Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/hD1AphFIn6fuV9gSTSrraqks_Sk.roa
File:                     hD1AphFIn6fuV9gSTSrraqks_Sk.roa (raw, json)
Hash identifier:          oBX9aRcDYNWZ0t6xKF0WdTEUvu7dgkLbf0ja/L0F1mY=
Subject key identifier:   84:3D:40:A6:11:48:9F:A7:EE:57:D8:12:4D:2A:EB:6A:A9:2C:FD:29
Certificate issuer:       /CN=340729dc607b486c324d9114de45242a12e4b5ba
Certificate serial:       018CC8DF23AEC256017140982623DD118E72
Authority key identifier: 34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/hD1AphFIn6fuV9gSTSrraqks_Sk.roa
Signing time:             Tue 02 Jan 2024 06:31:56 +0000
ROA not before:           Tue 02 Jan 2024 06:31:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     206236
IP address blocks:        195.245.66.0/24 maxlen: 24
                          2a10:1a40::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:23:ae:c2:56:01:71:40:98:26:23:dd:11:8e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340729dc607b486c324d9114de45242a12e4b5ba
        Validity
            Not Before: Jan  2 06:31:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=843d40a611489fa7ee57d8124d2aeb6aa92cfd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:5d:48:bd:4d:a0:4a:1a:7e:eb:4f:04:7e:
                    97:41:24:a8:3c:bd:b9:e7:f4:fe:d5:f6:d7:36:62:
                    93:fe:b4:80:20:ce:94:69:61:fc:1e:31:46:f3:ca:
                    22:e2:6a:89:c0:44:7d:cd:a0:93:fa:b4:2b:23:04:
                    8e:82:cb:b1:b6:25:1a:d0:6f:d9:bd:49:80:ae:b2:
                    dd:8d:72:88:d7:85:3f:a2:dd:1d:47:ae:b5:d2:b2:
                    a0:aa:cd:96:71:30:f5:f5:5b:53:79:2e:c7:e6:95:
                    65:ae:2f:c3:fc:0d:b3:7b:3e:47:03:bd:79:6a:3f:
                    40:6a:95:d0:ee:e8:30:f7:e5:81:fc:76:c2:58:17:
                    6b:66:7f:54:27:ad:70:87:ee:94:d5:46:6b:eb:6b:
                    ca:2f:e6:76:c3:c3:6f:e3:d3:47:ea:7a:01:75:18:
                    b8:4b:0f:ad:42:ae:8a:03:41:c8:b2:f9:b3:6b:96:
                    1f:0d:72:84:f7:56:ef:77:45:bf:d4:08:2b:55:74:
                    d8:44:b5:01:ec:54:5a:e4:b1:f2:33:df:67:b1:4e:
                    75:39:99:5d:04:05:41:08:fb:8a:89:d1:4c:00:4f:
                    bc:79:87:86:0f:85:ff:bc:c5:90:b3:1c:c7:61:f7:
                    85:92:1a:83:09:4f:19:10:73:f7:90:cb:46:fc:29:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:40:A6:11:48:9F:A7:EE:57:D8:12:4D:2A:EB:6A:A9:2C:FD:29
            X509v3 Authority Key Identifier:
                keyid:34:07:29:DC:60:7B:48:6C:32:4D:91:14:DE:45:24:2A:12:E4:B5:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAcp3GB7SGwyTZEU3kUkKhLktbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/hD1AphFIn6fuV9gSTSrraqks_Sk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fe0ec-61b3-47c2-9c29-e4cfbcc8b8d0/1/NAcp3GB7SGwyTZEU3kUkKhLktbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.245.66.0/24
                IPv6:
                  2a10:1a40::/29

    Signature Algorithm: sha256WithRSAEncryption
         10:10:31:e0:ca:b0:7b:4e:8d:8a:86:6d:0d:1c:1e:86:67:58:
         c6:3f:c4:16:b5:87:03:98:98:08:20:f8:8b:33:76:a9:45:fb:
         c1:31:19:7b:40:e8:01:e1:17:a3:86:46:60:50:f7:d3:f7:56:
         14:93:9c:e7:ac:12:6c:32:a1:34:62:c9:a9:58:f5:f9:ac:de:
         7a:42:04:47:24:7e:9d:62:15:68:5c:d6:1b:00:8d:43:9e:68:
         70:38:ca:5b:36:54:a5:0d:c3:f4:49:c6:66:61:25:6e:00:d1:
         24:c7:3c:30:85:8f:6a:f8:36:d0:2c:1f:a7:78:51:96:60:fa:
         53:7e:48:c0:84:78:d1:85:97:2a:67:2e:d5:2e:45:6a:c0:dd:
         95:06:d4:60:cd:80:0d:86:2e:42:5e:b3:47:c9:7b:6c:8d:16:
         5c:a1:17:d4:b5:33:99:d3:58:8e:52:69:e9:40:13:67:00:ce:
         25:0a:6c:65:34:74:aa:a8:0b:49:69:57:c7:df:da:4b:cd:98:
         07:6f:4f:bc:43:58:72:db:73:f7:f4:4e:dc:57:f7:fb:8a:5a:
         3f:b7:d2:c9:f9:51:9c:6a:42:5e:4f:1b:1f:d7:9e:85:78:2d:
         6a:59:ca:a3:bf:2b:8d:74:1e:60:6a:96:26:86:0b:bc:01:97:
         e8:66:35:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----