Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa
File:                     5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa (raw, json)
Hash identifier:          UnXYlFiyJBM2cbEBf2cCAcTXlYLcyD51tGVhPbgsuJM=
Subject key identifier:   E5:C4:35:07:CA:9A:08:66:63:5F:A7:A1:D3:71:B1:6D:ED:A0:C8:0B
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       01953890B611B42BCE5DF8ADE6549D14E2EC
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa
Signing time:             Mon 24 Feb 2025 15:26:02 +0000
ROA not before:           Mon 24 Feb 2025 15:26:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63066
IP address blocks:        176.126.161.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:38:90:b6:11:b4:2b:ce:5d:f8:ad:e6:54:9d:14:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Feb 24 15:26:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e5c43507ca9a0866635fa7a1d371b16deda0c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:58:03:9d:35:3e:54:fa:00:b2:72:21:7c:
                    3e:88:b6:c3:16:35:7e:44:af:12:f6:07:51:91:58:
                    1f:f0:c4:72:a2:12:fc:85:2a:12:b8:46:e9:a5:b9:
                    49:ea:1b:cc:b2:8c:31:83:0a:f7:f3:a6:35:0a:f8:
                    e9:35:61:45:ef:8f:a7:2f:b1:08:e5:68:9d:f9:e1:
                    c4:80:ae:c5:e5:02:86:88:3c:92:ff:31:6d:03:0a:
                    05:c8:da:be:0e:36:af:6c:7d:14:90:c0:75:e0:c9:
                    e5:14:61:fa:76:47:cf:22:ad:33:d1:97:a4:c3:c6:
                    91:20:94:f7:9b:3f:aa:95:82:95:01:23:96:00:0a:
                    2b:03:67:29:ec:d6:9a:ea:04:82:2b:55:db:7e:a5:
                    66:7c:91:9c:16:c5:28:bd:66:99:07:0e:10:b4:4f:
                    96:00:e9:fb:e2:ad:2a:be:f9:a5:e3:a0:7c:9c:26:
                    fa:36:ec:01:8c:de:49:55:b2:5b:58:3d:53:3b:ce:
                    03:0f:6f:dd:7e:de:4c:75:e0:74:af:27:b8:50:9a:
                    8d:c4:f2:2f:5d:8d:2e:80:c5:17:20:e7:ba:8c:9e:
                    03:52:34:44:b3:ff:29:ff:0e:17:51:f6:b9:f7:79:
                    5c:be:ea:ac:41:ab:3d:eb:b3:44:3d:9b:bf:30:9f:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C4:35:07:CA:9A:08:66:63:5F:A7:A1:D3:71:B1:6D:ED:A0:C8:0B
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/5cQ1B8qaCGZjX6eh03Gxbe2gyAs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.126.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:c0:77:1b:1c:dc:ea:3c:f6:a9:bf:84:b8:c7:a7:61:53:
         7b:76:ac:0c:71:c1:4a:f8:9f:08:31:17:15:59:f4:7a:39:dd:
         73:e4:14:6a:51:26:77:b6:dc:27:e5:23:35:f3:96:b0:08:ba:
         e0:a2:07:89:41:88:d3:98:47:3d:31:a8:9e:12:22:84:e6:35:
         20:73:46:ac:f0:20:fe:8d:01:21:52:d4:1b:42:30:be:c0:fe:
         65:56:cc:f7:76:5f:2a:d9:22:e2:ad:23:12:92:a0:9b:95:1e:
         78:4d:4f:6f:07:3f:ad:07:28:f0:9d:3b:a2:6f:93:61:97:2f:
         54:62:08:e2:80:af:39:af:32:da:30:be:d1:64:84:12:c9:fc:
         9a:33:3d:b9:13:e0:ea:bc:3c:fd:94:1b:6f:9d:05:bf:ad:67:
         67:96:fd:4f:7e:91:b2:ad:bb:e6:1d:cc:d4:e2:6b:ae:2f:d9:
         b8:f7:f2:75:4e:89:62:1e:5c:64:b4:eb:60:0b:52:7e:02:57:
         b5:4f:f7:ed:5f:76:88:7e:a4:98:48:f3:f5:69:3b:ec:4a:c0:
         65:07:ce:f9:da:37:75:60:83:b4:cd:da:7d:f5:ed:24:e6:5a:
         ea:96:a0:86:36:2e:6c:09:37:79:f6:c3:db:12:67:be:52:ee:
         88:b7:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----