Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/RNfKctauC-oTPcL6YJRfu5hjarE.roa
File:                     RNfKctauC-oTPcL6YJRfu5hjarE.roa (raw, json)
Hash identifier:          pvA35HxoGfjnkcQiDoaSf/TBOnZ4oIEb1paDTCYjCXM=
Subject key identifier:   44:D7:CA:72:D6:AE:0B:EA:13:3D:C2:FA:60:94:5F:BB:98:63:6A:B1
Certificate issuer:       /CN=e7d0aaaec0016a926beedcfdf758358155b71bef
Certificate serial:       019425FD8339A2B457D76D15AD35F0A07424
Authority key identifier: E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/RNfKctauC-oTPcL6YJRfu5hjarE.roa
Signing time:             Thu 02 Jan 2025 07:49:18 +0000
ROA not before:           Thu 02 Jan 2025 07:49:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208532
IP address blocks:        45.130.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:83:39:a2:b4:57:d7:6d:15:ad:35:f0:a0:74:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d0aaaec0016a926beedcfdf758358155b71bef
        Validity
            Not Before: Jan  2 07:49:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=44d7ca72d6ae0bea133dc2fa60945fbb98636ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1e:c4:ed:87:59:fd:ad:bc:3b:66:13:f3:cf:
                    8d:ea:69:b0:fe:0f:0c:0e:f4:e6:f2:4d:4b:41:b3:
                    d9:80:ff:3d:39:21:19:db:87:b1:16:a4:4f:d4:d4:
                    1c:80:d5:95:c1:e3:f4:a0:25:90:57:5c:e2:f6:36:
                    7f:69:0c:0b:03:ca:ab:f2:97:fe:ab:4d:83:3b:ee:
                    10:a4:c4:d4:fe:e7:fa:28:0d:ef:74:d7:1c:31:4a:
                    8a:89:bf:33:53:a1:ea:55:26:e6:da:ab:f6:d4:6d:
                    1f:1d:88:b1:71:09:a0:41:5f:9a:08:56:df:63:d7:
                    f1:cb:39:2d:5f:93:8c:c4:2e:8d:ca:f2:c1:f0:b6:
                    8d:1e:a0:fb:ce:27:80:34:4d:5c:dc:58:f5:61:b9:
                    b1:43:62:fc:69:b0:da:c0:89:12:24:36:de:8f:f3:
                    62:6c:b3:c4:d0:57:de:a1:86:e6:28:14:77:fd:49:
                    c1:61:a9:a6:bd:2a:a1:be:57:7e:89:5f:1f:57:71:
                    da:d1:a6:ca:11:2e:0c:fb:96:fa:6a:65:b2:98:07:
                    f3:1a:d3:c4:24:b5:59:7a:13:98:ea:6f:3f:08:d8:
                    fe:76:39:20:65:0f:9c:8b:d2:03:75:c5:58:8a:0a:
                    cb:c4:ef:eb:39:eb:81:c3:3b:45:be:eb:9a:10:6e:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D7:CA:72:D6:AE:0B:EA:13:3D:C2:FA:60:94:5F:BB:98:63:6A:B1
            X509v3 Authority Key Identifier:
                keyid:E7:D0:AA:AE:C0:01:6A:92:6B:EE:DC:FD:F7:58:35:81:55:B7:1B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59CqrsABapJr7tz991g1gVW3G-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/RNfKctauC-oTPcL6YJRfu5hjarE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/74cc34-07c4-4d0b-8d1b-7dc26d56d05d/1/59CqrsABapJr7tz991g1gVW3G-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:9f:dd:01:e7:84:e3:6e:c3:4b:a1:50:59:5b:78:ea:74:9b:
         62:d8:8c:d7:03:75:8b:43:12:27:38:81:1b:48:c1:d6:89:d3:
         e9:84:0d:bc:f7:93:68:bc:f6:8b:8b:63:e4:89:5a:8c:e5:d0:
         25:74:1a:c0:da:d7:09:7a:0b:0e:cb:20:97:20:07:40:e5:ad:
         57:d7:46:7f:2e:0b:0e:e3:a7:f2:ca:41:e8:56:3b:02:52:7e:
         c3:db:3a:5b:a3:f1:82:3b:50:e8:1f:7a:19:0e:e5:49:13:a8:
         c7:4c:88:e3:f5:b8:52:45:80:1c:49:91:20:fc:d8:d1:a8:97:
         e8:8f:ed:fd:9e:f7:0b:59:a5:0b:fa:e6:90:99:ae:65:4c:f1:
         ba:67:86:08:13:2f:15:5e:61:2e:06:33:88:b9:3c:0c:fc:77:
         5f:d1:51:08:53:83:fa:9f:23:e6:cb:bf:3f:aa:d6:3b:b5:55:
         9b:86:a6:97:5e:22:9a:7b:cb:14:f4:2b:29:20:ad:44:5e:0b:
         16:1c:2c:0a:35:d3:38:1f:ef:94:24:cc:f7:e7:6a:12:e7:20:
         05:17:13:75:9e:b7:48:b4:8a:73:ad:6c:f4:f5:10:c1:7d:e0:
         1f:f9:5e:11:19:9d:13:20:de:4d:2c:67:2e:65:2f:c4:29:85:
         f2:16:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----