Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa
File:                     VSiusRPyIc9Tc8bThvks1NkGA7Q.roa (raw, json)
Hash identifier:          uzDtGIiakPGkLOEGtmPHEX+erK/AAaDobyuB+l6q1NI=
Subject key identifier:   55:28:AE:B1:13:F2:21:CF:53:73:C6:D3:86:F9:2C:D4:D9:06:03:B4
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       0194266B379397159E33E2C7B38DA0F983EB
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa
Signing time:             Thu 02 Jan 2025 09:49:08 +0000
ROA not before:           Thu 02 Jan 2025 09:49:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8758
IP address blocks:        185.5.186.0/23 maxlen: 23
                          2a02:7c40:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:37:93:97:15:9e:33:e2:c7:b3:8d:a0:f9:83:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Jan  2 09:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5528aeb113f221cf5373c6d386f92cd4d90603b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:d3:ab:7d:83:46:3b:20:7c:39:1a:6d:19:
                    ef:43:17:de:87:f9:d2:ec:ac:02:65:d3:39:12:ac:
                    6d:c9:74:1e:e7:e8:53:b5:2d:8e:f1:e1:b1:04:09:
                    6a:e4:bf:cb:ce:fe:48:fb:70:98:ae:48:7a:2e:2e:
                    27:4f:48:7a:eb:4f:11:fb:67:31:52:4e:35:11:be:
                    1c:2a:18:89:72:a1:cc:e4:6f:a9:05:68:c7:21:3e:
                    ef:29:dc:2f:fa:89:aa:0a:b8:54:12:b6:ac:00:43:
                    e1:79:da:b3:2f:cd:6b:b9:b3:00:9e:c3:b4:18:3c:
                    77:64:cb:0a:1c:1e:6c:d9:29:48:0e:1b:51:b2:b2:
                    dc:d1:87:dd:8d:77:9c:89:6c:c5:83:e0:50:3c:e1:
                    a3:7b:ee:d6:7f:b1:2c:ff:d7:7a:7c:23:ff:11:36:
                    ff:98:83:8a:21:61:e4:2b:4d:0f:b4:d2:98:9d:cf:
                    da:90:32:65:ee:16:f8:ee:c2:02:a9:72:71:3f:91:
                    57:db:c2:c9:e4:99:53:d1:ce:34:2b:ca:f7:e0:8f:
                    f7:3d:85:67:92:53:2e:45:7b:a9:6c:90:64:83:05:
                    11:ff:da:a3:43:94:4b:1d:11:6c:3a:44:64:e1:72:
                    23:dd:1e:05:ae:30:7f:57:c8:c2:3c:49:a8:33:7c:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:AE:B1:13:F2:21:CF:53:73:C6:D3:86:F9:2C:D4:D9:06:03:B4
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/VSiusRPyIc9Tc8bThvks1NkGA7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.186.0/23
                IPv6:
                  2a02:7c40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4d:ff:41:73:ba:fe:01:08:c5:fe:47:32:fa:be:e3:94:8e:a5:
         29:ec:00:cd:5b:9b:e8:1f:15:e1:0e:fa:b3:03:d1:9d:19:c6:
         08:f7:c2:ed:6e:1b:48:7e:a9:1a:54:4b:e3:df:95:df:10:cf:
         a9:d9:cf:56:72:c4:9e:4b:82:a3:f5:de:23:e6:fa:e0:11:39:
         50:92:cc:d0:c6:ba:4b:f6:8e:8d:81:6d:72:26:90:55:44:f2:
         a5:56:16:32:94:3f:80:da:a3:58:14:b1:6c:dc:8a:03:26:9e:
         65:7c:07:42:7c:c2:d0:6f:83:8d:1d:c2:90:f7:18:09:a2:2b:
         b8:3a:7d:2d:b3:2d:99:4b:34:62:4b:fc:cc:b1:1c:5d:0a:9d:
         32:96:d4:96:66:1c:9f:a8:66:27:45:fe:84:dd:3f:2b:5b:a7:
         1d:4d:c5:52:9c:cb:8c:1d:da:4c:76:2e:2f:74:0d:68:6a:b0:
         42:e8:17:ca:82:2b:96:d4:8e:f6:f0:c1:ad:88:7d:d6:af:7f:
         15:57:c0:93:23:e2:a6:10:3d:a8:b8:85:b7:7b:a8:94:61:77:
         a5:9a:cb:78:69:36:5d:4f:f0:af:9a:e0:86:00:ea:70:4f:96:
         8b:77:cd:ac:84:77:1d:fd:fc:8f:94:6a:58:5e:b5:ba:0e:db:
         95:1d:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----