Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/YxveI4ih6pTB1sKFupGdm18Smzc.roa
File:                     YxveI4ih6pTB1sKFupGdm18Smzc.roa (raw, json)
Hash identifier:          dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=
Subject key identifier:   63:1B:DE:23:88:A1:EA:94:C1:D6:C2:85:BA:91:9D:9B:5F:12:9B:37
Certificate issuer:       /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial:       019426D9D6621D7E0940C2B5CF76407A64AC
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/YxveI4ih6pTB1sKFupGdm18Smzc.roa
Signing time:             Thu 02 Jan 2025 11:49:57 +0000
ROA not before:           Thu 02 Jan 2025 11:49:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214396
IP address blocks:        193.42.32.0/23 maxlen: 23
                          2001:3600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:d6:62:1d:7e:09:40:c2:b5:cf:76:40:7a:64:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
        Validity
            Not Before: Jan  2 11:49:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=631bde2388a1ea94c1d6c285ba919d9b5f129b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:d3:de:c9:c7:9d:63:6d:49:a6:e8:b0:79:
                    aa:66:19:0d:7b:3c:5b:1d:ce:75:b0:6b:ff:cb:af:
                    1d:9c:a8:c1:1f:ca:49:67:f1:11:5d:fb:eb:cf:5c:
                    02:f9:d9:89:fa:3f:82:a2:91:47:ae:f9:e4:1c:81:
                    bd:cd:d7:59:4e:92:20:23:f8:8e:fd:54:8a:26:7b:
                    97:06:4a:27:1e:82:e9:c2:a6:a9:8a:41:9a:5a:99:
                    f0:91:3c:f5:79:93:e9:03:0f:35:b2:74:ab:fc:cd:
                    60:ec:06:58:38:0b:38:7b:80:a0:11:4d:a2:ea:cf:
                    c4:ca:51:6a:f9:b6:81:6f:29:75:b5:55:04:b5:1e:
                    ff:a2:8d:0f:69:a5:84:54:10:c9:8a:68:1a:30:de:
                    76:c9:1d:7e:9c:d8:7f:f9:a6:f7:87:bb:f7:b3:b5:
                    a9:35:4c:94:cb:06:7b:f8:fd:4c:5e:06:ff:26:40:
                    73:69:92:99:09:be:d0:0f:c6:38:5a:72:de:13:d0:
                    6b:ed:bc:fb:cb:03:78:2e:44:aa:5e:85:07:d3:a2:
                    b3:22:55:5c:ab:27:c7:ef:50:3c:77:39:00:27:22:
                    af:6c:bb:a4:82:f8:d5:6a:62:a6:9d:98:64:24:83:
                    40:01:dc:c5:a2:d6:0b:51:da:06:9b:97:2c:0c:fe:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1B:DE:23:88:A1:EA:94:C1:D6:C2:85:BA:91:9D:9B:5F:12:9B:37
            X509v3 Authority Key Identifier:
                keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/YxveI4ih6pTB1sKFupGdm18Smzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.42.32.0/23
                IPv6:
                  2001:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:f3:3e:b7:4f:cf:79:eb:b5:04:a9:0a:d5:44:d7:21:5c:e1:
         00:8b:59:5b:1e:d1:da:89:c4:a3:5d:00:8e:b7:f1:e6:90:74:
         3d:92:c7:34:c8:ab:5b:2f:8b:ee:db:30:a8:0e:f1:25:c1:4b:
         fe:7c:30:35:ab:6e:55:0f:3d:57:b3:dc:56:77:22:de:42:6c:
         52:ea:5b:aa:8d:2d:0f:d5:bf:5e:bf:ec:e6:c0:da:73:7a:99:
         54:e5:15:60:8d:d8:79:63:51:1b:8f:34:8a:6a:56:bf:30:26:
         71:e0:92:39:8c:c2:80:ee:24:15:60:ab:b4:54:b5:23:a7:1d:
         7f:c1:18:e9:b5:1b:bd:89:e1:c9:14:fd:f7:85:78:e7:bf:68:
         73:a4:d0:e0:79:d2:8a:f5:7f:9a:16:b2:40:02:90:1f:3f:ea:
         f7:5f:d3:1a:5e:d7:85:41:78:34:5d:ee:fc:9a:f6:12:10:84:
         f0:ae:4b:f0:15:ee:5e:42:7a:03:98:38:77:1e:a5:f5:9c:39:
         d1:8d:59:ab:03:c1:e1:29:c6:f5:18:3d:06:49:35:7e:e8:77:
         43:d6:a9:f4:9c:34:f3:07:6b:25:ea:5a:ff:4d:42:b7:07:f6:
         6c:2c:90:26:92:70:e9:13:85:4c:aa:54:50:b1:c0:ee:55:d2:
         95:9b:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----