Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/S0vegGpuiCercYtclM_VH2iVx7s.roa
File:                     S0vegGpuiCercYtclM_VH2iVx7s.roa (raw, json)
Hash identifier:          ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=
Subject key identifier:   4B:4B:DE:80:6A:6E:88:27:AB:71:8B:5C:94:CF:D5:1F:68:95:C7:BB
Certificate issuer:       /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial:       01942143BF270E698D8C06F5B2F389C982E4
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/S0vegGpuiCercYtclM_VH2iVx7s.roa
Signing time:             Wed 01 Jan 2025 09:47:55 +0000
ROA not before:           Wed 01 Jan 2025 09:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200235
IP address blocks:        217.18.91.0/24 maxlen: 24
                          2a13:79c0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:bf:27:0e:69:8d:8c:06:f5:b2:f3:89:c9:82:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
        Validity
            Not Before: Jan  1 09:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4b4bde806a6e8827ab718b5c94cfd51f6895c7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:65:08:95:9d:c8:9d:cc:89:c4:0e:41:04:
                    11:86:59:98:aa:ac:aa:6c:d9:56:fc:60:2f:1b:6b:
                    c3:0e:e4:15:33:72:7b:18:31:54:4d:36:30:ff:61:
                    b9:8a:9a:d3:c6:0c:54:94:40:cb:93:37:0a:0c:0d:
                    24:10:90:69:21:9a:b8:15:29:86:8d:67:2d:61:e6:
                    4c:6b:0d:12:b1:23:cb:8a:06:01:f9:57:71:7e:91:
                    fa:63:53:6c:7b:e8:5f:50:c4:9d:63:56:36:15:19:
                    f3:fc:70:92:70:53:45:0f:9d:b8:1b:a3:1f:6e:a0:
                    14:19:40:74:9a:47:e0:f4:98:88:63:ef:69:5e:97:
                    e3:ec:7d:12:c8:9c:de:ce:de:6f:8b:a0:a2:97:7b:
                    f6:4a:03:79:64:8b:89:e7:20:d0:ea:50:6e:57:c8:
                    1a:fd:06:da:34:c8:e4:ce:28:9b:b9:8e:1b:6b:07:
                    86:db:28:6f:4a:0e:f0:b1:8b:ba:52:0b:94:35:a8:
                    c3:59:43:16:f1:2f:8b:d4:10:d4:3b:50:5a:52:a4:
                    0b:7e:e7:b9:8a:32:9c:86:39:f9:0e:12:68:f6:87:
                    05:03:07:75:60:30:0a:b9:6a:93:70:26:72:78:43:
                    bf:7a:a9:ba:70:c0:16:8d:22:89:7c:59:d7:a9:87:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4B:DE:80:6A:6E:88:27:AB:71:8B:5C:94:CF:D5:1F:68:95:C7:BB
            X509v3 Authority Key Identifier:
                keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/S0vegGpuiCercYtclM_VH2iVx7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.18.91.0/24
                IPv6:
                  2a13:79c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:41:53:2f:c7:aa:81:26:ef:27:d9:b4:4f:32:39:42:ca:
         48:04:d6:09:3f:dc:b9:0b:29:c0:74:8f:ab:db:93:42:1a:eb:
         d1:67:d3:b7:1f:36:84:34:26:b5:54:d7:ce:17:c6:48:6a:17:
         8c:04:3b:83:89:03:e2:83:f0:39:9e:4a:c5:79:63:14:8d:7a:
         e7:2b:7d:fb:70:ad:e9:df:0a:48:d0:cd:b8:d8:86:30:44:55:
         79:07:3f:d0:49:90:96:90:19:ed:f2:06:a6:d3:38:11:87:bb:
         61:79:46:dd:57:2d:47:7e:7f:d0:fc:7b:68:70:fc:dd:25:30:
         15:89:49:ea:68:a7:77:cc:91:b4:8a:5d:aa:56:86:e4:03:d8:
         3d:29:2d:85:dd:b6:46:ed:67:f4:5f:b9:56:b8:ac:a8:65:7c:
         77:f5:96:59:22:1e:7d:29:8b:65:7f:f8:8f:e7:c2:ea:de:d8:
         6e:d6:8f:73:98:51:7a:de:96:1d:25:67:cf:59:a4:18:42:be:
         54:bc:e2:8f:02:27:5e:0a:3f:1c:09:e5:6c:4f:49:3f:e4:af:
         25:eb:bb:a4:66:c1:84:9b:09:e7:7f:34:b3:14:be:f6:4e:ca:
         74:4b:e9:37:64:d6:88:22:bc:a6:60:d4:ae:29:5b:7e:e4:43:
         30:b4:ee:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----