Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Pn1Np93Fy5qllPMGwWd35SbCmNc.roa
File:                     Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (raw, json)
Hash identifier:          cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=
Subject key identifier:   3E:7D:4D:A7:DD:C5:CB:9A:A5:94:F3:06:C1:67:77:E5:26:C2:98:D7
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019420686304EB3839C8A8D1263BCE0D0EC7
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Pn1Np93Fy5qllPMGwWd35SbCmNc.roa
Signing time:             Wed 01 Jan 2025 05:48:19 +0000
ROA not before:           Wed 01 Jan 2025 05:48:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212431
IP address blocks:        212.110.155.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:63:04:eb:38:39:c8:a8:d1:26:3b:ce:0d:0e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 05:48:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3e7d4da7ddc5cb9aa594f306c16777e526c298d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:0b:32:fd:7d:4c:57:50:95:c4:c3:12:c6:
                    66:56:98:9e:0d:3d:3e:f6:d1:77:98:1f:0b:68:5e:
                    bd:3e:70:b4:1a:5d:99:c0:52:43:e3:34:e3:0f:38:
                    3d:78:1d:ae:80:4e:98:3e:6f:0b:7c:9f:1e:a7:a0:
                    d0:fb:94:82:f1:d7:81:4d:da:3b:fc:b3:82:ff:67:
                    32:76:1e:dd:89:84:56:52:ae:60:85:46:22:8a:52:
                    26:2b:b3:50:b9:a2:f5:b3:57:64:6c:47:c6:7c:8b:
                    3a:5b:94:6e:86:1c:bb:79:8f:c7:84:f4:54:42:8e:
                    dc:51:29:31:32:5f:1e:6b:6f:d0:53:62:d5:7e:7d:
                    f9:5a:8f:1a:f5:74:79:33:44:e1:1c:cb:ce:6a:68:
                    95:04:92:82:18:be:c6:af:70:4d:80:c9:93:50:40:
                    72:40:81:c1:54:9f:33:e4:17:56:f0:6e:b8:8f:14:
                    74:c2:65:e8:4d:18:d8:e4:d8:94:d7:2d:4b:49:4a:
                    74:98:1a:f0:33:25:d5:af:ed:17:70:d7:3c:12:07:
                    76:37:a3:78:0b:47:f8:74:5c:1a:5b:da:73:39:37:
                    9d:67:45:f7:23:ec:e1:25:d8:32:1c:8f:d8:c5:30:
                    c9:38:bd:35:db:b2:30:e1:57:f2:54:3e:21:e2:dc:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7D:4D:A7:DD:C5:CB:9A:A5:94:F3:06:C1:67:77:E5:26:C2:98:D7
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/Pn1Np93Fy5qllPMGwWd35SbCmNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:c4:93:7f:eb:a3:ef:aa:0e:a2:4b:dc:29:7a:49:88:d4:
         82:37:16:86:12:be:d9:92:06:de:34:95:65:e4:d1:91:dd:cd:
         d6:26:85:b9:c1:63:6b:95:65:a8:44:9b:95:59:ed:70:de:b4:
         de:e5:6d:15:a8:61:5d:bb:e6:94:4b:86:b8:7e:d6:52:21:f2:
         52:1d:e0:1a:96:72:5d:47:9f:92:e6:b3:4f:74:4a:f3:4e:b4:
         eb:83:97:66:fa:ed:c3:59:03:c5:0d:74:5b:cc:41:0a:0c:e4:
         d8:df:fd:8e:94:46:c5:65:f4:43:dc:38:76:1d:12:14:ad:54:
         34:d6:04:dc:bc:93:c5:1e:a8:8a:3a:d9:b1:5f:b7:c0:1d:ea:
         79:e5:5b:08:f2:d6:04:0a:ba:be:64:da:11:36:31:96:3c:cd:
         f1:ff:79:3e:a5:4b:8b:fa:34:76:f2:1a:a2:e0:e6:07:3a:a2:
         d9:a5:5b:df:ff:50:d1:ee:a3:18:af:7e:8e:d2:50:7a:b7:4f:
         ea:c1:b8:c1:11:ca:d3:45:2f:74:11:0b:de:42:06:62:62:83:
         14:4a:21:b1:3b:5e:84:d0:fe:6f:af:f1:4e:d6:74:9f:b5:9f:
         d0:ac:b9:f3:c5:84:bb:08:8a:4d:25:3a:5f:7f:cc:a1:0e:a8:
         60:5f:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----