Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/R5bViWXBO3ouBouRqDAFF7DEDMg.roa
File:                     R5bViWXBO3ouBouRqDAFF7DEDMg.roa (raw, json)
Hash identifier:          1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=
Subject key identifier:   47:96:D5:89:65:C1:3B:7A:2E:06:8B:91:A8:30:05:17:B0:C4:0C:C8
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       019420D6654BB0126812D4AE15F95E507696
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/R5bViWXBO3ouBouRqDAFF7DEDMg.roa
Signing time:             Wed 01 Jan 2025 07:48:28 +0000
ROA not before:           Wed 01 Jan 2025 07:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1881
IP address blocks:        143.118.0.0/16 maxlen: 16
                          2001:1400::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:65:4b:b0:12:68:12:d4:ae:15:f9:5e:50:76:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Jan  1 07:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4796d58965c13b7a2e068b91a8300517b0c40cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a3:0b:ea:77:be:1c:85:49:d9:d9:03:50:a5:
                    8d:35:ec:19:cc:0d:60:3e:70:71:bd:5c:15:9d:bf:
                    3d:eb:9f:9e:64:e3:83:c8:96:cf:db:5f:32:e3:9a:
                    2e:ae:64:5b:88:01:61:f5:f8:c1:c7:7e:31:55:8a:
                    82:cf:2c:9f:89:e2:1c:d9:f4:55:42:fe:52:5e:7d:
                    60:79:12:8d:a1:75:18:51:22:d1:79:78:a9:be:c0:
                    02:50:22:3a:c6:a3:88:37:73:7b:52:63:94:7e:fb:
                    0b:c9:59:59:a9:ba:8d:36:45:63:bf:cc:38:3d:77:
                    4f:f2:56:de:15:8d:4f:50:08:ec:9d:fb:49:75:c6:
                    7c:f2:88:a5:f2:14:54:95:97:62:9d:ff:15:ce:78:
                    31:eb:0e:3a:71:e2:0f:9c:3d:29:23:5b:59:41:db:
                    e5:74:43:0a:91:80:5e:2f:30:8d:b6:be:08:f0:61:
                    76:fd:95:e1:0b:87:ec:9e:93:c1:2b:96:d2:86:bc:
                    ad:9b:72:7e:66:b8:8a:4e:5c:22:4e:73:3d:55:ed:
                    16:7d:48:6f:7d:fb:45:e7:60:24:be:f3:b5:d7:33:
                    50:a8:86:5f:5e:28:16:1d:1c:51:4c:b7:53:ff:0c:
                    68:43:3d:aa:af:7c:f2:42:8f:c4:35:e6:d5:25:ba:
                    7a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:D5:89:65:C1:3B:7A:2E:06:8B:91:A8:30:05:17:B0:C4:0C:C8
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/R5bViWXBO3ouBouRqDAFF7DEDMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.118.0.0/16
                IPv6:
                  2001:1400::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:5a:99:f1:92:ec:56:3f:c8:a1:07:49:e6:21:d8:3e:22:d9:
         2c:c8:1b:42:25:d6:a8:ca:5d:82:bb:63:d3:e3:54:15:eb:df:
         8d:71:31:fb:0d:8c:c5:f7:a5:df:ed:c1:ec:5d:90:7e:6a:1b:
         e6:da:27:29:67:c3:b9:fa:40:9c:d8:99:74:54:96:b2:66:05:
         c0:c5:0b:d8:53:23:a6:b0:9b:32:a7:1c:c3:a3:78:46:15:98:
         f4:35:30:14:47:fe:2c:44:85:a1:20:bd:6f:36:c5:67:05:1c:
         d3:4b:3c:5c:87:40:80:14:50:8d:8b:4f:7d:e4:96:37:e3:04:
         60:a9:5d:3f:12:9b:a1:6c:e5:bd:0d:25:0f:b5:d3:bb:7f:50:
         03:b8:cb:76:28:13:f7:7c:02:83:13:e2:69:97:5e:b3:e3:5c:
         da:d2:ea:99:96:e7:6d:cd:e1:ea:0a:58:2a:a2:fc:e2:9a:9e:
         10:57:9d:b1:f6:97:dc:06:ea:40:de:2a:95:83:84:fd:0a:6a:
         79:8d:34:f8:8b:aa:d5:f0:25:ce:be:bc:db:18:f1:3b:d2:6c:
         28:73:f5:d3:b7:73:c0:8d:ab:22:c4:19:d0:44:e8:6f:49:2e:
         e8:b9:96:22:1b:a5:2c:6d:2b:7b:e3:70:3a:41:bd:72:f5:2c:
         1e:1f:fb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----