Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa
File:                     C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa (raw, json)
Hash identifier:          DBtQlC6QblgPpVW+sAN+YH267kvW3kiRyXFujtkor/8=
Subject key identifier:   0B:FC:C6:28:A7:BD:12:68:C5:59:52:81:6F:DB:AD:81:9E:CB:BC:1A
Certificate issuer:       /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial:       019425FDB9C8D2B353BDA225489DF73CB662
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa
Signing time:             Thu 02 Jan 2025 07:49:32 +0000
ROA not before:           Thu 02 Jan 2025 07:49:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137
IP address blocks:        160.80.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:b9:c8:d2:b3:53:bd:a2:25:48:9d:f7:3c:b6:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
        Validity
            Not Before: Jan  2 07:49:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0bfcc628a7bd1268c55952816fdbad819ecbbc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:65:7a:09:25:08:be:c5:70:cd:e4:20:18:
                    28:cd:6d:07:e2:4c:27:2a:2b:06:c9:7f:c6:9e:ac:
                    fc:86:50:1d:86:17:5a:f3:45:c7:f4:22:0a:85:46:
                    5b:a3:3a:d3:fc:f0:17:a6:fb:54:f4:87:bd:e4:8a:
                    3d:9b:e1:13:4e:d2:7f:24:a4:28:e4:c8:59:f1:3e:
                    be:6b:de:ec:98:28:83:1f:74:b9:4a:a9:e3:08:67:
                    61:da:b9:4e:51:0c:9c:3d:b8:31:56:79:4b:4b:79:
                    63:5e:02:f3:12:eb:02:f1:1d:46:8d:d4:53:7b:55:
                    88:9c:6a:f7:1c:06:94:c2:99:ef:4b:52:69:76:90:
                    05:e5:77:32:5e:87:d4:1f:1c:a2:b5:ce:da:82:5d:
                    a2:49:b1:da:2c:e0:c1:10:b2:0a:a1:a6:eb:66:23:
                    cb:ae:e4:26:00:fe:98:d8:ef:7a:f1:70:de:f0:b5:
                    f7:46:dc:55:b4:52:2f:de:fd:c1:8e:45:65:29:f1:
                    6c:6a:7c:bc:6d:55:90:6b:93:a6:c9:c3:93:f0:6a:
                    89:e7:99:ca:2f:34:21:3d:ee:9d:44:f1:69:19:13:
                    9d:71:3a:2f:c9:bd:b6:e8:54:e1:60:46:64:0b:13:
                    66:25:36:c4:c1:25:af:9d:58:0a:12:d0:54:2d:df:
                    a9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FC:C6:28:A7:BD:12:68:C5:59:52:81:6F:DB:AD:81:9E:CB:BC:1A
            X509v3 Authority Key Identifier:
                keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/C_zGKKe9EmjFWVKBb9utgZ7LvBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:8c:5c:4a:45:b9:b0:7f:29:49:8d:79:9f:e2:74:80:3c:95:
         8c:08:40:23:a8:f4:30:14:54:1c:b5:34:f6:bd:86:b2:ec:58:
         2c:ac:b4:45:ae:df:04:9e:3a:ca:e8:3a:8f:76:af:15:ff:cf:
         10:dd:3d:92:66:1c:4e:ea:91:d6:97:c1:32:73:4d:58:21:31:
         ea:19:d5:e6:94:f2:cd:1a:4d:6d:58:f1:1e:fe:25:97:b9:00:
         f4:00:07:ae:92:c6:e4:d3:e5:eb:1d:bc:a3:cb:d9:b3:1a:0b:
         1e:f3:86:e4:92:6a:44:bd:86:d1:c2:59:e9:09:c8:31:ea:da:
         21:4f:10:9a:5d:1d:e7:17:d5:ce:7b:d3:0e:25:95:f4:ba:47:
         8f:56:e5:04:c8:5f:52:39:fc:aa:22:31:3e:97:06:49:28:77:
         9c:75:99:dd:9d:f1:4c:e0:fd:bc:eb:51:89:d0:de:80:8a:65:
         17:74:80:4b:9c:82:1b:46:6d:32:ee:5f:c8:f8:b3:67:d7:f7:
         5e:62:91:87:65:9a:ec:46:e6:3f:d7:06:7a:dc:a4:78:d7:8e:
         3a:30:c6:f1:b1:40:06:20:10:ec:a8:40:37:d0:a5:6f:ed:6d:
         1d:43:b4:c4:0b:a8:a8:8c:2c:1b:1a:2a:34:42:55:49:14:01:
         6f:d2:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----