Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/z6e12zXVvfcGkp8CJi_Vge7YSbc.roa
File:                     z6e12zXVvfcGkp8CJi_Vge7YSbc.roa (raw, json)
Hash identifier:          ZC+bSVouy0WaChOW+MVFNu14ip1XKj5SsaV1rqxdWmY=
Subject key identifier:   CF:A7:B5:DB:35:D5:BD:F7:06:92:9F:02:26:2F:D5:81:EE:D8:49:B7
Certificate issuer:       /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial:       018CC501009B6103EDF5B33A2AE446B44E01
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/z6e12zXVvfcGkp8CJi_Vge7YSbc.roa
Signing time:             Mon 01 Jan 2024 12:30:26 +0000
ROA not before:           Mon 01 Jan 2024 12:30:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201370
IP address blocks:        185.68.252.0/22 maxlen: 22
                          2001:16f7::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:00:9b:61:03:ed:f5:b3:3a:2a:e4:46:b4:4e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
        Validity
            Not Before: Jan  1 12:30:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cfa7b5db35d5bdf706929f02262fd581eed849b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:39:4b:aa:b1:8a:62:ef:3b:0a:87:ec:a5:d0:
                    43:a3:31:6f:e7:6f:13:d8:6d:e1:6b:30:ba:56:92:
                    56:6a:6b:9b:fd:0a:28:81:f3:9a:aa:03:28:04:97:
                    1a:98:c8:96:a3:34:d2:b4:e7:ae:eb:5e:f8:00:c0:
                    e9:3b:fd:f6:92:93:32:9a:d5:ed:6c:c4:7f:ed:ea:
                    5d:22:e1:c0:b6:b7:71:5e:82:10:88:81:2a:d8:79:
                    dd:fa:55:b0:9a:e1:89:2a:9a:07:db:4e:0c:15:69:
                    ce:8e:36:30:78:7b:51:30:64:7f:4e:fb:da:ae:e3:
                    db:b8:9b:96:77:23:7a:de:67:7d:63:99:e9:49:fb:
                    75:8c:83:70:40:49:c1:5b:5f:88:e6:fd:d8:ed:b9:
                    99:38:9f:87:4f:c7:c2:c1:0a:27:93:a8:45:a0:ae:
                    46:06:0c:7e:31:4c:9a:7d:ff:b5:6a:2a:06:e7:6e:
                    30:69:0f:ef:ff:06:73:2a:8c:80:18:5e:eb:3e:ac:
                    53:d7:1e:72:26:65:6c:01:6c:ff:35:56:ec:48:5d:
                    98:42:01:6b:7e:f6:fd:c3:fa:e5:ed:e7:a8:25:55:
                    76:c7:90:9e:9f:78:5f:da:b2:99:17:10:e6:1d:68:
                    9c:aa:e4:22:0d:29:71:a8:2f:f6:ba:df:d0:3a:b5:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A7:B5:DB:35:D5:BD:F7:06:92:9F:02:26:2F:D5:81:EE:D8:49:B7
            X509v3 Authority Key Identifier:
                keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/z6e12zXVvfcGkp8CJi_Vge7YSbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.252.0/22
                IPv6:
                  2001:16f7::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:22:75:85:df:ac:99:c6:39:a5:8b:15:b2:bc:d0:5e:29:19:
         a0:a5:e8:4f:5d:02:32:35:79:c2:bd:20:1f:79:1c:95:36:35:
         2a:3e:ed:a0:fc:f6:bb:1e:1d:79:a4:be:ce:9b:d8:c0:77:b7:
         df:0e:7c:dd:ad:aa:83:7e:ff:d9:42:ef:a5:ba:05:ed:8e:9b:
         5e:55:d2:29:9a:08:26:c3:f3:ee:26:ef:2f:bc:41:a5:6b:d8:
         e1:e9:0c:54:3e:e1:aa:f3:1a:d5:40:44:4c:70:d6:26:75:09:
         d0:9f:af:91:d0:43:a2:2b:8e:97:c8:74:e5:6c:b4:bf:52:68:
         7a:c6:2b:a2:c8:91:0b:6e:bf:82:a9:c8:77:0d:8e:25:f7:a1:
         5a:e2:e4:37:4f:08:8a:12:94:00:7c:b8:5d:3d:67:0a:56:a9:
         a6:8d:c4:ab:5d:93:db:00:af:a8:12:b9:4a:2e:d9:a6:88:50:
         a9:ae:ad:38:2b:02:e6:37:2a:88:5d:dd:ff:29:80:61:94:a6:
         b1:41:f8:71:71:f8:2c:34:1c:48:6d:20:96:71:b6:81:0f:38:
         88:95:e0:4c:88:05:b3:6c:3e:23:2e:d6:b1:0b:c2:be:b8:b1:
         64:c9:8e:a9:7a:25:2c:23:23:c4:83:a4:cf:cf:83:72:14:93:
         64:d9:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----