26:4D:BC:CD:75:AA:86:CD:36:1C:6D:36:6B:D8:8C:90:DA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nomTbzNdaqGzTYcbTZr2IyQ2iM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/zXjqftbJPl4WMlTVqYwCCC34rp0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7f4b5a-82e7-4fce-b6fc-317e820dfcdb/1/7nomTbzNdaqGzTYcbTZr2IyQ2iM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.196.0/22
                IPv6:
                  2a06:1900::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:77:76:46:50:39:0b:b3:50:78:19:2e:89:fb:73:dc:26:
         ca:e2:8a:d5:09:75:0b:40:48:bb:6f:45:7d:12:0e:85:97:73:
         a5:50:78:e4:84:f5:30:20:52:53:a4:22:e9:b2:04:a3:06:55:
         73:e9:e2:17:39:21:80:42:f8:ca:8d:bf:9b:30:e0:1b:3f:aa:
         1b:54:54:5d:b4:52:61:92:fb:14:23:49:4f:af:18:fd:c0:6c:
         03:d9:f3:63:b6:d9:9f:35:90:0b:51:2a:30:12:01:a7:85:4f:
         5e:da:d6:11:17:58:c6:6e:43:87:bf:48:47:0a:93:b4:6c:c6:
         f2:9c:70:59:0b:23:c6:a4:86:ed:07:20:77:99:69:1c:d2:59:
         a7:02:e3:ec:63:18:65:28:9a:86:dc:2c:41:5a:b3:87:1f:0f:
         45:e8:73:71:0a:2b:41:6f:66:bc:c6:8a:79:90:5c:5e:4b:69:
         af:15:0f:c1:8a:7f:e1:99:b7:64:a9:d6:b4:00:72:6e:3b:5f:
         90:33:24:67:98:bd:b2:68:b7:f8:e5:72:eb:b1:66:6f:9b:78:
         d2:9f:dc:89:2c:4d:eb:4e:50:0a:22:27:60:23:79:99:6a:aa:
         da:be:80:19:92:0e:72:e2:0c:14:65:49:a5:d2:6b:bd:a3:fe:
         33:b4:cf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----