Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/1-MrWjx41MLE2Craolgg-haNHa9U.roa
File:                     1-MrWjx41MLE2Craolgg-haNHa9U.roa (raw, json)
Hash identifier:          tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=
Subject key identifier:   F8:CA:D6:8F:1E:35:30:B1:36:0A:B6:A8:96:08:3E:85:A3:47:6B:D5
Certificate issuer:       /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial:       01957F35627D3144CFCD96AEF9F8A591D10B
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/1-MrWjx41MLE2Craolgg-haNHa9U.roa
Signing time:             Mon 10 Mar 2025 08:39:19 +0000
ROA not before:           Mon 10 Mar 2025 08:39:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212639
IP address blocks:        86.54.201.0/24 maxlen: 24
                          2a14:9380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7f:35:62:7d:31:44:cf:cd:96:ae:f9:f8:a5:91:d1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
        Validity
            Not Before: Mar 10 08:39:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f8cad68f1e3530b1360ab6a896083e85a3476bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:30:c4:ec:de:84:d1:e0:ec:2f:a2:ad:ad:23:
                    bd:51:9d:7e:bb:10:aa:1e:fa:f3:75:80:c8:55:45:
                    e5:5a:4f:bb:88:1a:c3:1e:4f:ab:35:5f:63:09:95:
                    2a:db:06:22:6d:f9:e1:b2:33:5b:b2:75:0b:fd:8b:
                    81:e2:fd:f5:3d:f1:f9:eb:d8:a0:37:d5:6b:6f:77:
                    64:93:59:29:8a:4d:bf:5f:6f:d2:44:b8:8f:17:2d:
                    a9:9f:2f:3c:8b:ab:ae:df:02:40:63:8b:b7:aa:34:
                    e7:40:7c:39:6f:9b:29:16:57:d3:54:10:f6:60:d9:
                    13:58:23:8c:c3:c3:bf:33:3e:ea:45:7b:5e:77:63:
                    d6:4f:ec:ff:53:f8:51:6c:9e:79:0d:c0:49:f9:78:
                    dd:2a:f6:ea:76:72:1b:11:5a:81:61:2e:d9:f6:51:
                    cd:a4:4c:6e:f5:27:2c:f7:08:d2:5b:63:6d:85:aa:
                    e9:a8:d8:06:d4:79:1b:86:99:f4:ce:ab:49:8e:89:
                    08:e1:3e:41:a4:97:8f:9c:77:6d:2f:15:c2:27:52:
                    38:94:b9:02:a9:66:ac:32:62:01:8e:45:22:7f:5d:
                    68:28:c2:32:8f:8e:87:5e:95:68:70:86:08:05:dc:
                    18:6a:0c:76:32:e2:8e:f0:0c:19:d2:a2:c8:22:0d:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:D6:8F:1E:35:30:B1:36:0A:B6:A8:96:08:3E:85:A3:47:6B:D5
            X509v3 Authority Key Identifier:
                keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/1-MrWjx41MLE2Craolgg-haNHa9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.54.201.0/24
                IPv6:
                  2a14:9380::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:a9:39:98:be:e2:a7:52:d0:7d:12:00:2d:63:b0:a2:41:
         5f:a6:e5:37:6c:3d:dc:85:1b:29:27:b8:b8:80:93:08:40:64:
         de:65:0d:02:ae:bc:19:50:9d:9d:2e:0d:c3:7e:8b:bb:9c:7f:
         16:58:24:0c:d1:4e:16:09:83:21:e3:15:58:61:5c:1e:d5:fb:
         d0:9c:92:0c:75:fa:9c:c9:22:34:03:3d:b9:68:ca:56:2a:d5:
         3a:a6:d0:77:85:5d:ba:6c:17:26:0a:0a:fb:8d:d3:88:d7:2e:
         7b:81:e4:bb:74:1d:ae:99:48:52:6e:33:06:3d:2f:df:93:0b:
         99:c8:2a:13:67:27:cc:79:7d:93:86:ba:b0:5f:13:da:49:99:
         dc:78:a2:25:99:19:b3:b1:c1:0e:52:87:35:5d:6a:0b:d2:28:
         a3:1b:0d:bf:b8:b4:fe:1d:ee:4d:35:c6:4e:15:0d:b6:fc:32:
         ee:55:0f:3a:44:93:f3:db:06:89:21:0d:96:46:cb:c6:c9:2e:
         b6:f4:96:c0:12:64:aa:17:73:00:4d:0e:6f:af:b3:08:c7:ea:
         00:c7:3f:cb:43:c3:25:be:21:39:12:db:05:8f:19:17:bd:e3:
         aa:d9:42:95:b3:4a:03:98:1f:31:ea:12:d2:a8:1c:c4:fb:58:
         74:00:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----