Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa
File:                     1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (raw, json)
Hash identifier:          DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=
Subject key identifier:   FB:2D:4D:7B:95:07:EB:DC:40:72:59:D0:5C:DF:14:34:56:7A:7D:B0
Certificate issuer:       /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial:       019424B26CA06F1E65A8224C8F4BA87D7229
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa
Signing time:             Thu 02 Jan 2025 01:47:40 +0000
ROA not before:           Thu 02 Jan 2025 01:47:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57112
IP address blocks:        185.242.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b2:6c:a0:6f:1e:65:a8:22:4c:8f:4b:a8:7d:72:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
        Validity
            Not Before: Jan  2 01:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fb2d4d7b9507ebdc407259d05cdf1434567a7db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:0c:f6:18:79:d7:5f:0e:87:21:06:07:f8:
                    8e:8e:2c:b0:9c:9c:ea:6b:39:07:6a:16:cb:f1:c6:
                    80:38:f1:51:39:fb:db:63:0b:35:8f:56:5f:56:73:
                    6d:03:18:b5:0c:72:34:ee:1c:1d:1a:7b:88:c8:66:
                    f9:17:fb:12:a7:a7:df:68:f4:eb:28:48:f1:95:f8:
                    f5:1b:a0:c4:11:be:0b:35:70:0e:5c:f8:63:e6:a9:
                    7e:e3:9e:e9:00:0c:b5:5d:18:3b:62:3b:64:27:98:
                    8c:e1:86:f9:c6:d9:f6:e0:1e:97:72:ec:6a:cf:fa:
                    b4:2a:36:f5:61:60:4c:05:28:68:d8:50:94:94:96:
                    d3:c9:43:56:2e:5e:74:16:8d:ff:76:10:ad:6a:3a:
                    e1:52:3b:b4:64:18:b7:84:6e:81:a2:da:46:33:72:
                    ed:9b:76:48:33:e1:a2:07:a3:c4:df:1f:a8:3e:f9:
                    ae:dd:58:0f:52:9b:1d:7c:11:da:c1:af:f5:b0:d6:
                    19:4f:87:16:5b:ee:6c:9e:92:19:9a:3e:7c:14:51:
                    fa:1f:ba:5c:2e:2e:67:04:62:cf:19:75:71:1c:0d:
                    3f:ba:a8:6d:3f:e1:a8:60:7e:7d:5b:f2:40:41:34:
                    99:7f:b0:be:fa:48:fc:e2:0f:15:72:4a:b4:64:6d:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2D:4D:7B:95:07:EB:DC:40:72:59:D0:5C:DF:14:34:56:7A:7D:B0
            X509v3 Authority Key Identifier:
                keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:f9:28:b4:18:9b:20:c8:37:37:a9:ff:96:7b:5a:a2:13:
         1a:e0:9c:6d:e9:7c:de:3e:30:43:1d:ac:4d:47:c0:21:ca:54:
         41:d0:f9:d6:72:55:a2:2d:17:61:f0:74:eb:67:eb:69:c5:48:
         c3:6f:0b:7f:07:43:7a:11:16:59:ab:47:81:58:3c:fa:8e:0b:
         a9:4a:dd:1a:99:16:21:64:e7:0d:90:34:85:cf:17:7c:16:a9:
         2e:68:f2:ee:8d:9d:f4:2f:92:37:e5:46:3f:57:74:4c:6c:ed:
         cb:a3:2c:4e:ce:5e:fd:ba:6f:47:6e:81:34:2b:79:84:87:60:
         6c:ee:0a:fc:d6:75:e6:82:a8:57:9d:70:59:f4:dc:7e:6d:e6:
         58:a3:b7:96:57:7d:e1:06:4e:cb:5e:65:55:ef:c3:fe:ab:3b:
         8a:3c:c0:06:e9:d6:28:d4:f5:7a:bf:24:0f:70:40:ef:48:ac:
         d1:d5:2b:d3:2d:47:58:1e:52:49:74:a2:fa:76:b3:7d:b6:66:
         a2:87:3b:ea:35:3c:db:8d:03:84:7b:f5:73:87:a0:57:14:b7:
         ad:f4:91:ef:4e:d0:32:07:70:8f:bb:b3:21:75:a1:65:16:42:
         b3:7e:b1:d6:c3:16:01:16:44:ef:27:c9:fc:a5:a6:f3:51:34:
         74:39:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----