Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa
File:                     H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa (raw, json)
Hash identifier:          MrFKT5HifVb8WtkT0D1HsRfweQopMnxqy5W6wHomHZU=
Subject key identifier:   1F:EB:F9:A6:29:E1:D6:BD:03:AA:F5:2E:67:80:E9:AF:E2:D5:BF:DB
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       01942068424815E85BF7290AB82F4B7B8BDE
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa
Signing time:             Wed 01 Jan 2025 05:48:11 +0000
ROA not before:           Wed 01 Jan 2025 05:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210858
IP address blocks:        45.142.14.0/24 maxlen: 24
                          2a0b:100::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:42:48:15:e8:5b:f7:29:0a:b8:2f:4b:7b:8b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Jan  1 05:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1febf9a629e1d6bd03aaf52e6780e9afe2d5bfdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:1a:23:ae:38:fb:7e:a4:af:54:67:c6:55:
                    9a:f8:70:8a:61:d7:bb:2d:7a:35:d9:4c:29:b1:3c:
                    c4:ba:66:56:4e:6e:f3:55:aa:76:32:e6:05:18:3d:
                    36:92:36:c6:bd:d0:07:db:1d:04:4a:a0:1a:50:3d:
                    c1:a7:cf:40:5a:a5:0a:da:c4:a7:d1:97:41:77:ff:
                    01:04:ed:17:dc:eb:61:89:f0:cd:cd:5e:fa:f4:88:
                    dc:0d:a4:a9:cd:71:cc:22:c4:e9:30:ab:a6:2c:b5:
                    8e:0d:b2:87:5b:9c:12:9d:9a:80:26:8f:85:6a:b9:
                    db:6c:df:41:14:1e:10:55:a9:b8:52:76:b8:4d:f3:
                    10:bd:b4:1d:3e:71:5f:be:2f:3e:99:d5:7d:a1:8c:
                    14:a0:bb:a2:cc:9e:36:92:0a:1f:cc:bb:be:24:b5:
                    1b:1d:3a:cd:d2:15:b7:82:c7:47:97:e6:51:1d:98:
                    89:05:04:7a:56:4a:74:ce:40:fa:38:02:9a:d5:de:
                    a9:d0:32:db:f3:9e:44:88:af:67:2f:1d:4d:bf:b4:
                    5f:44:6d:5a:1e:b8:61:35:c1:bf:3f:8b:eb:64:fa:
                    d6:bb:53:ce:6f:2f:75:31:c2:d7:1d:c8:28:31:13:
                    85:45:a8:49:5a:7b:74:16:9f:4d:f3:65:62:26:ed:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:F9:A6:29:E1:D6:BD:03:AA:F5:2E:67:80:E9:AF:E2:D5:BF:DB
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/H-v5pinh1r0DqvUuZ4Dpr-LVv9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.14.0/24
                IPv6:
                  2a0b:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:f7:9b:69:42:f4:a7:e5:c2:fb:61:36:fd:b3:52:9a:45:e7:
         2a:53:18:6b:15:d4:30:9e:03:aa:16:64:28:47:f4:6a:10:61:
         46:3f:47:3a:8b:fa:c1:65:7a:e8:e7:2b:5a:2b:f7:d4:97:b9:
         c0:a0:27:c6:51:81:06:87:7c:fa:d9:03:27:92:b3:17:7d:16:
         30:0c:6b:6a:6f:c7:52:0b:ce:a7:79:bb:4e:e9:c9:6e:e8:12:
         8b:30:2c:1e:0b:35:da:e2:3e:ea:bc:c9:e1:57:0b:4d:95:63:
         c6:89:1c:6e:d3:12:35:6e:4e:b0:9c:f3:5f:e3:f4:8a:96:dc:
         70:47:28:82:5b:49:a8:51:ed:05:3d:97:f4:de:c7:e3:eb:52:
         2c:3c:75:4e:53:1d:8f:78:54:4f:69:a3:55:36:fd:3b:e5:11:
         84:f3:51:e3:b3:56:28:3c:62:40:c3:ac:bf:ae:83:7f:fd:c0:
         01:32:e2:f2:68:c4:3f:2c:43:86:66:b4:ce:6c:d9:71:c7:32:
         6e:dd:69:5f:0b:81:9a:81:1f:32:eb:96:91:de:f0:44:aa:d4:
         e1:79:7d:d2:4c:3c:42:f0:62:7a:b6:53:ea:f2:23:da:e7:c2:
         ee:bb:0d:3a:bf:f0:45:02:22:74:46:a7:7e:64:5b:e8:0a:f0:
         de:25:f7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----