Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/Sj0PB6C71UQWy93CM-Vpj4pjoBg.roa
File:                     Sj0PB6C71UQWy93CM-Vpj4pjoBg.roa (raw, json)
Hash identifier:          StQmSXi8WTjztpX70qdwwtDI4sB0dsxFMynA07YhLgY=
Subject key identifier:   4A:3D:0F:07:A0:BB:D5:44:16:CB:DD:C2:33:E5:69:8F:8A:63:A0:18
Certificate issuer:       /CN=af8df7c4f79133730fe3e6894777a79604a5cb79
Certificate serial:       0194266B467332CC17C28E49B07CF44F0C85
Authority key identifier: AF:8D:F7:C4:F7:91:33:73:0F:E3:E6:89:47:77:A7:96:04:A5:CB:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r433xPeRM3MP4-aJR3enlgSly3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/Sj0PB6C71UQWy93CM-Vpj4pjoBg.roa
Signing time:             Thu 02 Jan 2025 09:49:12 +0000
ROA not before:           Thu 02 Jan 2025 09:49:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62002
IP address blocks:        185.49.196.0/22 maxlen: 22
                          2a01:a520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:46:73:32:cc:17:c2:8e:49:b0:7c:f4:4f:0c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8df7c4f79133730fe3e6894777a79604a5cb79
        Validity
            Not Before: Jan  2 09:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4a3d0f07a0bbd54416cbddc233e5698f8a63a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:fa:a3:f6:f7:6c:c4:f0:14:55:b7:52:2f:
                    05:ab:aa:4e:a7:c1:98:95:b2:c1:07:10:0c:1c:65:
                    70:d0:d4:b3:ac:15:b9:17:29:00:cb:9b:78:b7:aa:
                    f2:42:bd:de:60:3b:78:d2:32:fc:52:35:73:f9:6b:
                    9e:2c:a0:b9:0e:11:80:c2:e2:89:50:1f:47:6a:36:
                    da:b7:ba:bc:c7:b3:89:8b:53:b6:30:25:d0:26:02:
                    e0:43:e4:f6:c0:c5:70:e8:ec:a7:23:15:25:03:4c:
                    b2:b0:01:d4:78:ad:80:ef:ca:3a:d1:f6:cf:5e:c3:
                    b6:17:be:3e:cd:d1:2c:05:38:ab:10:7c:97:33:4c:
                    bc:d3:00:20:61:bc:03:22:42:ef:75:98:8d:33:c5:
                    39:bf:e9:d1:1d:74:84:63:e8:f4:6e:45:08:ba:28:
                    3b:26:9a:19:a2:53:3f:6d:a5:17:58:d3:d6:8e:99:
                    f0:af:ca:05:4a:40:d7:be:b3:d0:3d:0c:85:4a:a8:
                    8b:73:46:65:64:62:25:76:01:f3:9f:4b:e6:f2:d0:
                    6a:31:ac:cd:bf:4b:0d:d3:79:0c:62:36:b9:66:84:
                    b8:bb:05:2c:11:46:f4:71:e6:f1:b7:0e:0b:3a:72:
                    02:f0:65:07:b9:00:bb:90:cf:d8:a3:ab:dd:2d:fc:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3D:0F:07:A0:BB:D5:44:16:CB:DD:C2:33:E5:69:8F:8A:63:A0:18
            X509v3 Authority Key Identifier:
                keyid:AF:8D:F7:C4:F7:91:33:73:0F:E3:E6:89:47:77:A7:96:04:A5:CB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r433xPeRM3MP4-aJR3enlgSly3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/Sj0PB6C71UQWy93CM-Vpj4pjoBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/50ff00-777a-411d-938b-f4d60ecdf2b2/1/r433xPeRM3MP4-aJR3enlgSly3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.49.196.0/22
                IPv6:
                  2a01:a520::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:11:9e:23:f0:1c:9f:41:d6:e2:d3:57:eb:0b:8d:ca:ba:
         65:f1:52:b2:47:1f:9a:50:ea:97:43:aa:01:c1:8e:3e:ba:21:
         8b:32:b5:38:fc:a9:33:1b:e6:4d:11:b9:ee:fc:e2:be:dd:7e:
         57:f5:17:c4:cb:6f:4a:18:d9:a3:8d:12:9a:c4:87:e5:71:ce:
         9c:40:a1:47:9c:f6:cb:a4:41:14:da:3b:d0:fc:23:9b:10:12:
         78:a9:26:f6:97:c6:80:3d:d2:e2:4b:0a:f9:2f:1e:1b:1f:ea:
         90:17:22:12:e5:43:2d:7b:96:69:b4:1f:fd:ec:36:df:92:0e:
         b7:d0:4a:27:f3:5c:4c:cd:67:ee:8d:8a:f5:86:99:6a:79:4c:
         1a:73:73:f9:01:2c:43:94:7d:96:ea:b1:3f:08:9e:61:76:28:
         c4:19:1f:5e:5e:7e:cb:ac:fa:61:c2:56:0e:87:b7:e3:62:11:
         0f:42:dd:8d:17:69:91:a0:6a:cd:4e:1b:49:0b:3d:32:c4:dc:
         a7:b4:91:be:79:90:37:70:f8:cc:c3:d8:0e:e2:26:e9:49:ba:
         22:b8:3a:bb:e4:d5:49:d7:6d:b7:7f:aa:16:65:9a:05:fa:28:
         62:f9:7f:b3:36:7f:61:6d:a2:ae:37:bf:33:ca:56:b7:2a:9e:
         73:2d:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----