Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/UDJ25qWD57Bw7FcU1JLbyObIuuo.roa
File:                     UDJ25qWD57Bw7FcU1JLbyObIuuo.roa (raw, json)
Hash identifier:          DrbNben6Azyc3081NKjsbYp37NNjbptdcPBV8kesvaU=
Subject key identifier:   50:32:76:E6:A5:83:E7:B0:70:EC:57:14:D4:92:DB:C8:E6:C8:BA:EA
Certificate issuer:       /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial:       019420686BE31154126A9C5F80FC54A201D6
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/UDJ25qWD57Bw7FcU1JLbyObIuuo.roa
Signing time:             Wed 01 Jan 2025 05:48:21 +0000
ROA not before:           Wed 01 Jan 2025 05:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216258
IP address blocks:        92.42.98.0/24 maxlen: 26
                          2a13:2140::/32 maxlen: 48
                          2a13:2141:1::/48 maxlen: 48
                          2a13:2141:2::/48 maxlen: 48
                          2a13:2142:1::/48 maxlen: 48
                          2a13:2142:2::/48 maxlen: 48
                          2a13:2143:1::/48 maxlen: 48
                          2a13:2144::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:6b:e3:11:54:12:6a:9c:5f:80:fc:54:a2:01:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
        Validity
            Not Before: Jan  1 05:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=503276e6a583e7b070ec5714d492dbc8e6c8baea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:5f:fa:c6:7f:d3:f1:c0:27:7c:cc:44:9a:
                    71:49:19:9a:ae:8d:1a:1f:64:0d:1d:bd:e8:e0:79:
                    9c:30:31:21:3b:f6:56:e4:64:e7:e7:85:d7:33:f8:
                    55:8b:84:17:db:e3:3c:70:cb:53:db:74:b6:aa:fb:
                    61:05:e5:53:69:93:94:79:d1:db:11:8e:ae:6a:1e:
                    16:37:71:16:64:76:e6:4a:74:e8:7d:c0:2f:f9:c4:
                    50:8e:c9:a7:88:ea:58:36:fd:9d:07:9f:40:b0:ab:
                    a8:31:78:a6:96:46:02:82:50:f6:ef:8c:1c:30:5f:
                    75:b7:30:b9:f0:8a:e8:4d:e7:aa:60:41:1e:76:af:
                    f4:0b:9b:8e:0e:cf:c3:e2:26:b2:d3:85:1d:7b:4e:
                    f6:01:bf:2a:0c:17:2a:a2:33:1f:0f:11:a3:de:8c:
                    11:b3:f6:50:e3:ac:c9:7f:03:de:12:e9:21:74:4d:
                    cd:9f:ce:f7:46:3a:11:b2:06:8e:0a:1a:25:28:32:
                    2f:20:32:15:b5:d0:e4:77:73:4f:fc:71:6c:b0:0e:
                    f9:fd:4b:27:cd:c1:c4:6a:a8:c9:91:3c:5b:16:02:
                    13:3d:72:7e:51:86:78:d4:95:b8:a0:5e:02:f2:40:
                    7b:8b:20:2f:fc:4c:fb:31:9d:e2:65:e4:f6:41:19:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:76:E6:A5:83:E7:B0:70:EC:57:14:D4:92:DB:C8:E6:C8:BA:EA
            X509v3 Authority Key Identifier:
                keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/UDJ25qWD57Bw7FcU1JLbyObIuuo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.42.98.0/24
                IPv6:
                  2a13:2140::/32
                  2a13:2141:1::-2a13:2141:2:ffff:ffff:ffff:ffff:ffff
                  2a13:2142:1::-2a13:2142:2:ffff:ffff:ffff:ffff:ffff
                  2a13:2143:1::/48
                  2a13:2144::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:ff:60:f9:16:7e:41:c5:66:17:fd:8e:7c:1c:3c:f9:62:
         2c:bd:5c:1b:15:d8:49:00:19:b7:f9:3a:a4:73:aa:1c:68:28:
         ac:c1:5e:d9:54:60:69:67:86:a6:d9:8b:33:48:4c:eb:f9:0a:
         ad:0b:c6:f3:3d:82:b3:69:1a:55:6c:23:26:d6:d9:b2:93:ae:
         e7:0d:ab:2d:b0:20:7f:89:2d:11:c0:26:e7:a9:8f:1d:a6:25:
         5f:19:ce:fa:07:42:4c:b2:34:39:d2:23:85:c7:3c:85:dc:64:
         8a:f7:30:6e:4d:92:1d:e6:ac:ce:90:e9:10:e0:ac:e8:90:80:
         98:ed:1f:cb:bb:3c:94:82:51:91:be:1f:72:7b:2e:25:6a:8e:
         e4:98:e7:d0:cf:24:ba:7d:dd:38:fd:64:66:35:dd:6d:b2:0f:
         8c:09:d2:a8:63:6d:4f:f4:61:54:80:5a:d8:4b:83:f8:2c:3f:
         f4:d4:46:b3:1b:80:48:39:f0:ee:9a:73:bd:3d:f5:b9:3d:46:
         2c:1b:e4:d3:10:e3:9b:4a:5d:03:1f:85:3f:1a:43:a1:dc:e1:
         b7:67:ab:d6:bc:22:0b:19:0d:08:d9:ed:c2:22:ba:d0:bc:8b:
         8e:f8:09:ef:13:c6:7c:65:d7:c4:2f:13:40:74:6b:fb:a2:1b:
         c8:2d:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----