Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa
File:                     XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (raw, json)
Hash identifier:          1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=
Subject key identifier:   5E:97:40:0B:60:AE:10:69:18:93:5C:F5:CE:43:93:8E:58:EE:F9:18
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       0194258F7AF7A9118664DAD3A3C3A5365D62
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa
Signing time:             Thu 02 Jan 2025 05:49:07 +0000
ROA not before:           Thu 02 Jan 2025 05:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     52199
IP address blocks:        45.149.54.0/24 maxlen: 24
                          2a0b:18c0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:7a:f7:a9:11:86:64:da:d3:a3:c3:a5:36:5d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Jan  2 05:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5e97400b60ae106918935cf5ce43938e58eef918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:39:81:55:f9:94:53:74:06:03:c6:7d:29:
                    77:c5:b9:8f:7a:59:a6:9a:66:49:0d:fb:d5:1e:57:
                    76:a2:d8:ed:14:22:58:1a:41:d7:6b:c7:f2:f4:bf:
                    38:27:74:7f:39:c5:8b:86:0e:94:67:c1:cd:54:1a:
                    8c:38:5c:3b:f6:83:ca:a0:46:b0:2f:f4:ac:e4:ae:
                    19:ed:ec:41:07:58:6b:4a:e7:72:28:d2:db:ef:67:
                    63:7e:fb:fd:25:6d:7c:bf:d2:5f:c7:77:05:c3:fe:
                    51:d1:86:f5:94:39:c7:02:8d:72:e4:d3:ec:74:43:
                    3e:eb:18:ff:f0:9a:04:36:b8:c4:04:3f:61:78:2b:
                    04:40:87:60:41:eb:08:5f:f0:6a:04:f9:ae:5c:6d:
                    8e:4e:c4:f0:3c:59:ce:d2:9e:74:a7:4e:4a:fa:33:
                    76:8f:49:e6:63:dd:59:12:68:6d:f0:5b:ca:e1:19:
                    41:b2:a4:02:30:21:a0:ed:3d:de:35:04:55:50:c4:
                    53:db:8f:2f:dc:e2:bc:cf:88:77:21:92:00:73:f6:
                    b2:c3:50:13:51:94:ad:cd:2a:97:9f:ec:06:a4:08:
                    a6:76:20:cb:69:5d:18:2f:c8:ad:3f:69:a9:64:13:
                    04:e5:f0:c4:b5:14:be:68:37:2d:52:31:42:07:76:
                    55:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:97:40:0B:60:AE:10:69:18:93:5C:F5:CE:43:93:8E:58:EE:F9:18
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.54.0/24
                IPv6:
                  2a0b:18c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:42:77:28:95:2e:fb:6e:6d:01:d6:b0:6b:c9:c6:38:79:98:
         55:1e:82:67:0f:df:6f:55:4b:a5:60:a2:ab:cf:3e:e5:81:38:
         1c:4d:d2:1f:6d:f7:e8:28:37:12:3d:bb:04:c3:e1:b4:8c:c7:
         0d:fa:be:27:ec:a0:05:92:f4:e6:97:ca:a2:f4:ca:c7:8f:5d:
         dd:96:1f:2c:63:84:68:56:4e:08:54:9f:e7:c9:e2:5e:f5:1d:
         6f:2e:36:95:5e:aa:5f:b8:1d:fa:e9:df:28:b6:d2:d1:33:0f:
         1b:9a:3d:e1:ff:a2:27:ce:94:96:72:5f:4c:fc:2b:e2:78:5d:
         83:e1:4b:68:bd:22:ce:47:cf:8c:61:fc:d1:f7:28:d5:8f:e2:
         07:6a:4b:7c:35:98:17:9e:aa:14:53:6d:1e:f2:a7:e9:e6:ea:
         8d:8f:08:2a:d6:27:cb:f8:25:61:00:7e:97:df:5f:d9:40:a2:
         41:fc:2d:07:58:89:9f:4b:31:37:93:14:2f:7b:04:39:f3:b2:
         35:5a:54:90:2d:31:a9:5b:2c:4d:3d:b1:00:99:13:15:c7:b8:
         9f:22:84:50:be:9f:ad:ac:b3:89:8b:66:c5:33:29:44:3f:6b:
         65:a1:c1:45:f1:21:e8:61:1d:ff:48:67:80:63:be:65:e7:94:
         49:c4:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----