Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa
File:                     3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (raw, json)
Hash identifier:          j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=
Subject key identifier:   DE:F2:B8:81:90:B8:4C:F0:74:F8:C4:3A:CF:42:04:D6:8A:37:55:2C
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       019426D9EB1D65B884FBF8E10A3DA1D8DFBA
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa
Signing time:             Thu 02 Jan 2025 11:50:03 +0000
ROA not before:           Thu 02 Jan 2025 11:50:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206165
IP address blocks:        185.1.89.0/24 maxlen: 24
                          2001:7f8:b1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:eb:1d:65:b8:84:fb:f8:e1:0a:3d:a1:d8:df:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Jan  2 11:50:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=def2b88190b84cf074f8c43acf4204d68a37552c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:ff:1f:1b:8d:be:79:70:09:d4:34:c8:d5:
                    49:bf:e1:5d:d5:1b:15:84:94:bd:6e:56:5e:0c:eb:
                    a4:e4:79:1d:c0:2e:51:1b:5b:9b:9d:09:a8:03:57:
                    2f:ad:c8:2a:b3:a6:6f:cf:b3:97:0f:a6:ae:14:7a:
                    42:29:d8:fd:f7:3d:1c:12:e2:c5:2b:6d:06:e2:af:
                    4e:26:6f:1a:ed:3a:7a:31:65:4e:ba:ed:13:e3:b3:
                    75:fe:5a:1b:f2:a0:bf:99:e3:88:47:a9:ea:03:ca:
                    39:74:7c:71:cc:d1:35:8e:30:ea:52:66:ab:c2:61:
                    03:49:72:70:39:0f:ed:0d:6a:ec:b5:82:9b:49:c4:
                    ed:40:27:0a:c7:b8:8f:7e:0c:32:44:59:63:77:d7:
                    8a:36:83:ac:8c:21:9a:bc:9b:83:07:74:fd:6c:a2:
                    3b:ec:f3:10:16:b6:8c:ba:ea:9f:f3:cf:99:39:43:
                    b8:9d:04:16:93:9b:16:6a:b6:ad:66:68:f7:2c:3d:
                    7a:8d:59:b6:6c:8d:b8:b1:43:45:1c:8b:05:3d:55:
                    7c:19:58:4b:0a:92:1b:ce:cc:ff:09:ba:8b:0c:d1:
                    8b:7d:a3:63:c1:7f:7b:2b:b1:1a:13:7c:0a:b9:5e:
                    2d:0a:db:83:59:20:da:f0:24:93:7d:72:42:fa:e3:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F2:B8:81:90:B8:4C:F0:74:F8:C4:3A:CF:42:04:D6:8A:37:55:2C
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.89.0/24
                IPv6:
                  2001:7f8:b1::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:18:4b:4a:52:49:62:7e:d7:a6:95:54:d9:a9:53:1d:62:81:
         90:16:fd:e3:30:16:31:81:8e:a9:d9:34:fa:27:d6:80:29:e9:
         2c:06:a7:63:89:25:19:2c:ef:60:52:cf:78:79:a8:cf:0c:77:
         c9:bc:04:16:91:31:38:4b:30:2a:f9:30:54:6a:2e:9b:1e:c2:
         19:c0:07:e5:4a:31:e2:c7:00:f2:d9:40:ff:37:43:b3:24:32:
         43:25:57:83:0c:74:7e:78:c0:0b:15:3e:7d:c0:dc:30:1b:f9:
         f8:d6:02:0e:04:d6:d7:f5:a7:ba:08:7f:d5:ff:9f:21:3a:53:
         ef:28:29:bd:5a:81:ed:d1:a8:a5:c0:97:c8:9f:86:ef:4e:78:
         8e:5c:14:05:61:94:7f:6f:c9:39:3b:ba:39:13:eb:34:d8:33:
         98:88:29:01:09:d3:cd:02:f2:d1:00:e0:d6:96:61:c2:cb:a2:
         10:64:13:35:44:55:4f:e0:09:8e:97:6f:14:a4:9a:ab:38:55:
         14:5f:8f:68:c1:5e:fe:cd:f2:d8:b8:d5:9a:19:51:3a:09:e1:
         99:7e:e8:c4:d3:2f:1c:66:34:b6:23:37:03:99:4f:31:79:bd:
         1c:51:0c:b7:6a:e0:0b:b1:92:4a:d1:6b:50:d7:1e:45:e4:e6:
         86:09:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----