Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa
File:                     j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa (raw, json)
Hash identifier:          j/qcNW3gwv3EvcvTrR1cViv4t/1AN5TOvaoTXIrqHig=
Subject key identifier:   8F:B1:7E:9F:90:40:4B:B2:00:57:58:54:CF:60:1D:80:B5:31:5A:0B
Certificate issuer:       /CN=930a463d67e4b42d8639acdf0d15424f82f19a60
Certificate serial:       019420682300CDA728C5689C651D0A887AB9
Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa
Signing time:             Wed 01 Jan 2025 05:48:03 +0000
ROA not before:           Wed 01 Jan 2025 05:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15598
IP address blocks:        193.239.185.0/24 maxlen: 32
                          2001:67c:2a7c::/48 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:23:00:cd:a7:28:c5:68:9c:65:1d:0a:88:7a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60
        Validity
            Not Before: Jan  1 05:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8fb17e9f90404bb200575854cf601d80b5315a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:36:50:df:e6:fe:95:90:d4:00:de:2d:8d:
                    c9:0d:56:2a:c7:9c:89:df:5a:10:b9:7e:22:f4:ac:
                    83:cd:0a:2c:85:33:4f:87:5a:2d:82:db:df:ae:bd:
                    bd:5d:7e:1b:b3:5c:6c:40:f1:ec:9f:7a:49:1f:df:
                    d7:71:bc:e4:c7:1c:15:6e:e8:f2:46:b8:2c:7d:b8:
                    07:58:be:05:0a:57:b1:a5:7d:d5:bb:af:2d:68:3d:
                    76:52:4a:c1:70:a0:de:8d:64:e6:01:79:13:16:42:
                    ea:5c:81:82:1a:f5:92:c9:af:87:28:01:dd:01:2e:
                    7d:94:57:2a:29:da:44:ea:9c:5b:66:27:b9:00:61:
                    5a:09:2c:f1:69:e1:c0:f8:8d:60:76:d3:ed:e0:45:
                    a4:e9:67:49:a9:87:03:57:de:86:6a:67:25:60:17:
                    9b:01:9b:d6:86:e1:36:e1:92:cf:df:23:5f:7d:2a:
                    37:57:bd:0b:09:b3:6c:04:58:e8:23:73:bc:6a:14:
                    f6:95:00:b7:72:87:c8:e7:49:78:ef:38:0d:ad:0c:
                    0a:12:a2:17:58:f5:2f:92:d9:82:f7:b0:63:39:3f:
                    aa:43:bf:b1:e2:b2:45:18:8a:da:2f:63:65:2f:9b:
                    cd:4e:53:24:97:82:68:4f:ff:fb:6f:3e:c5:2a:41:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B1:7E:9F:90:40:4B:B2:00:57:58:54:CF:60:1D:80:B5:31:5A:0B
            X509v3 Authority Key Identifier:
                keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/j7F-n5BAS7IAV1hUz2AdgLUxWgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.185.0/24
                IPv6:
                  2001:67c:2a7c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:92:06:78:d2:f1:13:69:d9:81:c3:f4:69:df:24:f7:c8:
         22:8f:3d:f7:95:82:2e:3b:25:19:62:3d:4a:5c:24:91:b0:74:
         55:c3:1c:b8:79:8c:03:22:bf:b7:94:88:e5:be:af:5c:c7:bc:
         1d:25:e4:66:ad:57:35:ba:e5:99:ed:a6:51:32:ac:88:c6:b3:
         6e:b9:8a:f4:19:2f:09:43:5a:01:e2:47:69:22:b3:50:1b:cc:
         c5:47:33:42:1b:39:46:61:49:72:6e:77:75:60:90:2a:49:7c:
         bb:88:78:27:41:4b:ff:25:29:d6:27:47:ae:57:a8:c7:e7:07:
         50:b9:77:33:99:39:e6:f7:6e:49:f0:9d:b2:89:36:6e:68:3e:
         bc:de:6d:9d:55:75:5b:3f:31:3b:65:ee:99:cc:84:0a:74:eb:
         56:40:95:1c:ab:36:82:f5:e2:ec:14:1c:9c:9b:09:f8:70:17:
         5a:ae:5e:25:21:53:6a:f4:5e:5d:0f:e4:44:53:bc:90:2f:04:
         12:48:c2:4d:4a:44:e2:4c:70:37:e6:41:66:52:b4:07:3e:42:
         84:7a:7c:a7:c1:fb:f5:11:5c:19:1d:90:15:bc:fb:ed:9d:aa:
         dc:38:e0:be:e7:0f:7c:be:c7:15:35:89:19:66:fb:f0:a7:15:
         80:ca:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----