Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa
File:                     E6umy5_OlHHb3NOgNKiaqTj372A.roa (raw, json)
Hash identifier:          kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=
Subject key identifier:   13:AB:A6:CB:9F:CE:94:71:DB:DC:D3:A0:34:A8:9A:A9:38:F7:EF:60
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       019425FD6002CD8F8C98B3EEFCDC6E3503CF
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa
Signing time:             Thu 02 Jan 2025 07:49:09 +0000
ROA not before:           Thu 02 Jan 2025 07:49:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212014
IP address blocks:        89.35.226.0/24 maxlen: 24
                          2a0a:d6c0:226::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:60:02:cd:8f:8c:98:b3:ee:fc:dc:6e:35:03:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Jan  2 07:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13aba6cb9fce9471dbdcd3a034a89aa938f7ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f9:8a:ce:7c:12:54:4f:cb:dd:0f:49:5e:39:
                    bc:e6:70:f8:d1:6d:6c:94:8e:ff:9f:22:4b:3e:03:
                    a8:63:9d:82:47:47:65:90:09:0f:2e:c7:b3:7b:5d:
                    14:89:0e:42:d3:7e:76:3d:f3:c8:40:99:f2:a0:33:
                    2f:32:26:09:43:0d:02:63:9c:3c:95:21:75:16:a9:
                    a4:17:69:83:31:d3:88:29:3b:a7:0b:06:01:0e:30:
                    7e:83:8d:a6:d0:bc:70:79:db:f2:c7:8b:c8:dc:91:
                    73:11:04:d9:a7:64:ec:e2:94:39:a1:1a:6f:6f:e7:
                    24:51:00:30:12:fd:63:af:1c:b6:14:c6:b7:e2:09:
                    50:c9:69:91:e3:a6:26:df:59:66:a8:1b:39:1b:6d:
                    04:28:06:99:cb:c2:d5:22:e8:90:ce:50:61:4f:36:
                    6f:4a:0b:30:d6:86:cc:a8:81:59:99:55:8e:71:09:
                    ca:ba:cd:e0:bf:3f:de:65:cb:f5:bf:f7:93:60:02:
                    76:3c:63:71:44:4e:42:25:58:9f:cd:0a:d6:6d:68:
                    41:77:4b:51:7a:e5:6b:75:f3:1c:a7:0f:38:4e:5f:
                    6a:71:c8:99:57:21:26:ca:db:ee:2e:56:a1:6e:de:
                    c8:a1:fa:1b:2e:dd:8a:3f:42:97:6a:b7:51:be:9e:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AB:A6:CB:9F:CE:94:71:DB:DC:D3:A0:34:A8:9A:A9:38:F7:EF:60
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/E6umy5_OlHHb3NOgNKiaqTj372A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.226.0/24
                IPv6:
                  2a0a:d6c0:226::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:12:5b:2c:ac:f6:f0:b2:85:fb:ed:45:5c:1a:ee:d1:c4:95:
         dc:e7:f0:93:ad:57:c0:f5:ac:23:02:09:ca:81:88:a6:76:6e:
         41:a6:4a:52:e9:83:2b:ed:fc:03:bb:86:27:0d:ea:be:78:3b:
         48:18:3c:25:bd:66:33:83:6f:36:e3:67:27:87:68:00:78:84:
         f5:ab:12:ba:df:0d:f2:21:c8:cf:f4:ca:9d:1e:18:79:65:b1:
         c6:e0:84:08:2b:6b:b9:fb:71:74:8e:ad:0b:a5:c6:0d:c6:41:
         4f:5e:d1:80:be:6e:c8:4a:3f:1c:da:81:49:72:8f:c7:64:d8:
         95:da:cc:d6:9f:ea:42:2d:a0:fa:17:1f:6f:b9:63:d1:ca:36:
         08:e4:0a:1f:6d:fb:8b:b9:5d:dd:a2:57:ee:99:4d:d3:7c:2d:
         60:7f:8c:d3:ac:1d:ea:05:47:f1:37:92:ee:05:9c:aa:f0:9e:
         77:e3:09:0c:2b:52:22:e7:78:c1:aa:a2:6e:13:ca:67:b5:74:
         c2:65:ed:fa:16:08:70:d8:52:b1:57:12:44:3a:8f:ce:68:7c:
         24:bf:df:72:e1:b9:fb:e0:e4:ee:fa:ab:07:5d:0e:a2:8e:9a:
         98:80:9d:16:ee:44:7c:e5:2d:f5:f1:77:33:fc:07:18:4c:a2:
         d7:9b:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----