Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/u8V02AIoZzOPfjpi5j7wtSWVgSg.roa
File:                     u8V02AIoZzOPfjpi5j7wtSWVgSg.roa (raw, json)
Hash identifier:          9pvkolnrpZjRfbBA2Q8IhG+FM5X8l0p9e5PvDFmhqmQ=
Subject key identifier:   BB:C5:74:D8:02:28:67:33:8F:7E:3A:62:E6:3E:F0:B5:25:95:81:28
Certificate issuer:       /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial:       0195181F84E1A8007E857EFBD66BB77D1246
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/u8V02AIoZzOPfjpi5j7wtSWVgSg.roa
Signing time:             Tue 18 Feb 2025 08:14:33 +0000
ROA not before:           Tue 18 Feb 2025 08:14:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47165
IP address blocks:        46.233.192.0/18 maxlen: 18
                          94.137.0.0/20 maxlen: 20
                          94.137.16.0/20 maxlen: 20
                          94.137.32.0/20 maxlen: 20
                          94.137.48.0/20 maxlen: 20
                          109.120.0.0/20 maxlen: 20
                          109.120.16.0/20 maxlen: 20
                          109.120.32.0/20 maxlen: 20
                          109.120.48.0/20 maxlen: 20
                          176.62.64.0/18 maxlen: 18
                          178.74.64.0/18 maxlen: 18
                          185.13.176.0/22 maxlen: 22
                          217.25.208.0/20 maxlen: 20
                          2a02:ddc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:18:1f:84:e1:a8:00:7e:85:7e:fb:d6:6b:b7:7d:12:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
        Validity
            Not Before: Feb 18 08:14:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bbc574d8022867338f7e3a62e63ef0b525958128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:18:01:c2:ca:73:e3:aa:70:a5:06:a4:66:1b:
                    5e:55:3f:63:89:29:4f:ba:d5:f1:cb:6a:52:56:b3:
                    e5:dd:21:0d:ee:d9:0d:52:01:9d:a9:82:26:b5:b0:
                    54:41:b1:cb:cf:15:76:c7:ee:84:9d:a8:1c:07:cd:
                    5b:14:68:c1:6a:63:b4:bd:11:d1:d6:b6:45:a3:47:
                    36:36:5c:e7:d4:5f:ea:e4:0c:98:98:2a:d6:bd:fa:
                    93:0c:0c:3e:82:18:c7:76:ca:1a:63:e5:f0:82:93:
                    7e:bf:3f:50:71:0d:86:09:a1:cd:10:81:c9:0e:fc:
                    93:31:4e:21:9c:f3:7a:d9:1b:70:a5:84:bc:ff:44:
                    7a:dd:88:b3:bd:8b:6f:47:bc:76:01:1c:3c:a7:16:
                    34:e6:b2:8f:10:0c:9d:aa:ee:76:15:5b:7e:38:d7:
                    cd:b9:15:f3:11:f1:9e:d0:60:2c:62:82:94:96:4e:
                    5c:14:27:d0:bf:76:7e:5f:01:8f:a0:d3:09:b4:ed:
                    88:02:85:d3:d4:1e:c0:f5:98:1f:5f:ce:f3:b7:9b:
                    f8:68:dc:32:52:6f:bb:c5:67:46:0b:4e:4a:bb:6a:
                    75:85:8e:ef:fe:46:c5:28:95:42:79:55:5b:96:40:
                    d7:aa:54:fb:57:f5:dc:dc:de:a2:a7:aa:24:b2:a3:
                    91:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:74:D8:02:28:67:33:8F:7E:3A:62:E6:3E:F0:B5:25:95:81:28
