Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/OEwb1lDHunikfNaNODhoAnbiQCo.roa
File:                     OEwb1lDHunikfNaNODhoAnbiQCo.roa (raw, json)
Hash identifier:          wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=
Subject key identifier:   38:4C:1B:D6:50:C7:BA:78:A4:7C:D6:8D:38:38:68:02:76:E2:40:2A
Certificate issuer:       /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial:       019420D5E36366CACF40EA616C46754CC9EA
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/OEwb1lDHunikfNaNODhoAnbiQCo.roa
Signing time:             Wed 01 Jan 2025 07:47:55 +0000
ROA not before:           Wed 01 Jan 2025 07:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204918
IP address blocks:        185.135.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e3:63:66:ca:cf:40:ea:61:6c:46:75:4c:c9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
        Validity
            Not Before: Jan  1 07:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=384c1bd650c7ba78a47cd68d3838680276e2402a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:5e:35:4d:c7:76:9c:87:20:b6:cb:7a:f0:
                    62:11:98:01:81:89:a5:3c:8e:c1:fb:fa:f2:b1:d3:
                    ce:de:32:84:d4:5b:54:a4:84:ac:a4:e9:4c:8f:bb:
                    bc:17:a2:67:47:a1:49:5c:5f:36:88:c5:cf:85:67:
                    6b:89:18:53:db:e7:ef:37:eb:51:43:a1:54:8f:c8:
                    11:42:84:a8:3b:ce:8d:82:ff:94:69:c8:75:2c:18:
                    cd:37:60:d3:70:b7:bf:ca:7b:ed:4f:66:2c:bc:17:
                    75:84:89:f4:21:61:d8:c0:8a:67:a7:18:fc:75:56:
                    45:00:fd:f2:a5:c2:93:2b:a9:ff:55:ea:34:46:25:
                    d9:ce:e0:ce:f6:7e:c3:92:db:3f:9e:d9:cd:5f:9c:
                    9d:58:75:9b:49:2d:19:4e:5b:15:2e:d1:c9:46:59:
                    23:07:3c:9d:79:05:54:ad:e6:37:2f:ba:a4:ba:e5:
                    37:f1:4d:16:a5:0c:4e:a4:4f:7e:f4:d6:ba:0c:6a:
                    17:99:d1:06:fb:2f:78:f6:e9:66:62:6e:0b:e2:83:
                    48:22:a0:84:d9:d4:e2:c6:96:3d:a5:23:83:e8:70:
                    23:b9:22:bb:ea:74:5e:8f:43:c8:06:33:53:5c:08:
                    57:9b:ab:e0:45:44:fe:b7:b1:32:23:11:33:a2:f8:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:1B:D6:50:C7:BA:78:A4:7C:D6:8D:38:38:68:02:76:E2:40:2A
            X509v3 Authority Key Identifier:
                keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/OEwb1lDHunikfNaNODhoAnbiQCo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:73:09:e4:5d:77:15:d4:e3:4f:c1:b8:c3:b3:1c:b7:3d:
         90:42:f8:3b:81:06:1c:3c:f9:de:02:92:52:b7:a4:46:c4:a0:
         a1:06:61:a5:8c:19:f0:5b:37:ec:6c:df:b0:f5:19:b2:97:e7:
         f9:c4:8e:ff:04:79:68:af:d7:60:74:c4:9f:0f:b8:4c:26:ed:
         03:11:f0:7d:d6:15:9b:74:2e:14:31:50:ad:45:27:34:f0:2c:
         dc:dc:d2:6c:9f:a3:66:0d:c9:b3:d2:50:e0:82:32:7b:c1:b6:
         38:61:58:11:5b:c8:fb:b4:59:2c:fe:f4:ce:f9:4c:cc:b2:3e:
         73:4b:99:d1:64:61:60:54:70:28:5c:98:74:d7:54:bb:17:6e:
         1b:4a:e0:6e:bc:2a:73:e4:d8:62:45:99:b6:2d:26:56:e0:d6:
         67:44:e5:42:ff:da:e9:d8:fb:3e:e8:94:e0:c7:c6:1c:2a:5b:
         06:ed:55:9a:37:50:97:52:b1:79:a8:9e:3c:cf:ff:80:fe:54:
         4e:77:ee:94:5b:67:74:7c:3b:8a:15:2a:1b:ab:01:1c:5b:c2:
         7a:95:8d:08:88:8b:2c:1f:be:44:0c:ad:a3:98:d4:a0:ac:ff:
         0f:65:a3:cf:41:e7:fb:7b:6a:e5:ab:a0:cf:15:6a:a6:ce:1f:
         80:a0:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----