Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/yGH6Oil6BAsrvRObF0sqosVRvc0.roa
File:                     yGH6Oil6BAsrvRObF0sqosVRvc0.roa (raw, json)
Hash identifier:          lPk6gmzjTVLAOfdoaQeb9dFBHg5tILEM3fFJMiKVdVY=
Subject key identifier:   C8:61:FA:3A:29:7A:04:0B:2B:BD:13:9B:17:4B:2A:A2:C5:51:BD:CD
Certificate issuer:       /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial:       0194CB3712C38DBDE4029D42637C0FF8CB26
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/yGH6Oil6BAsrvRObF0sqosVRvc0.roa
Signing time:             Mon 03 Feb 2025 09:49:31 +0000
ROA not before:           Mon 03 Feb 2025 09:49:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58345
IP address blocks:        5.134.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:cb:37:12:c3:8d:bd:e4:02:9d:42:63:7c:0f:f8:cb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
        Validity
            Not Before: Feb  3 09:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c861fa3a297a040b2bbd139b174b2aa2c551bdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:1a:62:52:34:db:7c:24:ea:01:74:94:28:
                    a3:c8:76:86:95:38:ec:60:d3:be:bb:7a:dd:1b:ff:
                    42:80:cc:33:b6:bd:3c:62:60:b3:9b:a7:42:57:c5:
                    cc:47:7c:17:63:e2:8a:9c:7f:9e:8b:3e:0e:cd:16:
                    b7:16:c5:52:e5:18:be:f5:83:96:62:4d:2f:a3:0e:
                    2d:7e:3c:e9:41:23:3f:71:35:80:56:4f:7a:2a:84:
                    30:d9:ef:54:51:a9:5f:28:4f:d9:f5:b1:ba:52:d2:
                    50:9b:b8:16:c1:dd:20:62:ed:c7:6c:3f:63:fe:26:
                    3b:25:f6:9d:88:ab:42:52:db:c6:b2:44:d7:f3:81:
                    da:cd:bb:92:2a:38:dd:d0:be:e0:5c:fc:0d:8d:e1:
                    2a:86:86:b5:6a:2f:7d:08:cd:58:ac:f9:9c:65:3b:
                    6c:6b:e9:54:3f:f6:fd:cb:f7:9e:30:5f:17:09:aa:
                    ca:7f:d3:1b:8b:28:39:9d:54:cf:f1:7c:e4:16:77:
                    d9:aa:1b:95:a0:6b:9f:fa:af:ce:23:18:49:78:fa:
                    1a:a6:81:06:1d:73:1f:cf:ec:e6:c5:64:0b:45:72:
                    ac:6a:c9:39:31:70:e9:0f:4f:96:2b:7b:a5:60:8d:
                    6e:45:4c:bb:84:e6:ab:ff:b6:6f:8f:39:6a:fe:3a:
                    0e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:FA:3A:29:7A:04:0B:2B:BD:13:9B:17:4B:2A:A2:C5:51:BD:CD
            X509v3 Authority Key Identifier:
                keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/yGH6Oil6BAsrvRObF0sqosVRvc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:5f:35:ee:bd:3b:3f:6f:3d:59:73:fe:66:f1:cb:1f:12:06:
         91:af:70:f3:c9:77:0f:e7:e6:7f:25:7b:82:d7:58:9c:4b:54:
         a7:0d:d6:f6:b3:cd:d9:13:fc:16:06:26:96:b4:ad:a9:72:fd:
         e6:1c:03:5c:81:3b:d6:4c:b9:f7:82:07:3a:41:92:2c:43:c2:
         2c:5e:70:4b:9f:43:a0:4b:5f:1d:df:77:58:60:5f:90:7e:48:
         8e:d6:48:8a:b1:4c:b8:d1:17:f8:a8:10:65:2c:cc:ab:df:5f:
         23:5f:c9:b2:11:e7:65:bd:3d:5d:08:7f:78:e0:10:e0:1b:29:
         3d:c7:84:6a:ef:74:dd:ec:ab:c2:aa:25:73:02:e3:16:88:ac:
         42:1d:0c:da:42:ac:f2:d9:6f:81:e3:98:77:08:b7:67:01:47:
         06:bc:ed:a6:a1:21:a4:b7:36:11:e7:a2:d4:23:7d:c6:26:5c:
         39:d3:fe:6c:05:99:c9:70:99:53:74:8a:a3:00:4c:65:f6:55:
         ec:46:81:39:77:e1:7f:92:f4:bd:36:dd:f0:0b:6d:d6:2c:a8:
         14:9f:f7:83:31:36:3b:ed:1c:59:8c:45:fc:d8:86:c9:b4:8d:
         11:d4:74:61:97:90:5b:70:94:df:a7:4d:51:35:23:52:da:e8:
         4b:22:fb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----