Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa
File:                     BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa (raw, json)
Hash identifier:          FTx8tgcHKGsWWw5SgToY/5961CHlQFLj7rItVRXBbV8=
Subject key identifier:   06:2C:0B:23:D5:4E:DB:FD:2C:F2:D6:72:34:18:55:42:A5:3F:8A:E6
Certificate issuer:       /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial:       01950472BB7A9071090436FF4D98E972F9A7
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa
Signing time:             Fri 14 Feb 2025 12:33:02 +0000
ROA not before:           Fri 14 Feb 2025 12:33:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201532
IP address blocks:        83.168.92.0/24 maxlen: 24
                          2a01:96e0:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:04:72:bb:7a:90:71:09:04:36:ff:4d:98:e9:72:f9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
        Validity
            Not Before: Feb 14 12:33:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=062c0b23d54edbfd2cf2d67234185542a53f8ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:65:0b:64:ef:17:8c:2e:75:11:af:26:c8:
                    d0:d4:df:6e:a4:fb:cc:64:20:97:4f:43:f4:cd:3a:
                    78:db:6c:b5:ba:bc:a3:2f:6c:2f:cb:81:60:2c:93:
                    ef:12:b8:11:54:28:09:06:44:c4:4a:bd:cb:37:88:
                    a7:85:c8:c0:34:8b:78:b9:32:42:d6:3b:0a:18:cb:
                    47:f9:15:15:56:01:10:16:67:24:6d:c6:f0:5a:80:
                    24:12:b3:4a:b7:94:56:27:b9:88:27:44:ee:4d:3a:
                    df:db:35:e3:9b:a1:62:f0:8a:cf:4b:63:99:96:02:
                    7c:6f:ef:b5:6e:37:fd:e8:ae:d9:e9:b5:3c:c9:fc:
                    bf:8a:23:64:9a:72:5e:77:67:bd:65:f0:8e:a1:27:
                    f7:10:f3:6a:91:3e:76:d5:bd:8e:ec:ae:84:df:00:
                    40:77:06:61:d4:3d:37:1e:df:a2:0d:39:c3:72:f6:
                    e3:bd:db:e6:fa:97:9b:b2:99:30:30:52:52:de:b7:
                    38:77:1c:63:3a:83:f5:47:48:99:93:2b:97:2d:6e:
                    f1:6b:44:76:38:21:e7:e7:61:8b:9b:ef:f6:0f:3a:
                    26:7f:b8:eb:81:55:b7:1e:a9:b2:06:68:7d:80:54:
                    da:2c:b1:60:3b:fa:fc:f6:3e:72:45:c5:5b:56:0b:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:0B:23:D5:4E:DB:FD:2C:F2:D6:72:34:18:55:42:A5:3F:8A:E6
            X509v3 Authority Key Identifier:
                keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/BiwLI9VO2_0s8tZyNBhVQqU_iuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.168.92.0/24
                IPv6:
                  2a01:96e0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:35:38:ac:b8:38:f0:04:65:01:e7:79:8f:78:b6:c6:c0:9d:
         05:8e:9e:73:20:f9:bf:8a:57:fe:f1:38:38:4a:41:2e:d4:b9:
         51:f2:17:d0:a7:8d:22:7e:0a:58:23:94:32:86:bd:f0:87:27:
         47:6f:95:da:16:f5:5f:4f:15:0a:6d:39:93:83:f7:f7:dc:54:
         b3:4e:6f:d2:9d:68:8a:83:c5:4e:75:b4:a2:de:92:8f:ab:46:
         cb:e8:31:d2:63:c0:e4:c7:e8:4d:eb:04:2e:0c:a5:9e:7c:c1:
         d0:67:da:34:cd:e6:b4:06:6c:d4:a6:60:ca:17:0b:3e:f8:f3:
         98:e8:6a:70:ea:84:e9:80:e9:80:4c:61:19:ab:da:6c:d0:5e:
         61:a8:73:9a:c5:b3:26:7d:4b:8c:f6:3c:e0:d3:d5:1f:3a:59:
         78:a5:c5:ac:ae:8a:3d:48:ab:e0:37:96:6a:45:a1:29:13:a8:
         9f:a8:51:eb:a5:6d:a9:9a:17:10:bc:6f:12:6b:ad:67:49:a2:
         4e:c6:21:e3:17:aa:51:45:61:40:41:99:b0:72:30:c3:ac:38:
         e6:b5:ac:9a:cb:4c:4d:9b:8c:ac:e1:31:c1:99:88:73:11:3c:
         ee:8f:42:22:5c:bd:3e:b2:ca:9c:67:74:6f:b7:bf:1d:56:d1:
         9e:af:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----