Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/I3BClUbx_tYnuY_rgQtQWY87dYI.roa
File:                     I3BClUbx_tYnuY_rgQtQWY87dYI.roa (raw, json)
Hash identifier:          hTqzW82+EBBeBFko2As2pOk5qJAAsPTFO752SRQ8Ioo=
Subject key identifier:   23:70:42:95:46:F1:FE:D6:27:B9:8F:EB:81:0B:50:59:8F:3B:75:82
Certificate issuer:       /CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
Certificate serial:       019420D6616E5D73F9EA917E0AC235994271
Authority key identifier: D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/I3BClUbx_tYnuY_rgQtQWY87dYI.roa
Signing time:             Wed 01 Jan 2025 07:48:28 +0000
ROA not before:           Wed 01 Jan 2025 07:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137
IP address blocks:        159.149.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:61:6e:5d:73:f9:ea:91:7e:0a:c2:35:99:42:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b6a1097b1f251f95c56da4e4aa311b9470bff
        Validity
            Not Before: Jan  1 07:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2370429546f1fed627b98feb810b50598f3b7582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:34:c3:b3:e0:7d:55:b1:10:74:1c:a0:c1:
                    89:6f:bc:98:07:70:2d:03:15:4f:9a:2e:26:36:49:
                    16:d5:cc:07:71:ba:5f:61:8d:e7:e5:d3:c6:16:3b:
                    ba:e0:9c:a9:1e:09:86:64:4b:b8:c4:30:d1:a0:57:
                    d2:0e:c5:bb:85:55:04:e9:b8:85:d7:08:cc:66:cb:
                    79:73:57:d8:12:ea:39:1d:69:d2:e2:4e:b3:ab:99:
                    aa:a4:56:b3:bf:49:4b:38:55:d7:ae:9d:d4:c8:77:
                    fc:b6:a3:5e:16:f9:14:79:18:87:36:5e:08:f4:d7:
                    c5:a9:0c:c0:28:ca:57:d3:6a:b6:48:3f:a1:3d:22:
                    df:0d:2c:5c:5f:ce:a4:b9:ce:77:ad:60:db:95:e0:
                    4d:3d:c7:56:e0:1f:fe:8f:29:36:84:10:f1:50:3d:
                    3d:89:c8:2b:b3:d0:83:61:03:b3:20:ab:ff:4a:a6:
                    96:4a:33:34:85:b1:11:06:e2:bb:63:76:f0:b4:a4:
                    68:63:9d:3a:42:1f:f4:66:84:51:c0:11:a6:7f:20:
                    08:2a:68:4e:b2:05:88:42:43:19:c5:5c:07:ed:6e:
                    e4:96:c9:3f:24:27:5f:80:8b:06:43:6f:cf:a1:2d:
                    53:85:79:e5:5e:dd:74:2e:15:7e:e5:ae:f4:37:2b:
                    7a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:70:42:95:46:F1:FE:D6:27:B9:8F:EB:81:0B:50:59:8F:3B:75:82
            X509v3 Authority Key Identifier:
                keyid:D8:9B:6A:10:97:B1:F2:51:F9:5C:56:DA:4E:4A:A3:11:B9:47:0B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtqEJex8lH5XFbaTkqjEblHC_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/I3BClUbx_tYnuY_rgQtQWY87dYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/218dcb-d097-41fd-8f82-d6d3422baec8/1/2JtqEJex8lH5XFbaTkqjEblHC_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:39:5b:98:e8:81:47:95:c8:b1:b0:7b:ad:04:35:62:63:79:
         bc:7d:4a:6c:f2:0b:cf:77:9e:4d:57:e0:c1:26:73:a9:c7:87:
         6d:2c:8e:06:dd:63:e0:a1:7b:20:38:cd:10:49:9f:e4:aa:00:
         b1:00:bd:f2:c5:c0:80:85:e3:e7:fe:fb:01:db:10:80:2a:5b:
         44:e4:b1:dd:8c:df:45:ec:45:d0:08:59:92:86:ab:5d:cb:0d:
         14:fc:24:65:77:1a:e3:29:d9:f3:c8:fa:05:1e:fe:c8:8b:01:
         ab:ce:b6:66:ed:b8:b8:43:f6:7c:a1:a5:c6:e6:d8:5d:11:10:
         58:66:61:1b:0a:19:04:6b:c4:8d:9d:a7:1b:5e:16:6e:81:65:
         2e:30:74:27:79:2d:03:17:00:ed:20:a8:cb:43:94:82:36:ab:
         5a:8a:c1:62:f9:8b:2b:71:a6:bd:f6:26:59:9a:19:95:f6:b6:
         e2:9d:fd:2d:95:cc:48:e6:00:77:67:51:ef:1d:b3:b5:ad:77:
         6d:a8:f7:57:39:21:36:39:67:12:f0:0f:c6:92:85:6a:8c:fc:
         cf:7a:c1:3f:ce:ea:43:55:70:ad:f9:ca:3a:06:bd:7e:85:bb:
         79:83:b1:46:b9:32:b2:71:56:81:b5:96:7f:71:28:62:2f:1b:
         2c:e0:90:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----