Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/JjZhvhphZRDZH5Oh3OKMQHamrqo.roa
File:                     JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (raw, json)
Hash identifier:          I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=
Subject key identifier:   26:36:61:BE:1A:61:65:10:D9:1F:93:A1:DC:E2:8C:40:76:A6:AE:AA
Certificate issuer:       /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial:       019424B3845296149541F1D496004C30FD8F
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/JjZhvhphZRDZH5Oh3OKMQHamrqo.roa
Signing time:             Thu 02 Jan 2025 01:48:51 +0000
ROA not before:           Thu 02 Jan 2025 01:48:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206288
IP address blocks:        185.35.84.0/22 maxlen: 22
                          2a00:f280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:84:52:96:14:95:41:f1:d4:96:00:4c:30:fd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
        Validity
            Not Before: Jan  2 01:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=263661be1a616510d91f93a1dce28c4076a6aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:29:88:2e:b0:9d:e4:af:97:02:fe:2d:38:
                    d8:f0:b4:4a:a2:5b:83:ca:3b:3d:54:3e:b1:3f:2d:
                    9d:c4:08:49:f6:f8:21:98:26:97:0a:86:18:48:14:
                    0f:c3:a6:be:0b:bc:47:99:77:24:5c:3f:a7:5a:79:
                    0d:c5:9f:cd:40:e6:04:e1:23:a3:0e:d4:b5:67:9d:
                    54:8f:fe:fa:bd:94:84:ec:aa:5b:cf:e9:a6:7e:0e:
                    fc:26:21:d4:73:f2:b8:7c:fa:48:a8:ef:3a:43:30:
                    cd:f5:e1:8f:5f:76:e2:6f:99:6a:f1:96:08:b0:53:
                    f1:cf:ec:99:4b:2e:f5:9a:b2:ed:c0:a4:0c:af:27:
                    fb:40:16:85:d2:79:dd:b0:bf:14:9d:98:62:2e:cb:
                    97:9f:14:06:0d:a1:9c:59:d9:e6:58:c6:79:26:d4:
                    1b:85:4f:6f:6f:80:8a:6c:07:97:5c:a3:79:99:4e:
                    38:8a:b2:82:5b:18:42:7e:12:c9:49:7e:3b:fa:68:
                    88:f1:96:b8:98:a7:de:20:d4:89:14:2a:36:da:13:
                    31:1c:af:d5:e1:46:e8:1d:64:6b:44:91:35:cc:72:
                    d8:0e:1f:da:84:d7:ea:ee:08:6a:41:e6:b1:f0:be:
                    2b:2d:4c:73:c2:51:0b:4e:1f:68:08:e7:26:9b:f3:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:36:61:BE:1A:61:65:10:D9:1F:93:A1:DC:E2:8C:40:76:A6:AE:AA
            X509v3 Authority Key Identifier:
                keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/JjZhvhphZRDZH5Oh3OKMQHamrqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.35.84.0/22
                IPv6:
                  2a00:f280::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:e5:f2:6a:69:6d:a9:6b:d6:64:4f:e7:6a:cf:c5:71:d3:
         53:2f:a3:ff:c9:ac:8f:75:b0:72:64:5f:f7:0b:19:95:6e:19:
         35:c8:a1:04:60:bf:ad:36:08:5f:95:fa:78:b8:d6:d3:d0:a7:
         60:dc:72:1b:12:1c:72:3a:82:26:be:98:db:78:c3:fe:07:0c:
         48:89:d8:16:35:42:b3:37:66:c1:ac:ca:55:e2:44:a3:58:1d:
         1a:5a:3d:75:d6:ec:3e:84:92:86:6a:cb:fc:7c:36:c9:48:0b:
         27:cd:99:7c:2e:24:9b:4e:42:2d:ff:a8:0c:87:20:d9:a0:36:
         73:26:d1:a3:a4:d9:04:2b:c9:c9:8e:32:81:ec:6f:6a:83:4a:
         3f:f7:86:a2:fe:37:5a:51:66:44:b6:60:dc:0e:b9:f2:d2:cb:
         2a:7e:34:ec:2e:43:cd:df:e1:f1:90:89:8c:a8:62:15:3f:45:
         9e:f3:b3:39:1c:30:7e:8e:77:09:74:cb:c6:4e:35:1d:fb:cf:
         08:38:9a:04:bb:41:17:39:ca:45:0e:ef:72:15:a9:5c:c4:c0:
         76:59:a2:ee:f0:24:25:05:73:e9:a5:07:1f:0d:2e:28:e0:44:
         fa:92:fb:17:8a:b8:d5:a9:42:fc:f3:b0:2e:df:a0:3c:cb:e2:
         75:e7:61:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----