Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa
File:                     _H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa (raw, json)
Hash identifier:          WktPSy7l9BrHoKHlFfEwjyZbcRyoTKbpIr7ITj6OKq8=
Subject key identifier:   FC:7E:59:C2:2C:8E:F3:94:1B:D6:68:7A:A0:B3:1A:0C:2D:43:F2:4E
Certificate issuer:       /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial:       019427B51B8F719F9C8748912BC1B61EEE7C
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa
Signing time:             Thu 02 Jan 2025 15:49:27 +0000
ROA not before:           Thu 02 Jan 2025 15:49:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60111
IP address blocks:        185.157.116.0/22 maxlen: 22
                          2a07:a680::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:1b:8f:71:9f:9c:87:48:91:2b:c1:b6:1e:ee:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
        Validity
            Not Before: Jan  2 15:49:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fc7e59c22c8ef3941bd6687aa0b31a0c2d43f24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:fe:24:15:ff:69:6f:96:38:ae:05:fb:34:
                    8f:d7:36:2c:d6:05:09:a7:93:26:49:c7:06:79:1e:
                    90:88:d0:cd:a3:15:41:a0:e0:56:41:9e:ee:39:ad:
                    70:1f:ff:65:2d:5f:1b:1a:06:56:0c:d8:cf:b7:c4:
                    df:9a:c6:5a:5a:08:fd:ca:b1:45:2e:f2:2b:8e:a6:
                    8b:ac:20:9e:57:cd:84:d6:3f:31:0e:0c:74:33:c9:
                    66:51:a7:6c:78:0f:cb:b3:c6:33:6c:b9:5e:fb:1e:
                    79:5a:49:ba:6b:e1:0e:da:97:c7:fa:da:97:38:b0:
                    76:c3:24:9c:7c:f7:72:c1:7b:5a:65:c0:2f:ad:73:
                    6d:bf:ad:14:25:44:d4:37:7a:ae:1e:46:45:a6:0e:
                    01:ac:a3:3b:c7:31:1a:51:0d:59:1b:97:26:82:85:
                    3b:df:69:d6:a0:32:67:7c:fe:b5:0c:02:4d:14:c3:
                    5f:43:18:88:32:de:dd:87:08:d7:cf:65:7e:df:e8:
                    98:05:d4:7c:21:89:73:b9:4a:a2:5f:49:87:d8:21:
                    82:54:46:86:4a:a1:3f:ce:56:00:4d:2e:44:a6:31:
                    ed:15:d0:53:10:38:91:47:94:25:15:e8:1d:7c:24:
                    52:22:5d:05:62:c3:ca:cc:a4:f1:e1:f2:65:41:4d:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:59:C2:2C:8E:F3:94:1B:D6:68:7A:A0:B3:1A:0C:2D:43:F2:4E
            X509v3 Authority Key Identifier:
                keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/_H5ZwiyO85Qb1mh6oLMaDC1D8k4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.157.116.0/22
                IPv6:
                  2a07:a680::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:8d:5e:ef:a8:14:4b:39:a9:be:ee:12:b6:22:aa:98:ba:
         68:29:54:9f:7d:fe:98:fe:46:ec:8c:2f:f4:c0:0c:2e:d0:73:
         7e:20:97:fb:1c:33:27:1a:fc:a7:ac:b2:5f:7a:9c:8b:73:2e:
         fa:ae:70:c9:5d:c4:fb:57:08:f2:0f:2f:a0:54:8e:e8:b3:00:
         a7:12:7a:8b:cd:21:c7:e1:4f:74:96:0d:6a:15:83:da:99:da:
         14:93:e8:1b:5c:9e:5e:64:59:fb:ca:79:b4:07:02:ec:50:d4:
         7b:eb:1c:5b:76:08:70:33:61:17:09:ca:1c:61:44:93:a8:fd:
         7a:fe:af:a8:f9:cd:74:5b:6e:9b:c0:82:15:76:03:9f:80:1e:
         25:19:67:d2:72:dc:38:52:d9:cd:21:0e:d0:e5:64:f2:ba:8f:
         f4:52:dc:38:15:cd:60:6d:bb:8f:23:35:fc:5d:87:29:e5:e7:
         07:c7:88:1d:bc:08:13:31:7a:8f:22:7b:b2:b6:46:1b:60:18:
         69:8a:68:92:20:67:30:2d:56:98:1b:a7:ad:a1:05:64:38:62:
         f2:2a:67:df:93:8b:f9:98:e4:c9:72:c2:8f:9f:65:ba:68:1b:
         26:4d:e9:01:53:65:80:dd:7f:df:9f:d2:57:f5:dc:86:e5:d9:
         a2:b4:e6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----