Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa
File:                     R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (raw, json)
Hash identifier:          oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=
Subject key identifier:   47:57:5D:A1:05:63:98:55:9D:43:C5:8D:E3:15:A3:4B:A0:56:8C:2C
Certificate issuer:       /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial:       0194266BE525451AB094A8D28D7D45136A21
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa
Signing time:             Thu 02 Jan 2025 09:49:52 +0000
ROA not before:           Thu 02 Jan 2025 09:49:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59848
IP address blocks:        146.19.242.0/24 maxlen: 24
                          2a0c:e880::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:e5:25:45:1a:b0:94:a8:d2:8d:7d:45:13:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
        Validity
            Not Before: Jan  2 09:49:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=47575da1056398559d43c58de315a34ba0568c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:7f:ad:cb:4a:c2:30:bb:43:f0:b1:32:70:
                    da:f6:c5:70:e9:f0:fe:f4:4b:f4:9c:4e:63:12:5c:
                    d9:d8:0d:46:30:4e:45:f7:12:03:ad:ed:75:d8:91:
                    a8:dd:13:96:4e:ff:2d:c2:3c:30:67:8d:e1:6e:b5:
                    20:94:89:8a:78:90:b6:66:29:3d:4f:8d:ec:48:61:
                    46:34:1a:fc:5f:76:13:5e:4d:a1:64:ef:fa:d2:72:
                    0d:27:7a:af:e5:73:8a:ca:69:b2:4a:a9:47:66:f1:
                    80:b7:d1:a7:e5:46:c4:80:ad:58:7d:17:db:4b:e2:
                    c6:1d:32:46:58:29:98:f4:0b:2d:0d:11:68:83:92:
                    dc:59:bf:b0:b0:72:29:26:41:21:ff:bc:06:ac:ca:
                    ef:a5:ad:cf:c8:ed:18:4d:32:c1:1b:f1:ce:68:f0:
                    eb:08:b2:fe:bc:33:4d:28:b0:96:3d:42:0f:dd:13:
                    a4:2e:b9:e1:aa:bd:3e:8a:c1:6a:83:8e:41:37:3c:
                    db:47:ad:d7:9e:a8:35:c7:4a:a9:f0:3c:5a:6d:e7:
                    ba:56:7d:f1:0e:65:11:fc:e1:fd:ac:3c:d8:db:f2:
                    08:6e:9a:c2:f2:b9:ca:b9:be:c4:44:90:1f:01:f0:
                    1e:ce:c1:77:63:f4:3b:4d:91:0b:8f:90:2d:53:80:
                    01:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:57:5D:A1:05:63:98:55:9D:43:C5:8D:E3:15:A3:4B:A0:56:8C:2C
            X509v3 Authority Key Identifier:
                keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.242.0/24
                IPv6:
                  2a0c:e880::/29

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:37:05:97:78:8a:48:8e:42:b8:82:3f:d6:a2:5d:20:36:
         db:6b:01:55:5a:c7:a6:ae:b8:ce:1a:58:ba:d5:f4:5f:96:7c:
         77:de:cc:76:e3:4f:ac:41:e8:36:6d:5a:f9:2d:0b:14:56:62:
         4f:61:83:a1:0c:8e:3f:20:98:14:37:0c:2e:7c:8c:d4:bb:4d:
         7b:7b:6b:c6:f1:f2:5f:ee:64:8b:89:2e:47:bb:cc:8e:32:69:
         66:7d:eb:bd:42:35:54:47:35:d5:43:6c:a4:ac:3d:44:29:8c:
         32:f7:43:8b:7d:e3:d6:e0:6f:1f:8f:05:16:25:7a:8b:4f:e8:
         5d:5f:6e:94:5b:c3:7f:53:a9:db:92:5a:24:4a:ae:9a:36:6e:
         d9:e8:2c:d1:83:c2:0a:19:fe:63:41:96:4d:35:dc:00:a3:c1:
         80:ec:04:dd:c6:68:bc:64:73:e3:43:d8:63:08:ff:87:68:b4:
         3b:61:ef:37:73:89:b5:20:4a:c2:20:ad:75:13:ef:6e:94:2f:
         d9:91:11:c5:0d:09:9a:8c:01:60:f4:3c:70:6f:b6:6a:2a:06:
         be:1d:10:64:22:38:c3:ed:4e:50:14:10:9f:de:8e:3f:5d:ce:
         9b:d4:57:8b:18:a9:2b:e6:ea:3a:cd:af:88:a5:0f:1a:f8:a5:
         35:ca:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----