Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/isVEUZfOAYWgwQz8Wasb0pXP9-c.roa
File:                     isVEUZfOAYWgwQz8Wasb0pXP9-c.roa (raw, json)
Hash identifier:          KMpoK0MvGBO62nHjsAV0aozmo8+TgCC0xqPegTe+AGU=
Subject key identifier:   8A:C5:44:51:97:CE:01:85:A0:C1:0C:FC:59:AB:1B:D2:95:CF:F7:E7
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019421B2337785EF993023C06E0236A6F544
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/isVEUZfOAYWgwQz8Wasb0pXP9-c.roa
Signing time:             Wed 01 Jan 2025 11:48:34 +0000
ROA not before:           Wed 01 Jan 2025 11:48:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214378
IP address blocks:        95.169.209.0/24 maxlen: 24
                          2a01:4a40:101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:33:77:85:ef:99:30:23:c0:6e:02:36:a6:f5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Jan  1 11:48:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ac5445197ce0185a0c10cfc59ab1bd295cff7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:dd:66:b6:10:f0:a2:f9:3d:09:c1:b0:6e:
                    e1:85:18:22:8e:0b:e7:82:81:ca:f4:a1:03:73:f6:
                    50:df:12:20:bb:ef:04:b1:21:7b:d1:eb:48:0c:63:
                    4c:ae:0b:02:d5:bc:9d:6e:69:0c:8d:a4:73:ff:3a:
                    c0:15:a4:31:6e:a8:c9:6a:10:99:82:46:c5:db:89:
                    76:ff:e0:d9:88:7b:05:3a:34:7c:d4:db:7e:88:f6:
                    b9:a3:50:7e:d3:8c:b7:9a:36:2c:d7:09:06:75:24:
                    ac:af:2b:4e:8c:4a:93:23:ba:5f:fd:b0:37:d6:79:
                    07:fc:72:43:13:b9:41:11:b4:a1:fb:cc:b0:f2:43:
                    bb:11:38:fd:53:c8:08:f2:93:a4:c4:8c:d4:36:61:
                    c6:34:a9:4f:bb:13:d0:e0:0c:96:86:c1:ef:0e:c0:
                    36:b2:19:f9:7d:f6:40:34:f4:6f:a6:3e:17:6b:a5:
                    bf:b9:8c:dd:f7:8b:47:90:94:22:e6:bb:57:84:96:
                    4d:05:5c:21:54:35:2f:5b:3e:9e:b5:ff:6c:ad:a5:
                    36:73:ad:a5:0a:9e:a8:58:ee:73:3e:e4:34:a6:86:
                    e9:b5:20:39:4d:22:7c:81:77:0c:65:c4:fa:cb:3d:
                    c2:43:d7:45:dd:69:3e:ef:45:68:92:ba:41:aa:5c:
                    9c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:44:51:97:CE:01:85:A0:C1:0C:FC:59:AB:1B:D2:95:CF:F7:E7
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/isVEUZfOAYWgwQz8Wasb0pXP9-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.209.0/24
                IPv6:
                  2a01:4a40:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ed:1d:3f:40:e3:5c:7b:f3:0e:6e:e0:a7:f5:37:4c:d3:af:
         7f:2f:80:02:92:79:60:dc:60:fc:8c:9a:cd:32:20:07:a9:ee:
         d2:86:ca:d2:4c:bd:cb:96:e1:cb:63:a6:8a:51:fe:05:39:91:
         f6:87:cf:b2:2d:57:21:f1:8e:12:6a:28:80:07:2d:f6:61:fa:
         e9:e0:6f:87:90:71:6e:2b:42:56:1a:bb:cf:0c:ef:ad:32:46:
         56:ec:ee:06:0b:2b:0f:17:76:76:d8:00:e8:fc:0e:2a:b3:f4:
         65:e8:1f:98:18:10:2f:50:25:9f:bf:0a:e7:64:62:23:2c:4b:
         8b:28:e7:9a:0c:e1:6e:30:03:a8:5c:63:8b:47:50:81:d5:1b:
         51:a7:a7:ba:dc:c4:5b:56:fb:20:5c:cd:84:67:72:d3:d2:ec:
         6c:c4:0d:52:19:a0:23:d5:98:41:21:76:a5:85:44:ac:da:f3:
         b7:f8:68:4c:65:eb:d9:56:01:02:56:f7:c4:84:26:6c:eb:8a:
         33:75:fe:1c:9f:7c:ce:5c:d7:20:39:b1:9b:15:84:c6:bb:9e:
         05:f0:7f:ff:2c:01:ae:e5:bd:ea:7d:da:21:23:c1:a2:e4:a4:
         a3:3c:f0:ed:02:a9:86:23:ba:9c:7b:c3:ed:86:6b:13:4b:79:
         de:e8:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----