Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/lAuSQuDFdUBMNl3lAy120twR4Nc.roa
File:                     lAuSQuDFdUBMNl3lAy120twR4Nc.roa (raw, json)
Hash identifier:          JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=
Subject key identifier:   94:0B:92:42:E0:C5:75:40:4C:36:5D:E5:03:2D:76:D2:DC:11:E0:D7
Certificate issuer:       /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial:       019426D9B340979919CEE4013AA4F2A64EF4
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/lAuSQuDFdUBMNl3lAy120twR4Nc.roa
Signing time:             Thu 02 Jan 2025 11:49:48 +0000
ROA not before:           Thu 02 Jan 2025 11:49:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44399
IP address blocks:        185.252.72.0/22 maxlen: 22
                          2a0c:2340::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:b3:40:97:99:19:ce:e4:01:3a:a4:f2:a6:4e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
        Validity
            Not Before: Jan  2 11:49:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=940b9242e0c575404c365de5032d76d2dc11e0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:96:1e:14:54:2c:51:7f:d8:cc:1c:a8:91:
                    e5:7d:10:61:ac:1f:64:7e:ab:55:e4:97:14:e2:95:
                    db:0f:74:63:b0:e6:dd:b9:ad:3c:3e:cb:11:00:5a:
                    14:3b:4d:af:04:fb:61:19:a3:cd:99:ff:47:9f:c9:
                    8c:71:73:06:f4:62:5f:3c:e6:2c:f8:75:11:77:c1:
                    91:fb:70:22:f2:e8:f7:03:5a:fd:f4:fd:08:cb:31:
                    dc:d2:45:68:ea:4a:e3:8d:41:1e:6d:b2:4a:5a:6d:
                    93:79:80:01:37:70:d5:ec:e3:10:ad:57:8d:c6:24:
                    ef:1f:e1:62:f6:0a:ce:52:1e:cf:52:cd:95:c2:39:
                    f1:c4:e8:7f:d1:06:27:3e:30:9f:28:7a:cd:80:7c:
                    66:4a:39:8b:d8:84:6e:d7:f6:51:4a:ca:a9:91:c4:
                    d4:cd:5f:c1:23:51:70:eb:36:aa:1e:d7:7e:1d:de:
                    45:9d:65:7f:91:94:48:df:2d:ff:1b:5d:3e:22:32:
                    20:1b:3c:67:c6:e8:84:49:a3:2c:26:55:1f:f4:92:
                    e0:4f:09:bc:02:8e:66:c9:89:ff:67:74:27:c5:e0:
                    c1:f4:da:5f:a4:9d:6b:a1:56:cd:ff:53:f1:e9:69:
                    34:1e:1e:b3:78:32:e2:80:64:8b:65:5c:c3:10:fd:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0B:92:42:E0:C5:75:40:4C:36:5D:E5:03:2D:76:D2:DC:11:E0:D7
            X509v3 Authority Key Identifier:
                keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/lAuSQuDFdUBMNl3lAy120twR4Nc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.72.0/22
                IPv6:
                  2a0c:2340::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:f9:3f:10:08:89:38:5f:00:73:4e:4d:93:42:aa:48:e3:
         d7:0d:ef:60:c4:6e:f4:7b:41:ae:6d:61:fc:2a:59:bd:2a:4a:
         54:99:bb:d6:19:70:2c:7f:ee:26:4b:f3:38:2d:d1:8f:19:77:
         2f:93:c1:2a:f5:bd:ab:b0:45:17:50:a7:19:6a:17:a9:51:06:
         94:7d:fa:34:21:d2:ae:c1:10:d5:b8:4b:5d:cc:d5:4a:ef:a0:
         0d:4e:c8:70:60:39:5e:09:3d:48:24:9c:d7:90:f2:ed:6b:b1:
         6a:d1:7c:1e:d1:80:ad:fb:9d:2c:2c:30:88:66:e9:f8:5a:4c:
         a8:28:80:9c:4b:f9:21:dd:e1:92:f9:95:b7:ad:21:df:a6:ed:
         68:db:9d:88:55:21:04:2c:ab:38:96:73:3b:68:b0:0e:65:c5:
         ca:5a:ff:bf:16:bb:83:ad:bd:03:08:20:99:2d:9d:35:0f:fd:
         a0:70:a7:e6:35:6b:4b:94:11:3e:77:65:3d:5e:eb:27:f5:7b:
         7a:22:31:53:85:86:83:b3:5d:9e:6b:3e:4b:d0:de:e5:eb:10:
         cc:0d:9e:ca:f6:b8:d0:3e:c1:14:4a:da:79:b8:61:ce:e5:70:
         91:03:37:cf:42:58:f3:78:82:e9:f6:5d:de:ca:f3:51:5c:d9:
         91:8d:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----