Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/TVkYtOBX4jlPadPB8EN37oM_ejY.roa
File:                     TVkYtOBX4jlPadPB8EN37oM_ejY.roa (raw, json)
Hash identifier:          t9s/wGBhF7eWwaYIxIzGF9nQ4YCwfq2jMNA0hkpmxHY=
Subject key identifier:   4D:59:18:B4:E0:57:E2:39:4F:69:D3:C1:F0:43:77:EE:83:3F:7A:36
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01962DB5528336519B679107AF1A8ADAEA20
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/TVkYtOBX4jlPadPB8EN37oM_ejY.roa
Signing time:             Sun 13 Apr 2025 05:52:59 +0000
ROA not before:           Sun 13 Apr 2025 05:52:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29491
IP address blocks:        109.122.56.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:b5:52:83:36:51:9b:67:91:07:af:1a:8a:da:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Apr 13 05:52:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4d5918b4e057e2394f69d3c1f04377ee833f7a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:62:f8:a4:d0:10:e2:d8:c1:b0:e4:a0:73:
                    68:6f:32:20:0e:45:2d:29:23:97:0c:3e:4c:62:30:
                    e4:60:4c:aa:f1:58:34:09:fd:71:16:6d:d6:5d:24:
                    76:f7:84:5d:81:38:a3:b9:91:06:3a:4e:3b:01:ef:
                    54:c3:fb:6b:6a:6d:6d:21:29:a1:86:08:86:66:93:
                    88:16:4d:c1:d3:39:19:8b:54:0e:6c:ac:47:9d:f4:
                    4a:5a:ce:7d:77:6c:c4:0d:1c:77:b1:04:d5:12:1d:
                    25:e1:4e:34:d8:5f:b3:e7:ff:ab:14:e6:8b:7c:93:
                    25:e7:5e:c7:a0:65:4e:8e:d5:a1:d4:9a:41:10:26:
                    ed:de:ba:6f:58:ed:75:64:8a:63:e7:65:24:cc:01:
                    55:84:c4:f8:9d:46:e2:1e:f1:c2:a7:5a:86:a6:1a:
                    e4:82:df:95:78:43:7d:d8:ea:fd:27:9a:af:78:7e:
                    76:08:e4:18:1a:12:05:d8:14:28:77:f7:1f:cf:9d:
                    3a:42:60:78:3d:b9:28:53:2c:bb:04:96:9e:6f:69:
                    8a:17:0a:b4:6c:f9:72:7c:85:65:24:21:03:27:d9:
                    d9:39:53:7b:78:ff:71:66:05:47:c2:87:b5:f6:96:
                    72:f6:64:30:19:3c:8a:ab:28:05:fe:fb:a3:80:ca:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:18:B4:E0:57:E2:39:4F:69:D3:C1:F0:43:77:EE:83:3F:7A:36
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/TVkYtOBX4jlPadPB8EN37oM_ejY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.122.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:3e:08:99:d0:ad:25:ac:d0:46:cd:87:57:09:24:44:58:
         ef:c7:d0:93:47:a1:2c:cf:d1:b1:74:84:b1:10:b2:8a:58:26:
         a0:67:94:02:9a:2b:3a:cd:78:7e:9a:cd:2b:3d:c0:88:ab:7e:
         92:fa:80:02:0d:3b:7c:7f:2e:33:59:8e:aa:fb:42:17:ae:78:
         6d:ba:20:0e:12:49:2b:29:d9:36:a0:d8:26:00:52:43:81:84:
         a0:07:ed:e8:a1:5b:92:e5:9c:2a:0a:e3:17:37:7e:b2:6d:d7:
         cd:82:39:a9:0e:6e:02:9e:9b:a3:8b:1f:28:44:3d:ee:18:0e:
         58:c7:db:a5:09:25:07:bd:34:86:de:c0:7d:d9:c4:03:79:cc:
         6a:10:df:79:6e:c4:eb:ce:4f:e5:d8:79:cc:f9:21:22:c0:34:
         3c:01:9b:b7:bd:dd:2c:c1:02:bd:d0:e6:25:32:89:19:c9:a7:
         39:0f:18:86:5c:4f:e9:df:a3:70:82:a6:8b:ad:f9:bc:86:82:
         ba:66:0d:0a:3f:3b:87:46:6f:85:bc:97:f4:6f:59:68:25:98:
         ec:a5:61:54:7b:32:40:fe:28:d5:94:a8:21:7d:99:e1:30:62:
         9a:38:5b:0d:4b:38:01:47:ae:e6:ac:ea:19:98:7f:35:79:b6:
         0b:fe:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----