Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/wvpX23IN2w8d2-KXP6RepnCHP3g.roa
File:                     wvpX23IN2w8d2-KXP6RepnCHP3g.roa (raw, json)
Hash identifier:          hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=
Subject key identifier:   C2:FA:57:DB:72:0D:DB:0F:1D:DB:E2:97:3F:A4:5E:A6:70:87:3F:78
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       01942444EAD0A8662C87536EE64B2C6F4757
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/wvpX23IN2w8d2-KXP6RepnCHP3g.roa
Signing time:             Wed 01 Jan 2025 23:48:03 +0000
ROA not before:           Wed 01 Jan 2025 23:48:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47485
IP address blocks:        139.28.252.0/22 maxlen: 22
                          2a09:dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:ea:d0:a8:66:2c:87:53:6e:e6:4b:2c:6f:47:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Jan  1 23:48:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c2fa57db720ddb0f1ddbe2973fa45ea670873f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:ad:ea:27:ef:6c:c2:06:07:79:60:7a:1c:
                    aa:05:48:75:4c:1f:ce:61:05:e4:e0:72:09:62:3a:
                    12:5c:d1:9d:28:92:9f:d6:93:2d:e6:d2:15:dc:b1:
                    93:57:aa:ea:55:09:ca:69:b7:52:ae:0f:e2:bc:e1:
                    08:39:f6:93:2f:ed:dd:24:0c:f0:a0:64:ea:7c:27:
                    3c:26:df:80:3d:51:93:7c:d4:6e:28:ea:a1:76:da:
                    53:2f:66:80:35:ba:09:17:d4:f9:fc:db:a4:0e:13:
                    b2:13:8d:78:a2:f8:d3:ec:90:1c:e7:8d:77:01:bb:
                    b4:59:e9:a2:d2:fd:e5:d3:c3:1d:c4:a7:e0:e9:8e:
                    c8:4b:ec:2a:94:62:e8:ab:75:7b:2e:ad:52:28:3b:
                    c4:94:0c:5d:49:38:ef:77:67:db:ac:18:13:3c:77:
                    11:a2:fe:94:9b:d7:ee:2a:25:a0:4a:23:58:65:44:
                    9b:62:ee:4c:26:a5:ce:4e:9d:d7:f2:9d:51:40:61:
                    ef:a0:56:64:0a:32:74:ce:e1:31:0f:fa:d1:e7:9b:
                    78:8d:4e:4b:8b:be:96:2f:a7:53:85:b7:5a:92:3c:
                    37:31:b6:e5:88:68:7d:c9:04:fd:99:ce:24:12:be:
                    47:1a:f3:56:e1:93:15:f1:90:76:5e:27:7a:f1:48:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:57:DB:72:0D:DB:0F:1D:DB:E2:97:3F:A4:5E:A6:70:87:3F:78
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/wvpX23IN2w8d2-KXP6RepnCHP3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.28.252.0/22
                IPv6:
                  2a09:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ec:b1:90:30:1d:d8:a1:1a:3a:88:ae:85:3e:32:e3:69:70:25:
         ed:8b:c8:22:26:fc:aa:c9:ae:73:48:e6:d2:3e:24:18:49:ab:
         4d:f5:75:2e:32:09:f5:22:8f:c2:60:64:72:ba:a2:5b:02:66:
         8c:04:04:c7:c7:e6:9f:e2:e2:f2:4c:4c:f7:33:ef:ea:91:65:
         b8:66:81:f5:4f:b8:ea:a2:4c:ba:74:cb:bd:3c:c1:81:87:30:
         26:72:f3:5a:3c:10:41:52:19:56:a7:57:a1:d0:0c:57:14:4f:
         15:21:5a:d4:18:89:50:07:7f:30:fd:eb:27:87:f0:81:63:4d:
         4e:f8:dd:7f:ff:17:cc:b2:67:2b:3a:29:26:83:8c:6c:f4:03:
         38:91:7e:0d:0b:bf:a7:f2:c0:7a:c2:0d:60:1e:d6:7e:52:24:
         71:32:5d:94:7a:33:b0:bb:2b:28:43:42:10:ad:14:97:b7:7a:
         7d:79:ef:06:5c:40:7b:8e:79:03:53:ce:ce:23:58:e9:e0:05:
         43:2e:ee:40:98:18:74:8a:e1:8f:67:d6:e4:35:5b:72:18:4a:
         6e:e7:1b:86:a1:5d:6e:fe:8f:da:2e:87:aa:af:bb:4e:c0:4b:
         47:10:66:7c:bc:da:df:d3:02:d3:a4:c6:78:45:be:5d:dc:b8:
         81:c0:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----