Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fz5OQX3YNuZKli23fQPsHJMHAjg.roa
File:                     fz5OQX3YNuZKli23fQPsHJMHAjg.roa (raw, json)
Hash identifier:          2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=
Subject key identifier:   7F:3E:4E:41:7D:D8:36:E6:4A:96:2D:B7:7D:03:EC:1C:93:07:02:38
Certificate issuer:       /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial:       019421445352F6564CA594BB0FB4C7C0E68B
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fz5OQX3YNuZKli23fQPsHJMHAjg.roa
Signing time:             Wed 01 Jan 2025 09:48:33 +0000
ROA not before:           Wed 01 Jan 2025 09:48:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59712
IP address blocks:        185.1.0.0/24 maxlen: 24
                          2001:7f8:70::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:53:52:f6:56:4c:a5:94:bb:0f:b4:c7:c0:e6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
        Validity
            Not Before: Jan  1 09:48:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7f3e4e417dd836e64a962db77d03ec1c93070238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f6:7b:be:c3:76:18:d9:3b:d4:21:de:15:20:
                    49:a1:95:7c:18:7a:23:31:88:78:e9:9a:e5:f4:e5:
                    8a:29:17:65:5d:2a:ee:0a:bf:e9:45:8e:79:7a:61:
                    51:52:bb:87:c3:ff:f8:20:f2:65:4a:87:8b:f3:92:
                    4c:60:a9:a4:77:f5:76:5c:2f:63:fb:81:00:88:b4:
                    da:f3:57:b5:f8:80:53:c7:87:19:3d:f4:52:04:19:
                    93:78:7a:d2:8b:ab:a0:91:be:37:d8:6b:c1:b3:90:
                    65:aa:1f:e0:7d:1d:b8:62:c5:2b:7e:38:3c:87:a2:
                    45:62:fc:a7:b7:58:55:02:a4:b7:0d:af:94:f5:f8:
                    fa:a9:8c:f5:28:c0:d1:91:21:e7:74:91:dc:2f:40:
                    f2:d6:cd:fd:88:8e:de:c0:31:1b:6f:cd:54:78:3e:
                    47:05:48:93:83:70:8f:4b:0a:cd:e2:1a:b0:7b:b7:
                    b1:72:93:70:96:c6:4f:be:69:8c:f5:e4:b4:1d:dd:
                    8d:bf:3f:b0:06:ee:0b:73:34:e6:63:ef:47:d8:9b:
                    76:30:f4:ab:66:88:fa:8f:77:f5:89:b3:65:d9:33:
                    26:cb:ba:a5:2a:87:cc:59:85:65:1d:02:52:ff:a2:
                    86:6d:ba:41:98:9a:f4:97:8f:85:ec:9f:f9:77:9f:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3E:4E:41:7D:D8:36:E6:4A:96:2D:B7:7D:03:EC:1C:93:07:02:38
            X509v3 Authority Key Identifier:
                keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/fz5OQX3YNuZKli23fQPsHJMHAjg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.0.0/24
                IPv6:
                  2001:7f8:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:21:31:19:23:00:05:56:1e:f9:1e:5f:1c:2b:de:8d:10:
         97:0a:be:d2:5e:0d:91:f8:8e:04:58:7f:27:1f:62:a2:22:b6:
         2d:1b:57:6f:c2:c2:71:71:db:77:6d:73:06:9e:9b:97:9e:f9:
         cc:e4:12:20:4e:b5:33:20:a7:4d:b6:72:93:47:ab:33:d6:fd:
         ef:2a:72:a8:69:c3:ec:67:4a:e6:0f:8a:23:82:5c:df:cc:2f:
         92:98:32:a4:63:53:6f:88:47:b0:47:cb:4e:5f:27:bb:ca:64:
         97:42:e2:d4:30:be:c4:5d:13:1a:78:8d:35:71:b0:42:f1:ce:
         f3:dc:88:6e:86:53:4a:5c:c7:bb:24:12:66:bc:a6:ea:b6:c3:
         fd:d1:32:ba:a7:e2:2f:cd:e4:19:cd:0c:e7:56:e3:f6:a3:f1:
         7a:ca:64:08:6b:cc:80:61:0b:05:38:62:94:02:b6:f7:7d:0a:
         08:c0:f0:ff:63:aa:c5:45:cb:13:24:e8:eb:1e:7b:f1:de:11:
         b3:57:96:bc:61:d4:f7:2c:f5:0e:8d:b4:11:e7:4e:0f:7a:71:
         49:5d:e6:c7:b4:8a:05:93:14:c7:5f:b1:c4:d4:92:5b:de:fe:
         a0:51:c4:62:6a:b8:eb:1e:0d:26:ea:75:b4:6e:2c:77:bd:43:
         76:86:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----