Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/PwDUcjqBkiIEULzXxKTVGmmTWG4.roa
File:                     PwDUcjqBkiIEULzXxKTVGmmTWG4.roa (raw, json)
Hash identifier:          FRJ/j45X7Ib31MDYnkP96sRJLV09a4YTIEwHH8GRm+c=
Subject key identifier:   3F:00:D4:72:3A:81:92:22:04:50:BC:D7:C4:A4:D5:1A:69:93:58:6E
Certificate issuer:       /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial:       019600E109A6110CF067CC2D44C8B2642D3B
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/PwDUcjqBkiIEULzXxKTVGmmTWG4.roa
Signing time:             Fri 04 Apr 2025 12:57:50 +0000
ROA not before:           Fri 04 Apr 2025 12:57:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212144
IP address blocks:        94.154.118.0/24 maxlen: 24
                          2a14:c886::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:00:e1:09:a6:11:0c:f0:67:cc:2d:44:c8:b2:64:2d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
        Validity
            Not Before: Apr  4 12:57:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f00d4723a8192220450bcd7c4a4d51a6993586e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:67:75:50:2d:f1:79:94:08:b9:3f:2e:bf:
                    45:c0:4a:ed:f0:35:d2:57:20:25:c3:53:23:88:6b:
                    60:98:ef:b4:47:c3:9f:32:2e:90:48:84:5e:0e:88:
                    48:78:f1:f0:f5:d8:24:4f:20:28:60:20:72:f4:da:
                    c2:fc:f8:33:87:78:96:4d:90:41:15:6a:ef:b7:b2:
                    30:73:f5:15:a5:8d:a7:3d:1f:31:46:20:4d:4f:cb:
                    00:80:cc:55:e7:cf:b1:7d:47:e0:9b:59:11:d5:e2:
                    23:2b:31:a6:77:7b:e9:63:16:c2:e0:47:33:48:04:
                    15:69:a7:7a:01:8b:31:3c:f3:b6:6d:17:ce:bd:27:
                    a2:4f:e8:96:8a:0b:fb:97:b3:d8:7c:d1:2c:76:e6:
                    6c:cf:f4:6c:4d:56:af:e7:e9:4d:e3:d9:7b:c4:12:
                    b3:69:e5:d4:45:4f:2f:f1:f8:45:b8:13:7c:1f:d1:
                    25:32:d0:ce:ea:fc:62:f3:a7:e9:f2:ea:c5:bb:30:
                    a1:cb:24:ea:2c:29:b0:7f:2c:4f:f8:fc:b0:45:9d:
                    c0:36:fc:6f:38:f5:fd:ae:73:5c:52:b1:88:e7:73:
                    b3:1d:82:b1:5f:83:65:8b:3f:aa:dd:2f:fd:50:78:
                    b6:b5:04:3a:e8:92:1c:69:29:e2:a7:78:c1:61:3c:
                    b2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:D4:72:3A:81:92:22:04:50:BC:D7:C4:A4:D5:1A:69:93:58:6E
            X509v3 Authority Key Identifier:
                keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/PwDUcjqBkiIEULzXxKTVGmmTWG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.154.118.0/24
                IPv6:
                  2a14:c886::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:38:0e:d4:9a:fa:65:7e:cb:16:8d:ff:4c:3d:61:24:3c:22:
         c6:2e:02:0a:ad:52:b3:48:a3:61:d1:5b:56:ef:a9:5b:8f:e0:
         1a:d3:19:7c:e4:e6:2b:64:bc:23:04:9a:e0:ae:c7:45:cb:8d:
         a6:20:b6:0e:48:56:c4:92:c5:a9:96:52:12:41:8f:f4:35:44:
         39:fa:0a:b7:9b:06:86:0c:d9:d4:00:56:9b:05:86:cb:70:51:
         57:13:84:4b:68:da:aa:e1:bd:4c:02:ff:ce:6b:3e:89:20:79:
         ee:95:bc:1b:df:5a:9f:a2:5c:f4:cb:2c:86:73:07:b8:49:28:
         49:b4:d1:df:da:3a:f9:17:b3:24:f9:33:ac:e6:f5:af:c6:c3:
         5f:ec:df:a3:99:67:65:05:00:f7:db:84:8f:eb:69:71:ae:90:
         b1:f1:12:0f:77:a1:ff:5a:8f:5d:c2:50:e1:d0:a8:22:8b:00:
         72:c8:73:34:da:a7:cf:71:cb:6f:c4:81:f7:24:e9:16:ba:f9:
         9a:e9:c3:93:73:63:a9:8f:e0:50:25:ee:27:b4:c3:95:7b:b8:
         01:dc:26:e5:96:76:0f:29:a6:81:94:dd:a6:62:a9:27:15:a3:
         af:aa:10:8a:fb:af:51:19:b1:28:da:7c:ab:c0:b2:4f:b6:dd:
         aa:bb:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----