Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pH__rL1RVjxMSUxHKGG7zRUGK1o.roa
File:                     pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (raw, json)
Hash identifier:          jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=
Subject key identifier:   A4:7F:FF:AC:BD:51:56:3C:4C:49:4C:47:28:61:BB:CD:15:06:2B:5A
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       0196208F6BBC0CC4CEE45D8D90F14BD61DF7
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pH__rL1RVjxMSUxHKGG7zRUGK1o.roa
Signing time:             Thu 10 Apr 2025 16:36:32 +0000
ROA not before:           Thu 10 Apr 2025 16:36:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209505
IP address blocks:        78.41.136.0/24 maxlen: 24
                          2a13:3840:1000::/39 maxlen: 39
                          2a13:3840:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:20:8f:6b:bc:0c:c4:ce:e4:5d:8d:90:f1:4b:d6:1d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Apr 10 16:36:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a47fffacbd51563c4c494c472861bbcd15062b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8c:e2:f5:0b:3a:17:85:c3:11:fe:bc:86:4c:
                    21:1c:b7:36:36:b6:8c:f2:18:23:ce:7e:93:e2:7c:
                    17:33:b1:e3:98:4f:70:fd:c4:c7:d2:10:86:94:1f:
                    5e:63:24:f6:6f:67:c8:c4:1a:56:01:6b:4b:2b:18:
                    a7:c9:b9:a0:03:ab:08:a2:9c:41:13:b2:80:0f:59:
                    74:bf:8a:81:84:f9:e4:c8:b7:1d:c8:1b:d8:73:42:
                    bd:17:2f:91:ae:67:92:99:ae:ca:f6:cb:36:68:67:
                    67:07:1c:92:48:28:96:29:3c:a0:57:2b:9b:ee:3e:
                    3f:c1:92:88:37:bc:c7:fa:7f:d0:3c:cb:42:02:38:
                    2b:51:22:00:ac:a7:69:ab:d9:55:e0:e7:d7:db:b0:
                    62:48:a0:fd:4c:9d:50:bd:0f:6e:83:91:d4:ad:bd:
                    7b:ba:b3:90:21:60:35:2c:c0:eb:d0:fd:b3:28:5f:
                    34:f5:8f:6a:cb:67:c8:e2:33:9d:a1:b0:1e:6e:1c:
                    bd:44:24:96:c9:69:d0:27:e6:0a:c3:5f:e2:06:cc:
                    14:c4:51:20:1c:c5:30:49:c8:4a:79:aa:5e:ef:d2:
                    89:b3:6d:03:61:09:a1:da:b6:84:04:2d:16:27:de:
                    b6:f3:8d:17:73:bf:af:18:0d:f6:7c:10:b7:68:d6:
                    41:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7F:FF:AC:BD:51:56:3C:4C:49:4C:47:28:61:BB:CD:15:06:2B:5A
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/pH__rL1RVjxMSUxHKGG7zRUGK1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.41.136.0/24
                IPv6:
                  2a13:3840:1000::/39
                  2a13:3840:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:e9:f7:c9:75:4c:64:af:5b:ac:47:7d:10:c1:6d:3e:cb:
         04:64:fa:92:29:15:3e:3e:7a:4c:73:b1:d2:b4:e9:3c:ce:10:
         d3:72:b6:55:26:71:80:9c:87:04:84:d7:4f:ae:67:87:61:b8:
         6a:53:a7:e3:a4:b4:4d:7e:cf:53:35:ba:81:c5:4f:ed:ef:69:
         9d:d9:2e:8f:c5:11:3a:10:04:ea:d6:54:f3:97:70:67:af:3e:
         2e:08:46:e2:92:23:63:16:d1:3a:6c:4d:8f:b9:3e:47:5a:37:
         83:5f:7d:87:50:0b:4e:b5:3b:f4:6b:7e:6f:b4:95:19:b8:f4:
         ff:37:7f:ce:d2:6d:73:c3:1e:95:9d:24:cb:c5:4a:b8:6c:ab:
         cc:3f:06:39:fa:c3:c8:d9:63:82:81:39:55:10:fa:d6:e4:79:
         9a:8d:dc:b8:4e:77:1b:75:1c:83:47:1f:ab:35:c5:77:f9:5e:
         34:65:0b:0b:31:e1:aa:3f:13:69:b8:b1:5f:e3:09:f0:9a:e9:
         4b:4b:1e:72:c0:b9:5a:2e:60:09:0c:1a:e0:ad:cb:7b:e0:97:
         8c:4e:e9:5b:ab:21:e9:cb:38:66:69:3f:25:b3:e2:de:e4:4d:
         81:82:f8:9b:f6:29:03:6d:e9:94:92:3d:2c:cc:32:fa:66:32:
         2f:40:c2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----