Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa
File:                     TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (raw, json)
Hash identifier:          Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=
Subject key identifier:   4C:06:74:81:CF:B9:73:9B:77:87:CB:74:8B:06:BE:78:73:37:A3:77
Certificate issuer:       /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial:       0194244575170F652FFB8C676A6107B2859B
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa
Signing time:             Wed 01 Jan 2025 23:48:39 +0000
ROA not before:           Wed 01 Jan 2025 23:48:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     33970
IP address blocks:        185.45.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:75:17:0f:65:2f:fb:8c:67:6a:61:07:b2:85:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
        Validity
            Not Before: Jan  1 23:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4c067481cfb9739b7787cb748b06be787337a377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:ee:40:12:3a:bf:2f:d4:ec:dc:ea:7e:19:
                    c5:3e:04:fd:e7:65:38:0b:c4:2f:2a:a9:72:03:50:
                    d2:5e:5e:1d:a1:34:30:f3:b8:c7:f7:ee:3f:0c:66:
                    16:cb:0c:5a:b4:d3:ae:4e:fe:f2:b6:30:37:a9:4e:
                    88:41:b3:4f:60:aa:c2:da:59:cd:7c:1d:59:aa:db:
                    14:c8:38:a3:fa:ef:d0:88:7a:5e:5a:2e:5b:99:d9:
                    b8:77:5a:63:88:1d:e3:bf:4f:8c:06:99:36:84:95:
                    63:fe:9c:3c:73:b1:3b:78:ca:47:7a:9a:e8:5d:8d:
                    a8:0b:e8:70:64:cf:7a:7a:88:27:ad:59:cb:c4:ba:
                    a9:3b:5b:c1:74:87:51:e9:4f:4b:f3:1b:aa:14:3a:
                    08:40:24:b6:ab:cc:43:e4:06:2d:37:2a:50:40:d2:
                    bb:ee:a5:a1:76:fa:72:57:0b:a7:80:53:57:39:de:
                    4b:ac:e8:5a:07:fa:86:b1:04:4c:f8:e7:60:3a:18:
                    8c:b3:5c:21:ed:14:27:12:5c:5c:0d:60:27:01:b2:
                    6f:f0:3b:bb:d7:0a:5d:03:cd:3b:5a:80:ea:0d:b9:
                    29:ae:ad:ad:db:6f:01:e0:85:94:0b:ce:d3:e7:19:
                    7e:95:41:16:92:42:13:7f:48:18:69:1c:75:6a:fb:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:06:74:81:CF:B9:73:9B:77:87:CB:74:8B:06:BE:78:73:37:A3:77
            X509v3 Authority Key Identifier:
                keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:30:20:bc:5a:9f:c6:fe:e2:b4:99:3b:88:40:50:cc:60:36:
         d4:cf:a8:8d:0d:69:0e:67:33:90:39:0e:99:5f:b9:dc:9e:a0:
         6b:91:34:d3:f5:7a:76:7e:19:e7:5c:1f:a5:79:33:36:d5:e8:
         71:33:e8:ea:ac:bc:51:16:de:30:04:0c:c9:f5:5d:fc:b4:1f:
         7c:3d:1a:41:da:c0:7d:fb:06:6c:75:79:95:15:05:3c:68:af:
         8d:1c:fb:ed:99:93:f1:dc:14:e3:e7:7d:fb:b4:2f:bb:c7:24:
         d2:e0:42:56:06:ac:fd:54:70:b5:03:34:b7:e6:12:77:d7:e1:
         29:4e:7a:79:11:a7:e7:5c:fd:04:d0:af:10:ab:5c:47:6d:dc:
         27:88:a3:48:58:88:43:67:33:e2:55:22:a3:1a:96:80:34:ed:
         7c:28:79:15:d5:fc:9b:ed:9e:2e:ec:cb:c8:b5:d3:1a:e2:2d:
         95:95:3e:21:8b:5e:0f:df:4c:57:f2:32:65:86:c5:33:98:da:
         37:91:2d:c5:39:0a:99:8d:b3:78:58:67:8d:b6:c4:6a:1f:34:
         39:a9:ed:ec:be:6f:aa:ed:13:dd:18:cf:5f:b3:9f:a6:c6:90:
         d9:b9:92:15:ea:9a:4c:6b:b9:7a:af:15:67:ea:c1:67:55:d4:
         91:83:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----