Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/iRncY0RPMdG6ZS1FNbvbNQvbM88.roa
File:                     iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (raw, json)
Hash identifier:          cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=
Subject key identifier:   89:19:DC:63:44:4F:31:D1:BA:65:2D:45:35:BB:DB:35:0B:DB:33:CF
Certificate issuer:       /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial:       019425FCCC65E35B82BC333DC762D3E38247
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/iRncY0RPMdG6ZS1FNbvbNQvbM88.roa
Signing time:             Thu 02 Jan 2025 07:48:31 +0000
ROA not before:           Thu 02 Jan 2025 07:48:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60601
IP address blocks:        185.11.216.0/24 maxlen: 24
                          2a03:69c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:cc:65:e3:5b:82:bc:33:3d:c7:62:d3:e3:82:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
        Validity
            Not Before: Jan  2 07:48:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8919dc63444f31d1ba652d4535bbdb350bdb33cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:26:98:5c:2c:81:6f:fe:ab:be:de:02:f3:
                    fb:b2:a1:be:af:a4:99:ba:13:74:9f:c7:2f:45:93:
                    44:41:ee:45:1d:50:48:18:61:d9:dd:87:0c:cd:19:
                    81:78:52:4d:d8:72:8f:67:02:ec:72:d9:88:f2:0a:
                    68:a6:69:63:6d:e7:1e:d4:5e:ab:61:26:c2:51:d7:
                    20:0c:56:6e:73:bc:ed:65:20:6d:d6:25:ac:48:6f:
                    95:71:8c:64:d4:be:76:8d:b0:c0:47:99:eb:c1:ce:
                    9b:b6:7e:7d:d1:35:05:46:05:0a:f3:84:ed:5b:f2:
                    eb:74:f9:8f:ba:a7:ae:24:cb:1d:7f:0e:75:26:17:
                    4c:11:ad:df:57:4a:7c:ea:bc:42:d1:fc:8e:01:96:
                    73:25:dd:65:b1:a9:53:cd:d0:f1:78:41:2f:3b:40:
                    67:8c:f2:86:2c:59:b9:a7:a9:63:2e:61:7b:8b:24:
                    da:7f:9e:d3:1d:3e:2e:1f:ad:a8:11:f2:8c:d8:34:
                    0b:ec:3f:49:14:b8:71:38:6b:5b:a5:50:1f:8a:7c:
                    8b:ac:c2:35:34:50:67:bb:60:58:0f:96:c6:6d:8b:
                    d1:c7:dc:64:88:df:da:0f:40:f8:bf:a4:bb:f9:c4:
                    e5:ce:cd:a1:82:41:df:f0:d0:c8:67:f8:e5:97:48:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:DC:63:44:4F:31:D1:BA:65:2D:45:35:BB:DB:35:0B:DB:33:CF
            X509v3 Authority Key Identifier:
                keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/iRncY0RPMdG6ZS1FNbvbNQvbM88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.11.216.0/24
                IPv6:
                  2a03:69c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:45:9d:13:9d:cd:f2:1d:fc:96:d9:d2:f9:02:63:fc:60:88:
         b0:d9:db:f5:51:b4:ef:c5:03:a1:8b:7a:df:d0:7e:ce:31:e0:
         8c:c5:a3:b5:c6:8f:9a:ab:a5:27:95:32:6d:1c:86:18:cf:79:
         f2:bc:bd:82:1e:6c:e4:52:8f:22:b2:53:95:b1:6a:67:04:fe:
         df:6e:38:45:46:e0:20:b8:fe:fd:60:dd:44:e0:0c:c6:89:a8:
         3e:29:0d:e9:31:ce:d2:b0:1f:0d:f2:dd:5e:56:5b:8d:47:c1:
         9d:d0:fe:51:f5:8d:c8:bb:89:5e:df:27:45:fa:81:15:40:8e:
         f1:c4:27:c9:cf:be:9c:53:99:54:19:fc:d3:e0:f8:54:b9:06:
         39:2b:dd:02:30:c9:b9:4e:21:50:52:aa:22:e4:98:59:0a:cf:
         99:71:71:72:f6:38:d7:47:2b:bf:c4:27:2f:e0:24:77:5e:1f:
         5a:3d:fb:f9:3f:e0:7f:e8:b4:8d:56:c7:ff:66:9a:f5:3f:58:
         9e:b0:d2:9b:a3:2b:62:05:ef:cd:5b:47:d2:90:39:5b:d7:22:
         d5:5e:6c:8b:b9:16:4c:52:0a:9f:cc:46:a1:97:f7:a4:89:18:
         8c:8f:4b:07:af:86:19:33:ec:81:04:9f:f7:cd:76:d1:8a:cc:
         fc:8c:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----