Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/pziQk_Jpqg7RVSwxW0kshn-FxgM.roa
File:                     pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (raw, json)
Hash identifier:          3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=
Subject key identifier:   A7:38:90:93:F2:69:AA:0E:D1:55:2C:31:5B:49:2C:86:7F:85:C6:03
Certificate issuer:       /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial:       01942444BD3FDAE779079CF9A14F74240410
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/pziQk_Jpqg7RVSwxW0kshn-FxgM.roa
Signing time:             Wed 01 Jan 2025 23:47:52 +0000
ROA not before:           Wed 01 Jan 2025 23:47:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41838
IP address blocks:        93.90.68.0/22 maxlen: 24
                          2a0d:3a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:bd:3f:da:e7:79:07:9c:f9:a1:4f:74:24:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
        Validity
            Not Before: Jan  1 23:47:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a7389093f269aa0ed1552c315b492c867f85c603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:99:db:aa:4f:e9:af:4c:56:f7:56:50:90:
                    e6:12:ff:12:00:61:45:7e:97:7b:c0:9a:8d:ac:2e:
                    42:6a:38:bf:34:a9:08:6b:48:4d:5c:a2:e2:70:f1:
                    a9:38:7f:95:b8:68:0b:71:02:83:24:09:b4:fe:c5:
                    99:cf:c5:82:a8:16:85:b9:d3:3c:c1:68:d2:c1:03:
                    c6:2c:f3:f2:f8:fc:c1:e1:13:ac:85:97:e6:61:1b:
                    81:4b:01:aa:21:a1:cc:46:2c:ad:1f:f6:b5:0c:62:
                    18:7e:0e:59:80:ba:0c:f7:96:1a:cf:0d:b3:5c:0a:
                    37:92:2e:08:10:1f:b8:80:9a:6b:f8:88:84:8f:d5:
                    90:04:86:1c:2a:4e:2f:51:ce:36:5b:b8:20:10:fc:
                    e5:8d:43:d4:1a:05:8a:6a:c4:27:b7:c4:77:ba:dc:
                    08:4b:8e:8b:b8:62:fd:0a:e0:01:2f:7b:aa:71:25:
                    34:a8:98:d6:49:0f:15:6f:41:9f:03:78:cc:71:c1:
                    f8:c3:35:c3:37:af:95:23:ee:d2:ab:f4:d3:77:6e:
                    bf:68:8a:f1:f8:ba:60:2e:77:00:65:16:47:17:c0:
                    3f:68:88:ba:f9:70:ad:ab:3d:99:73:3f:ef:23:71:
                    ee:df:98:9c:91:55:24:5c:7e:9d:8d:26:12:7e:59:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:38:90:93:F2:69:AA:0E:D1:55:2C:31:5B:49:2C:86:7F:85:C6:03
            X509v3 Authority Key Identifier:
                keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/pziQk_Jpqg7RVSwxW0kshn-FxgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.90.68.0/22
                IPv6:
                  2a0d:3a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:fb:bf:17:a8:9b:38:fb:d5:65:e4:a5:94:4a:fe:9e:d6:ba:
         80:80:7c:45:0c:6b:bd:88:80:96:fb:d7:2c:13:08:f9:20:fa:
         ef:a3:70:fb:cd:cc:f9:ad:7b:2f:e4:ba:7a:b5:57:5b:95:7e:
         2f:80:69:8b:3c:30:b2:03:26:5d:7e:71:27:3b:7c:bd:55:f3:
         1a:82:9b:5f:45:70:8d:2b:e3:42:aa:ad:6e:80:25:19:c4:86:
         45:7c:37:81:55:b1:a9:22:fc:41:22:79:9d:99:9e:14:b6:82:
         5a:a4:2a:ea:d6:f4:5f:10:af:a9:53:27:39:ea:2b:59:55:f0:
         ce:ef:8c:9b:08:e2:1d:53:ff:34:af:bb:63:31:29:c3:b1:63:
         e2:3b:14:83:4b:ef:0c:fc:60:82:77:79:7a:5e:76:a3:50:78:
         3c:f5:a2:9f:8b:75:65:3f:25:40:e0:74:84:c8:6e:66:11:27:
         54:13:73:ef:83:3f:e3:93:88:71:7e:c7:0c:4d:ad:d3:2b:03:
         c4:46:c2:30:8e:f8:29:24:fe:2c:74:42:85:c6:b5:84:bf:f2:
         97:83:d7:ac:4b:52:da:b6:8a:60:d6:0d:ca:c3:3d:c1:44:e4:
         c9:ec:72:0d:e6:82:f1:73:20:d2:b9:cc:75:d0:fa:c4:04:81:
         58:92:f1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----