Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/lAxCqPMpI5f-sYorlBydxXXqa9k.roa
File:                     lAxCqPMpI5f-sYorlBydxXXqa9k.roa (raw, json)
Hash identifier:          VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=
Subject key identifier:   94:0C:42:A8:F3:29:23:97:FE:B1:8A:2B:94:1C:9D:C5:75:EA:6B:D9
Certificate issuer:       /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial:       0194258F6FA56369348EDE63BEE2D52B115E
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/lAxCqPMpI5f-sYorlBydxXXqa9k.roa
Signing time:             Thu 02 Jan 2025 05:49:04 +0000
ROA not before:           Thu 02 Jan 2025 05:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42184
IP address blocks:        185.124.232.0/22 maxlen: 24
                          2a06:b600::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:6f:a5:63:69:34:8e:de:63:be:e2:d5:2b:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Validity
            Not Before: Jan  2 05:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=940c42a8f3292397feb18a2b941c9dc575ea6bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:37:33:0c:39:20:4b:46:31:d6:d7:a1:90:8e:
                    a4:ac:bb:2f:fb:a3:7e:10:02:19:7a:fb:ec:34:6d:
                    b7:d1:85:02:11:d2:9c:6b:09:1a:c6:87:b6:b1:64:
                    0b:ea:7a:6b:05:87:52:bd:4e:c6:28:c3:40:e8:54:
                    6b:b7:4c:66:d3:eb:04:46:6f:93:4d:f7:f0:ad:6c:
                    36:e2:1f:2e:c7:13:6a:6a:ab:63:59:92:e7:6b:39:
                    95:66:4f:33:3f:1e:f5:ae:39:e3:7a:58:d7:33:b5:
                    92:b0:e7:2e:97:4a:5f:b6:fd:e3:c1:e6:b3:22:3d:
                    88:9c:10:8d:e4:d7:e6:03:11:51:92:2d:e2:52:ac:
                    7b:cf:ff:1b:d7:2f:b2:18:f8:44:40:ee:93:ca:5e:
                    b8:08:c5:4f:74:bd:6e:ac:51:ab:73:fb:3c:80:7f:
                    b2:03:4a:01:e9:56:3f:e9:6f:50:21:65:60:c3:02:
                    1a:b5:24:d2:2b:8b:53:2b:94:10:78:a6:5d:c2:a7:
                    3f:77:2a:77:cd:0c:ba:9d:dd:0d:26:6f:52:59:c9:
                    88:69:67:ab:fd:5f:f8:3b:c2:d7:cb:6b:43:1b:3e:
                    19:bd:00:8c:10:93:78:1d:d5:a6:87:65:3c:7f:7e:
                    18:9a:e8:86:0a:7e:d5:f2:b4:7f:ce:07:1d:24:4a:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0C:42:A8:F3:29:23:97:FE:B1:8A:2B:94:1C:9D:C5:75:EA:6B:D9
            X509v3 Authority Key Identifier:
                keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/lAxCqPMpI5f-sYorlBydxXXqa9k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.232.0/22
                IPv6:
                  2a06:b600::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:01:4c:3e:ef:73:73:67:51:85:89:20:43:05:ab:7e:dd:
         59:b2:05:67:82:f3:0b:82:43:21:1c:69:5a:79:e9:1b:54:4d:
         91:28:68:58:52:58:68:c6:e1:17:6e:98:33:5b:f5:46:cf:51:
         81:a1:51:2c:09:93:f6:c9:a1:9b:99:3a:b1:f5:4f:72:07:e3:
         f1:ea:14:e4:60:7a:53:e9:02:24:7f:a0:06:c5:4f:71:4c:6c:
         de:b5:6d:b1:30:1b:b6:ef:fb:e2:5d:40:67:8d:29:ea:66:07:
         81:5b:f7:82:06:91:9b:8c:14:5d:2c:5e:da:89:ac:0e:0e:32:
         27:f6:74:4d:27:1c:74:74:a3:9f:94:e9:66:ef:d5:f6:78:0f:
         d4:3d:95:48:5f:04:aa:23:2a:30:5e:bf:26:4f:ce:88:68:52:
         cd:28:22:cc:83:a8:e7:48:62:e6:e9:9f:70:22:36:21:21:50:
         b3:b7:89:8c:08:8c:ae:94:de:e0:e5:ed:c8:8f:e5:e5:70:d2:
         a1:07:23:f2:e5:c5:fd:f1:ff:74:7c:09:00:54:e3:2e:f2:f1:
         77:2d:29:ef:a6:67:29:eb:3b:00:37:25:7a:25:c6:51:75:a5:
         c1:1a:89:4c:74:34:a4:65:f7:98:fb:3b:c7:31:dc:4b:3d:20:
         e9:4b:f3:93
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlj2+lY2k0jt5jvuLVKxFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGM2ZWZhNmIxMzZiMWU0NWUyMWU0MzRlODU5YTI5MmQy
ZTVlMTQwHhcNMjUwMTAyMDU0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDBjNDJhOGYzMjkyMzk3ZmViMThhMmI5NDFjOWRjNTc1ZWE2YmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TczDDkgS0Yx1tehkI6krLsv+6N+
EAIZevvsNG230YUCEdKcawkaxoe2sWQL6nprBYdSvU7GKMNA6FRrt0xm0+sERm+T
TffwrWw24h8uxxNqaqtjWZLnazmVZk8zPx71rjnjeljXM7WSsOcul0pftv3jweaz
Ij2InBCN5NfmAxFRki3iUqx7z/8b1y+yGPhEQO6Tyl64CMVPdL1urFGrc/s8gH+y
A0oB6VY/6W9QIWVgwwIatSTSK4tTK5QQeKZdwqc/dyp3zQy6nd0NJm9SWcmIaWer
/V/4O8LXy2tDGz4ZvQCMEJN4HdWmh2U8f34YmuiGCn7V8rR/zgcdJEoEQwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJQMQqjzKSOX/rGKK5QcncV16mvZMB8GA1UdIwQY
MBaAFGXcbvprE2seReIeQ06FmiktLl4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmR4dS1tc1RheDVGNGg1RFRvV2FLUzB1WGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YWZiM2QtMGYzNy00NGIxLTgxMWUt
NDY2MTBmYThkNTZlLzEvbEF4Q3FQTXBJNWYtc1lvcmxCeWR4WFhxYTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YWZiM2QtMGYzNy00NGIxLTgxMWUtNDY2MTBmYThkNTZl
LzEvWmR4dS1tc1RheDVGNGg1RFRvV2FLUzB1WGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXzoMA0E
AgACMAcDBQMqBrYAMA0GCSqGSIb3DQEBCwUAA4IBAQCGpAFMPu9zc2dRhYkgQwWr
ft1ZsgVngvMLgkMhHGlaeekbVE2RKGhYUlhoxuEXbpgzW/VGz1GBoVEsCZP2yaGb
mTqx9U9yB+Px6hTkYHpT6QIkf6AGxU9xTGzetW2xMBu27/viXUBnjSnqZgeBW/eC
BpGbjBRdLF7aiawODjIn9nRNJxx0dKOflOlm79X2eA/UPZVIXwSqIyowXr8mT86I
aFLNKCLMg6jnSGLm6Z9wIjYhIVCzt4mMCIyulN7g5e3Ij+XlcNKhByPy5cX98f90
fAkAVOMu8vF3LSnvpmcp6zsANyV6JcZRdaXBGolMdDSkZfeY+zvHMdxLPSDpS/OT
-----END CERTIFICATE-----