Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/9PU-dwXh8J774CCsWIorhIGYnyw.roa
File:                     9PU-dwXh8J774CCsWIorhIGYnyw.roa (raw, json)
Hash identifier:          /VU9Rm1mHPw29nej4mrx/ryrHINO8++GPliHtC6Trzc=
Subject key identifier:   F4:F5:3E:77:05:E1:F0:9E:FB:E0:20:AC:58:8A:2B:84:81:98:9F:2C
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       0193B7E2506669B7DBAA15F03C1C3AA096BF
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/9PU-dwXh8J774CCsWIorhIGYnyw.roa
Signing time:             Wed 11 Dec 2024 22:41:22 +0000
ROA not before:           Wed 11 Dec 2024 22:41:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208976
IP address blocks:        45.130.46.0/24 maxlen: 24
                          2a12:66c0::/32 maxlen: 32
                          2a12:66c7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b7:e2:50:66:69:b7:db:aa:15:f0:3c:1c:3a:a0:96:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Dec 11 22:41:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f4f53e7705e1f09efbe020ac588a2b8481989f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:26:64:26:f2:16:12:d2:cb:1f:43:a6:d9:aa:
                    8c:1c:10:e8:32:b7:d7:7b:79:de:75:a6:87:a3:be:
                    00:5b:f3:9c:45:0f:c2:de:45:12:83:b7:3c:c8:2b:
                    0e:43:06:f8:cc:14:90:08:a3:47:2d:17:a6:33:8a:
                    a3:0f:de:e5:a9:53:56:4b:e3:48:f1:d5:e4:2f:0f:
                    17:89:73:de:5f:62:e2:ae:75:c2:ae:3e:f6:ed:2c:
                    65:d9:8d:ef:de:a7:43:af:ed:3a:7e:15:a7:71:f9:
                    20:8d:2e:49:22:1e:7c:81:93:28:df:fc:76:a9:0f:
                    ec:08:03:58:02:c0:3d:22:c0:22:23:23:ce:c6:44:
                    07:6a:66:06:0f:55:dd:fc:12:ba:5a:68:09:ac:d0:
                    db:80:f5:4a:50:15:8a:66:e3:b7:c9:9e:d7:c8:2a:
                    b9:28:6d:b3:a6:24:5b:8a:9b:ee:fb:dc:c5:08:f2:
                    4a:67:74:0f:24:2a:3c:6d:02:5a:7c:6a:0d:98:a6:
                    06:d4:d4:2a:b3:ce:91:c0:93:d1:ec:cc:7c:32:7d:
                    7e:bc:47:f3:d5:1b:b1:7e:3c:23:a7:7a:56:ba:85:
                    06:e3:6a:08:9f:e4:fd:08:34:59:eb:cb:89:80:7e:
                    d3:cc:4f:84:58:c5:93:b0:5c:80:31:0b:b1:77:98:
                    f9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F5:3E:77:05:E1:F0:9E:FB:E0:20:AC:58:8A:2B:84:81:98:9F:2C
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/9PU-dwXh8J774CCsWIorhIGYnyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.46.0/24
                IPv6:
                  2a12:66c0::/32
                  2a12:66c7::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:38:ec:cb:90:d2:f0:f0:5d:12:96:a6:cc:b3:dd:74:e1:
         3f:bb:2c:8c:b7:04:fb:fb:cf:ae:60:a9:60:32:f5:08:e5:f8:
         74:1d:5f:15:83:f5:c9:49:4f:b3:94:69:d8:ac:6f:36:b6:03:
         be:54:5f:8c:ac:17:88:b5:af:c4:2b:0e:c8:26:83:f7:5b:e5:
         3c:c7:4c:ab:f8:42:6a:3e:c6:96:03:74:62:66:9d:86:8b:fd:
         e5:01:6b:74:7e:d8:f7:a0:6e:d1:20:f0:90:e6:e3:59:b3:32:
         6c:32:bb:5c:ba:d5:d2:dd:99:39:73:df:a8:e1:d4:a6:5d:63:
         e7:d2:1a:17:5a:cc:e3:e5:19:7f:c2:9f:41:aa:e3:f2:ab:64:
         0c:5c:3a:a5:07:3b:85:f5:ee:21:3e:17:0a:81:ca:3f:0b:ff:
         25:65:57:e2:d2:7c:3a:77:ad:8e:38:1c:00:64:b1:32:d8:1e:
         a0:eb:37:95:97:3b:cb:52:2f:2a:33:47:2d:01:53:f5:b3:43:
         d2:23:df:a3:7c:5f:c8:4d:9a:54:04:34:75:94:c9:8b:74:60:
         62:b8:e9:5f:21:ee:44:e1:a5:4d:b7:ad:43:6d:1c:e2:82:dd:
         53:93:ab:09:ac:af:22:92:81:14:b3:00:2e:84:d5:f3:9e:4f:
         23:64:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----