Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/tYNk5ivLrJOQmND4t8YVO7XJjVM.roa
File:                     tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (raw, json)
Hash identifier:          7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=
Subject key identifier:   B5:83:64:E6:2B:CB:AC:93:90:98:D0:F8:B7:C6:15:3B:B5:C9:8D:53
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       019427474CD6290FC16AC917CFB7358E3FEE
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/tYNk5ivLrJOQmND4t8YVO7XJjVM.roa
Signing time:             Thu 02 Jan 2025 13:49:31 +0000
ROA not before:           Thu 02 Jan 2025 13:49:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30900
IP address blocks:        185.108.128.0/22 maxlen: 22
                          2a01:6280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:4c:d6:29:0f:c1:6a:c9:17:cf:b7:35:8e:3f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Jan  2 13:49:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b58364e62bcbac939098d0f8b7c6153bb5c98d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f6:cf:6f:a5:44:00:5a:51:05:a3:70:66:c2:
                    38:de:32:ae:fe:3e:a8:38:37:a2:a5:f7:74:81:b3:
                    f3:96:59:51:a6:0c:00:56:24:c5:4a:4e:af:ca:e0:
                    69:10:71:07:b8:1f:b1:00:6e:53:a7:15:85:8b:3e:
                    d3:34:75:2a:c3:fb:ee:2c:04:8a:56:a0:98:65:c6:
                    46:f7:66:86:c3:c8:5f:da:c8:8a:f5:74:25:f3:33:
                    b6:68:98:69:6c:3d:8f:c7:a9:69:02:5c:fc:48:93:
                    3c:9f:02:93:47:47:32:23:38:96:51:b6:31:24:a2:
                    61:24:a7:38:9b:a2:16:6f:c1:26:00:3e:d6:84:ed:
                    e9:ce:8f:6c:40:99:73:d5:0d:31:2a:96:f8:3e:71:
                    b6:a4:9e:f5:7c:70:cb:cf:6f:f0:12:2f:96:fe:f9:
                    b7:c8:b1:bc:3c:30:f1:3c:27:20:ff:5b:18:de:5a:
                    30:79:0c:02:15:75:e0:16:4c:2f:d0:41:14:17:d3:
                    15:e1:16:7b:3a:b7:b8:f7:d8:68:80:55:3c:8b:10:
                    20:72:86:6c:aa:08:d9:45:47:de:75:c3:17:06:0a:
                    9c:6e:99:d4:1a:1f:76:4a:9b:4b:27:20:c0:95:e5:
                    ec:50:70:f0:0b:23:e6:ab:33:ce:8f:48:ea:af:6d:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:64:E6:2B:CB:AC:93:90:98:D0:F8:B7:C6:15:3B:B5:C9:8D:53
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/tYNk5ivLrJOQmND4t8YVO7XJjVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.108.128.0/22
                IPv6:
                  2a01:6280::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:ef:b3:ee:8b:f7:ea:d7:46:c4:ee:b9:42:dd:a8:0a:c2:
         c4:24:c1:c3:a4:56:ec:46:48:46:8c:8d:03:0b:c9:27:f9:09:
         02:d2:ff:13:e9:62:29:c1:35:81:81:ab:af:8f:26:57:ae:14:
         65:3c:ea:08:e7:53:0c:21:b9:ae:ea:fa:79:55:f0:5b:33:3f:
         75:98:82:13:24:90:83:74:0f:4e:7c:f9:b6:a3:d9:68:18:e6:
         3e:a1:b3:bc:06:3b:a2:4d:74:2d:aa:3e:c0:db:42:fc:77:46:
         4e:cf:8c:b6:72:51:cc:78:b5:da:75:16:fb:50:6d:88:3f:c7:
         fb:9b:25:14:90:14:fb:5a:5a:a2:bd:66:ed:73:8b:8c:4d:66:
         3a:f8:27:65:03:82:61:2f:18:75:fe:c1:2b:69:1c:80:97:11:
         2d:73:66:4e:42:c3:53:54:6e:1c:e7:4c:9a:2d:0b:35:70:c1:
         aa:6a:29:0d:88:80:5a:b2:4e:6d:f2:d0:11:c8:02:0d:c7:32:
         2b:b2:59:3d:13:2b:55:4d:fa:60:89:52:3e:6d:af:fd:b7:e1:
         31:ae:15:96:25:45:d5:41:76:2b:51:e7:61:56:14:4f:e1:79:
         47:50:68:87:e7:39:67:82:a0:cc:9b:d5:4e:ea:c8:ea:74:e0:
         b3:24:91:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----