            X509v3 Authority Key Identifier:
                keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/u8V02AIoZzOPfjpi5j7wtSWVgSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.233.192.0/18
                  94.137.0.0/18
                  109.120.0.0/18
                  176.62.64.0/18
                  178.74.64.0/18
                  185.13.176.0/22
                  217.25.208.0/20
                IPv6:
                  2a02:ddc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:31:f0:83:1b:5e:4f:42:df:5e:76:ef:dc:7b:13:2e:0a:f5:
         9d:fe:4a:ad:f3:2a:66:75:6f:59:4a:09:62:d0:0b:fd:cb:46:
         81:7d:5b:85:39:4f:33:20:26:f1:be:ea:fa:14:6e:b5:29:3a:
         e5:5d:27:42:a6:a2:26:aa:59:9e:94:26:95:d0:7e:c2:98:85:
         74:43:59:d9:2c:72:db:8e:c0:1e:15:ff:36:48:9b:b9:c5:c3:
         38:d4:30:85:1e:66:47:08:41:c2:23:2b:46:1f:3e:e1:6b:fa:
         13:c2:04:75:23:60:6e:20:a1:ac:8f:fd:56:0b:df:47:84:f4:
         c6:be:8c:79:ef:27:e6:a8:50:e9:d0:7a:8d:69:b3:c2:15:d3:
         03:49:f1:62:8a:ba:f1:1c:ef:b7:37:2d:8b:19:14:8f:6d:89:
         a9:a3:14:6e:d2:21:d1:d5:82:25:65:c0:9c:dc:bb:18:c6:3c:
         ab:c7:1b:c1:c7:04:eb:86:40:b7:1b:9a:1e:43:2f:8a:44:95:
         84:24:c0:ec:cb:c6:69:39:3f:73:8b:4b:38:20:50:08:83:bc:
         5c:b1:51:31:a7:71:5f:18:5a:2a:77:f8:95:1c:41:be:fb:a3:
         3a:47:f1:ae:8f:73:6b:2a:b2:0c:9d:9d:e8:09:b6:46:36:ce:
         31:39:6c:52
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZUYH4ThqAB+hX771mu3fRJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YjEzMDYxMDFjYzllYzlmY2U5ODUyODBjMWRiMGYzN2Mx
MzVhM2EwHhcNMjUwMjE4MDgxNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmM1NzRkODAyMjg2NzMzOGY3ZTNhNjJlNjNlZjBiNTI1OTU4MTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBgBwspz46pwpQakZhteVT9jiSlP
utXxy2pSVrPl3SEN7tkNUgGdqYImtbBUQbHLzxV2x+6EnagcB81bFGjBamO0vRHR
1rZFo0c2Nlzn1F/q5AyYmCrWvfqTDAw+ghjHdsoaY+XwgpN+vz9QcQ2GCaHNEIHJ
DvyTMU4hnPN62RtwpYS8/0R63YizvYtvR7x2ARw8pxY05rKPEAydqu52FVt+ONfN
uRXzEfGe0GAsYoKUlk5cFCfQv3Z+XwGPoNMJtO2IAoXT1B7A9ZgfX87zt5v4aNwy
Um+7xWdGC05Ku2p1hY7v/kbFKJVCeVVblkDXqlT7V/Xc3N6ip6oksqORAwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFLvFdNgCKGczj346YuY+8LUllYEoMB8GA1UdIwQY
MBaAFOSxMGEBzJ7J/OmFKAwdsPN8E1o6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUt
ZmE2MzQ4ZjY5NWI1LzEvdThWMDJBSW9aek9QZmpwaTVqN3d0U1dWZ1NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS80ZDA4OWUtNWQxYy00ZTM0LTk0NjUtZmE2MzQ4ZjY5NWI1
LzEvNUxFd1lRSE1uc244NllVb0RCMnc4M3dUV2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQGLunAAwQG
XokAAwQGbXgAAwQGsD5AAwQGskpAAwQCuQ2wAwQE2RnQMA0EAgACMAcDBQMqAt3A
MA0GCSqGSIb3DQEBCwUAA4IBAQCUMfCDG15PQt9edu/cexMuCvWd/kqt8ypmdW9Z
Sgli0Av9y0aBfVuFOU8zICbxvur6FG61KTrlXSdCpqImqlmelCaV0H7CmIV0Q1nZ
LHLbjsAeFf82SJu5xcM41DCFHmZHCEHCIytGHz7ha/oTwgR1I2BuIKGsj/1WC99H
hPTGvox57yfmqFDp0HqNabPCFdMDSfFiirrxHO+3Ny2LGRSPbYmpoxRu0iHR1YIl
ZcCc3LsYxjyrxxvBxwTrhkC3G5oeQy+KRJWEJMDsy8ZpOT9zi0s4IFAIg7xcsVEx
p3FfGFoqd/iVHEG++6M6R/Guj3NrKrIMnZ3oCbZGNs4xOWxS
-----END CERTIFICATE-----