Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa
File:                     gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa (raw, json)
Hash identifier:          WIrKKySjlipgbBStUixKdW9xZvtWQuX2bcDWYj9rmX8=
Subject key identifier:   81:17:40:D6:5B:D9:0F:06:78:09:BC:19:1C:71:98:93:AC:D6:39:A2
Certificate issuer:       /CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
Certificate serial:       019422FB8C9826564EF9759C642A0E1B2FF3
Authority key identifier: 78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa
Signing time:             Wed 01 Jan 2025 17:48:18 +0000
ROA not before:           Wed 01 Jan 2025 17:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49432
IP address blocks:        185.210.224.0/24 maxlen: 24
                          2a0b:5cc0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:8c:98:26:56:4e:f9:75:9c:64:2a:0e:1b:2f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78dc3c6ab4afba864ba0d4fdb09e6f0eb06f43fa
        Validity
            Not Before: Jan  1 17:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=811740d65bd90f067809bc191c719893acd639a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:1e:d8:ac:b4:45:78:68:d1:2b:b1:7a:c3:
                    fa:06:75:c8:7c:ce:a9:e2:f9:02:b0:c6:03:b6:2d:
                    48:2c:40:e8:17:eb:3c:e3:43:17:b2:ee:86:4c:74:
                    f8:5c:c5:fc:40:9b:15:fb:57:b9:23:e5:ab:39:8a:
                    66:68:24:dd:ef:a5:fc:47:ef:50:0b:e2:13:0e:f9:
                    03:0d:63:f8:ad:36:b8:76:bc:fb:1a:9d:fa:f4:6b:
                    04:55:f5:23:06:2b:c4:4f:72:79:80:4e:dc:61:50:
                    16:1b:b3:9a:14:ee:41:38:d5:75:15:18:ff:be:6d:
                    e6:c3:23:a7:51:29:2b:7a:0b:ec:df:1d:a9:d7:e7:
                    8f:33:1b:28:bb:61:3e:78:d9:8f:bf:17:09:c4:9a:
                    42:79:24:b3:a6:ff:33:e9:16:c1:37:27:85:ad:4e:
                    64:c0:ea:d2:63:26:04:f5:f9:34:a2:9c:ec:ea:d0:
                    45:08:29:ef:a6:da:e9:78:55:9a:17:c3:d4:b2:dc:
                    d5:31:df:f2:47:69:9d:1b:22:42:6e:bc:c1:1b:db:
                    1f:e4:7b:3d:2f:06:d4:3f:9f:3b:88:03:5c:10:3e:
                    0c:0d:75:99:9b:fa:2f:4a:9e:6f:ee:cc:81:e9:be:
                    c1:2d:a1:d2:67:55:06:d9:24:12:54:d7:e9:28:06:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:17:40:D6:5B:D9:0F:06:78:09:BC:19:1C:71:98:93:AC:D6:39:A2
            X509v3 Authority Key Identifier:
                keyid:78:DC:3C:6A:B4:AF:BA:86:4B:A0:D4:FD:B0:9E:6F:0E:B0:6F:43:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/gRdA1lvZDwZ4CbwZHHGYk6zWOaI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/54f6a2-10d1-4195-95bc-9ee76583c71a/1/eNw8arSvuoZLoNT9sJ5vDrBvQ_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.224.0/24
                IPv6:
                  2a0b:5cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         56:77:7d:5d:a3:15:28:21:71:b3:d9:2b:05:7b:4f:db:72:f8:
         e3:aa:37:34:eb:7c:99:1d:b0:d7:bf:36:4d:87:87:8e:f3:12:
         6e:6e:0e:fe:3a:6e:9e:54:83:eb:89:8a:89:27:13:cc:05:75:
         8f:f2:b2:ea:88:d3:91:79:0f:76:a1:ca:b2:99:52:e2:fe:dd:
         6d:6f:ca:f4:cf:b0:59:15:7a:21:7f:9d:41:cb:03:6c:3f:f8:
         bd:59:22:99:78:d2:16:dc:f5:09:0d:72:db:89:a2:a7:55:a0:
         ff:34:a7:2d:0e:7d:7f:fc:4f:37:0d:08:77:ef:4e:19:47:38:
         58:23:48:83:6e:2b:2f:90:8d:55:ae:9f:55:5d:6b:9b:34:8f:
         20:56:6f:6c:8a:2a:e0:41:97:67:48:42:92:c1:af:ce:be:4b:
         81:9e:a0:7f:02:95:96:19:bd:27:c7:14:6c:f2:9d:58:43:ef:
         7a:ab:56:50:ca:69:2e:cf:c8:1b:22:25:37:81:5a:e3:8c:50:
         f4:4f:b6:4a:2b:67:e6:88:cf:7f:32:a0:4b:79:92:d7:36:66:
         1d:b0:54:9c:3e:c7:30:3b:b9:21:f3:53:c6:21:53:bb:ba:ae:
         11:30:ec:e1:c7:9a:e4:39:15:66:42:e7:56:95:c0:95:9d:93:
         34:d3:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----