Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/57MdEJb-nBShQLLCWdO0TGMwrmU.roa
File:                     57MdEJb-nBShQLLCWdO0TGMwrmU.roa (raw, json)
Hash identifier:          AI0OebgvFdQLqYYDJFtpVuV594/Dy/OB9klpHE+tsqU=
Subject key identifier:   E7:B3:1D:10:96:FE:9C:14:A1:40:B2:C2:59:D3:B4:4C:63:30:AE:65
Certificate issuer:       /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
Certificate serial:       019560100FD34B360CC585F7AC2EA26A747E
Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/57MdEJb-nBShQLLCWdO0TGMwrmU.roa
Signing time:             Tue 04 Mar 2025 07:30:19 +0000
ROA not before:           Tue 04 Mar 2025 07:30:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     12360
IP address blocks:        194.126.195.0/24 maxlen: 24
                          2001:67c:1950::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:60:10:0f:d3:4b:36:0c:c5:85:f7:ac:2e:a2:6a:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b
        Validity
            Not Before: Mar  4 07:30:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e7b31d1096fe9c14a140b2c259d3b44c6330ae65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:e2:1f:98:cf:bf:12:b8:70:6c:fe:bd:21:
                    bf:39:ca:58:12:59:4e:3a:79:81:bd:ab:6b:d4:55:
                    a9:0c:ee:da:de:7d:6a:9a:0e:a7:82:6e:36:7f:0f:
                    bc:ad:66:98:c8:61:94:69:7d:e3:1d:79:3e:fd:da:
                    90:e3:14:ad:b5:0a:76:2c:3b:0e:7e:b8:e5:14:27:
                    02:87:dc:09:4b:93:55:f0:6c:0a:4f:53:1c:8a:36:
                    9b:44:10:fc:36:90:65:9c:7a:c1:dc:03:df:c1:04:
                    1f:eb:ca:40:8a:a6:4c:76:46:e8:4a:10:8c:d8:7f:
                    12:c1:b0:26:2e:2f:4a:96:c3:b2:d0:db:9e:cb:af:
                    08:f8:e1:af:11:1c:fe:ec:34:a8:80:f4:8a:18:df:
                    31:4f:54:6e:fb:9b:ce:db:e8:7e:0c:54:ae:58:96:
                    00:e9:af:b0:0c:68:41:c5:9f:33:fb:b1:d4:ec:22:
                    9d:5f:d9:08:64:c2:1c:3b:5e:2e:4c:74:31:96:b2:
                    f1:8e:41:63:48:c8:6a:dd:6c:58:42:e0:e7:a3:fa:
                    e4:43:92:9b:8a:11:ed:7b:6d:4c:2d:d7:61:1e:87:
                    d6:00:79:e9:e3:d0:db:2e:20:d1:2a:f7:91:79:91:
                    d8:14:d4:c9:64:b0:ac:c7:5e:d7:ef:91:74:9f:5d:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B3:1D:10:96:FE:9C:14:A1:40:B2:C2:59:D3:B4:4C:63:30:AE:65
            X509v3 Authority Key Identifier:
                keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/57MdEJb-nBShQLLCWdO0TGMwrmU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.126.195.0/24
                IPv6:
                  2001:67c:1950::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:16:93:71:d0:ac:e0:34:43:aa:c6:68:5d:02:1c:5b:97:b5:
         d1:78:a1:61:5a:1f:fc:ca:3a:8c:48:72:9b:36:bf:e4:2c:ca:
         9f:30:14:30:5a:33:db:1e:db:d1:12:1e:69:6f:0b:23:8e:3c:
         82:9e:8a:13:3d:5c:9b:dd:b3:5c:66:d2:86:77:39:90:37:ef:
         c1:0b:da:93:fc:22:63:3a:00:5a:78:12:fe:5a:03:5c:4b:64:
         7a:d8:a8:67:99:e3:10:67:af:6e:62:24:25:93:7d:33:8a:18:
         b0:6a:1e:e9:8a:54:d1:54:7a:be:f0:9e:41:25:4e:4e:57:b6:
         4d:7d:a8:d9:7f:79:b7:08:07:27:cb:78:ed:f8:8b:f3:69:73:
         e5:e8:52:a0:47:7d:0e:1f:b2:f3:0c:19:ed:70:30:dd:c7:6e:
         44:41:5d:b5:40:04:3b:62:4f:94:4f:17:b5:9c:87:04:95:06:
         75:b5:cc:bc:1d:c9:fa:bd:af:f2:ce:72:55:55:62:ef:9a:1a:
         39:8e:1e:87:69:6b:f3:ed:ea:ba:2b:a3:b6:4a:44:3c:cc:95:
         92:df:51:e6:69:74:48:20:36:d4:ad:64:d7:be:81:ef:b3:96:
         d8:e3:95:20:81:4e:5d:34:c6:9c:d0:00:3e:da:e7:ba:ee:ba:
         2b:a9:64:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----