Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa
File:                     XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (raw, json)
Hash identifier:          JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=
Subject key identifier:   5E:A2:67:42:D2:BE:11:BD:5F:54:E7:B9:27:81:DF:0F:E6:76:54:F0
Certificate issuer:       /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial:       019422FC2B852650ADA2D7FD9450756EB826
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa
Signing time:             Wed 01 Jan 2025 17:48:59 +0000
ROA not before:           Wed 01 Jan 2025 17:48:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39381
IP address blocks:        194.147.245.0/24 maxlen: 24
                          2001:67c:2fe0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:2b:85:26:50:ad:a2:d7:fd:94:50:75:6e:b8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
        Validity
            Not Before: Jan  1 17:48:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5ea26742d2be11bd5f54e7b92781df0fe67654f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:97:a7:8e:53:4f:07:74:4a:56:f7:c1:a0:
                    61:3c:9a:17:12:00:df:24:5c:9f:67:c6:5a:bc:1a:
                    cc:91:4e:d9:f5:e0:cb:d9:de:96:17:d5:4a:52:43:
                    49:d5:f8:df:f0:28:eb:e8:87:92:b8:b9:55:45:75:
                    fe:23:e7:96:32:5b:df:0f:63:da:66:d0:40:7a:58:
                    c3:2f:8d:69:7b:84:3d:d7:89:86:21:76:e4:5c:8b:
                    6d:25:aa:8b:63:b6:9a:49:54:9a:52:aa:d8:3e:26:
                    a1:1c:30:cc:9f:af:43:6c:29:dd:74:db:40:06:b5:
                    02:8e:db:bb:09:b5:25:f3:d1:fc:d1:0e:45:e1:71:
                    2f:29:81:6d:88:46:25:92:32:da:12:d6:19:99:ea:
                    81:84:23:82:03:c1:b6:8c:24:29:db:2f:e9:47:30:
                    a3:b6:67:13:18:25:ad:b7:24:f0:84:a8:f9:10:a5:
                    a7:42:65:e4:9e:28:aa:85:fe:dc:1c:db:93:fb:86:
                    b8:e5:ac:32:67:d2:36:47:14:e6:01:31:5d:e4:7a:
                    9b:ed:c1:f5:6a:bd:38:eb:3f:7b:c9:32:fe:85:ee:
                    f3:59:4b:28:3a:92:17:e9:60:70:f9:a6:4b:5b:b2:
                    cc:00:8d:db:5c:fd:76:c3:50:77:5d:d5:46:47:b8:
                    3d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:67:42:D2:BE:11:BD:5F:54:E7:B9:27:81:DF:0F:E6:76:54:F0
            X509v3 Authority Key Identifier:
                keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.245.0/24
                IPv6:
                  2001:67c:2fe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:37:c5:cb:20:19:c9:e6:78:89:7c:42:13:ba:82:61:1e:80:
         15:fd:5d:41:d1:0d:97:a6:eb:a8:1c:ac:f9:64:a3:0f:0b:96:
         3c:af:9e:0c:e2:78:ec:e2:71:83:42:a8:14:da:8c:62:28:57:
         ed:b4:af:03:ed:80:bb:ee:4c:6b:bc:02:93:5d:b1:5d:af:ff:
         1a:74:b8:d8:41:e5:5b:84:3d:12:dd:53:8f:cf:54:53:7d:c7:
         57:57:07:23:6b:30:51:9f:09:a4:52:88:cd:e0:1a:7a:f6:68:
         4b:f3:fe:4f:af:9a:4e:e9:56:a3:f1:69:ec:0e:f0:7c:e4:1e:
         ac:e5:4a:06:dc:0a:75:5b:b9:42:af:7c:d8:f6:39:00:35:63:
         c4:7a:b1:e7:94:69:05:9e:16:00:8d:a2:21:61:6b:54:ec:de:
         45:1a:03:e1:6a:dd:3b:05:c2:e5:99:43:aa:54:5f:22:10:be:
         d8:ae:e4:e9:cd:18:80:98:de:b0:f4:9b:51:a4:b7:92:05:c6:
         0a:b6:da:c5:0b:43:c7:f4:08:3e:4e:36:c1:a4:d6:aa:72:2e:
         0f:e3:27:90:2a:b9:82:e7:f4:87:2e:f9:ba:d2:45:ca:66:70:
         e9:7a:0a:bb:66:2d:bf:a0:7b:77:31:c0:be:36:76:cb:f1:f8:
         c7:11:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----