Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/yps9kpVvshDRVpM0Gb84Jfkc5nc.roa
File:                     yps9kpVvshDRVpM0Gb84Jfkc5nc.roa (raw, json)
Hash identifier:          ix8p9SvjMbk4LlELaSPIpyWEnACKDHjueDiKkabUiJo=
Subject key identifier:   CA:9B:3D:92:95:6F:B2:10:D1:56:93:34:19:BF:38:25:F9:1C:E6:77
Certificate issuer:       /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial:       0194236A3164485705D0BD9E056F0C82236F
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/yps9kpVvshDRVpM0Gb84Jfkc5nc.roa
Signing time:             Wed 01 Jan 2025 19:49:09 +0000
ROA not before:           Wed 01 Jan 2025 19:49:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206055
IP address blocks:        213.215.92.0/24 maxlen: 24
                          2a00:1298:8016::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:31:64:48:57:05:d0:bd:9e:05:6f:0c:82:23:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
        Validity
            Not Before: Jan  1 19:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ca9b3d92956fb210d156933419bf3825f91ce677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4a:1e:25:d0:a0:63:ed:a3:1a:cc:16:80:b4:
                    20:90:9e:24:f4:8e:45:4e:2c:8d:a2:b0:c2:62:b3:
                    1c:28:81:b2:0a:8f:40:50:69:54:09:ad:ee:af:6a:
                    a2:7d:c8:d1:18:94:88:59:7a:d5:95:c3:61:66:3a:
                    23:4c:83:98:eb:36:27:0d:db:7e:c3:39:d2:19:9c:
                    2e:f2:2f:a8:45:da:b0:cd:e0:d3:21:d4:ee:78:14:
                    f0:aa:ce:65:bc:76:6e:51:89:b3:6f:7f:a2:4f:79:
                    a8:98:74:76:09:33:8a:eb:54:a9:53:af:84:87:cc:
                    b1:75:6f:79:cd:4b:f1:77:73:38:fc:da:7c:94:18:
                    5a:02:0c:a3:c6:97:2f:3c:eb:33:38:d5:10:9c:ca:
                    35:77:43:26:7b:32:b0:49:70:7e:f5:30:0d:ae:1b:
                    4e:5d:a0:99:ba:95:ea:8a:d6:b8:12:22:66:f1:81:
                    e1:90:94:bd:01:5f:ac:d6:7f:89:05:c6:98:a1:7e:
                    b5:20:24:65:a9:4e:97:15:ee:a7:f8:b0:f5:28:3a:
                    e1:18:29:ae:bb:bd:3c:a0:8a:53:5f:c8:fc:41:96:
                    ee:fe:48:62:45:e8:fa:cf:04:2f:4a:9b:9f:c1:f5:
                    0e:65:ce:01:21:89:15:54:cf:53:78:ef:d7:c9:11:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:3D:92:95:6F:B2:10:D1:56:93:34:19:BF:38:25:F9:1C:E6:77
            X509v3 Authority Key Identifier:
                keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/yps9kpVvshDRVpM0Gb84Jfkc5nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.215.92.0/24
                IPv6:
                  2a00:1298:8016::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:97:df:08:a6:94:cc:9f:7e:55:0b:05:f3:cf:ac:cc:01:42:
         12:77:c7:8d:34:90:7c:73:80:0c:59:bc:8d:c3:06:69:e0:4a:
         4a:df:aa:26:ab:2d:59:9e:04:b7:63:65:23:a6:f3:e5:91:d2:
         e6:f6:29:e6:32:a9:d7:91:d5:79:79:ff:88:a9:63:c8:4a:98:
         3a:4f:cb:34:fe:ea:95:69:a9:6c:ca:bf:c8:40:65:fa:b2:34:
         00:2d:7e:a8:4c:59:de:0c:1c:a8:ed:9a:1f:91:c4:af:07:6a:
         56:2a:5c:25:be:1d:86:ba:ea:f3:78:fc:d6:cd:cf:1e:12:0e:
         fd:a3:a5:61:4f:25:ea:8b:96:25:92:af:fa:d3:30:6d:eb:f7:
         1a:e6:33:0f:8a:d0:fc:ed:63:2c:f7:c1:a9:5c:42:40:25:b8:
         b0:06:d4:79:be:03:11:44:2c:9e:32:53:9e:ec:84:69:3f:80:
         01:70:b9:1c:9c:7c:08:88:d0:a0:f5:06:a4:57:d7:04:0e:ff:
         e2:ad:7a:44:39:ae:d5:5f:eb:31:a7:79:bb:c2:ef:af:14:f6:
         29:a7:cb:8b:a6:08:b9:57:a4:3f:6e:b0:07:0e:97:5e:08:f2:
         4f:e6:b2:dc:fd:ca:64:29:b7:29:b0:93:b5:cc:fa:ec:b5:3c:
         7b:08:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----