Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/9V1tND3zl52dvTGUP5zkoYgjSzk.roa
File:                     9V1tND3zl52dvTGUP5zkoYgjSzk.roa (raw, json)
Hash identifier:          ZFwBT8PQBALn0UQygkKFbmysfnKpnWDyHSFsXkqI3os=
Subject key identifier:   F5:5D:6D:34:3D:F3:97:9D:9D:BD:31:94:3F:9C:E4:A1:88:23:4B:39
Certificate issuer:       /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial:       01941F8C892A939825672CDD299B44B7E615
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/9V1tND3zl52dvTGUP5zkoYgjSzk.roa
Signing time:             Wed 01 Jan 2025 01:48:11 +0000
ROA not before:           Wed 01 Jan 2025 01:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        185.92.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8c:89:2a:93:98:25:67:2c:dd:29:9b:44:b7:e6:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
        Validity
            Not Before: Jan  1 01:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f55d6d343df3979d9dbd31943f9ce4a188234b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:15:10:62:28:58:1b:92:0b:3d:e1:87:cb:
                    08:cb:13:13:3b:07:f2:83:f1:d4:4f:d7:e9:84:13:
                    c4:56:09:b9:45:b3:3a:eb:b9:cb:f8:c2:36:e3:f8:
                    11:d6:4d:6c:6c:d4:69:04:62:b0:9e:7d:cd:c8:cc:
                    dd:39:68:6d:65:a4:fb:9b:7e:d8:de:f0:5f:4d:a7:
                    67:ca:bf:a5:87:95:11:4c:5c:0e:48:be:6c:8f:22:
                    3f:e8:ce:1b:da:51:df:d0:99:e3:56:b3:f1:f0:df:
                    ea:fc:4f:ee:a2:cc:a6:2a:e2:03:39:12:82:6c:d1:
                    d8:af:ab:30:23:25:20:4a:fc:c9:9b:3e:42:e8:74:
                    b3:f3:2a:f4:f0:81:19:c1:9a:bd:dd:06:9a:d6:f9:
                    15:3a:12:bb:ae:33:a3:bc:b5:aa:12:ec:fc:f5:bc:
                    d6:27:5c:42:5d:cb:78:7e:ba:e2:b6:10:d9:97:ec:
                    70:02:b0:7a:3f:de:7a:f2:41:5d:50:af:bb:2f:cc:
                    3a:6d:a9:e1:34:a8:4a:88:3a:5b:a6:71:5a:c5:ab:
                    f0:cd:90:df:05:10:fb:0b:2a:b3:cc:f3:d6:59:2d:
                    7e:99:bd:ed:0f:46:d0:21:bb:7b:55:78:20:fe:4d:
                    01:38:82:e3:6e:45:7f:d8:ac:93:29:d2:f9:a0:73:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:6D:34:3D:F3:97:9D:9D:BD:31:94:3F:9C:E4:A1:88:23:4B:39
            X509v3 Authority Key Identifier:
                keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/9V1tND3zl52dvTGUP5zkoYgjSzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:53:cf:68:32:fc:4c:b8:ac:65:23:1a:76:4b:dc:2c:62:c7:
         f9:89:c6:ff:8d:84:34:f1:cf:28:13:97:0a:0c:98:fe:06:bd:
         16:ed:19:bb:0d:73:d3:01:65:26:fd:ef:55:75:82:5c:8d:c9:
         41:d8:0c:27:df:b6:1e:cd:cb:67:e4:0f:4c:69:4d:49:78:1c:
         9a:46:0d:91:2a:01:91:f3:a7:9f:a4:dc:79:04:51:a0:1e:4c:
         ee:03:f6:b5:82:65:5b:a6:df:13:a3:40:1f:4f:e9:02:df:c3:
         ec:4f:36:a2:d0:5e:8a:2c:97:9c:c6:4a:0b:54:0b:1b:d9:f8:
         09:ed:f6:3f:65:8b:32:0e:32:34:6b:0a:f0:87:d6:2e:b9:5d:
         a1:63:8f:23:51:bb:0b:08:70:06:af:33:14:a9:80:73:32:ed:
         1d:c9:bb:03:ab:aa:3d:f7:43:4e:2e:13:d1:ab:c3:91:1b:f3:
         38:0f:7f:af:c5:67:74:83:5e:09:1f:0a:18:96:bd:52:64:d9:
         81:72:9d:54:54:b0:61:e3:a5:30:c3:23:17:28:ee:6f:e2:cd:
         4b:ef:53:cd:33:35:08:7e:63:e5:ad:b5:78:a7:5d:9c:ec:55:
         3c:eb:0d:5a:81:fa:1e:ad:bd:68:e6:4d:c4:74:9d:2c:5f:5f:
         b0:ab:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----