Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/Li8wKnrdmOXpX94BLLLbjVutDVE.roa
File:                     Li8wKnrdmOXpX94BLLLbjVutDVE.roa (raw, json)
Hash identifier:          B7wnEDA93LjWijQLqvYkWeQvccIg2ujkRKA0vpbO5ig=
Subject key identifier:   2E:2F:30:2A:7A:DD:98:E5:E9:5F:DE:01:2C:B2:DB:8D:5B:AD:0D:51
Certificate issuer:       /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial:       01942747D50CBB1FD8D57F44958544E7D4AA
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/Li8wKnrdmOXpX94BLLLbjVutDVE.roa
Signing time:             Thu 02 Jan 2025 13:50:06 +0000
ROA not before:           Thu 02 Jan 2025 13:50:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199557
IP address blocks:        185.83.86.0/24 maxlen: 24
                          2a13:fa80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:d5:0c:bb:1f:d8:d5:7f:44:95:85:44:e7:d4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
        Validity
            Not Before: Jan  2 13:50:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2e2f302a7add98e5e95fde012cb2db8d5bad0d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:94:37:9b:c6:f2:79:e5:c4:39:c7:79:8a:
                    29:48:fc:77:71:81:28:d9:54:23:fe:b9:d8:27:ba:
                    e5:33:07:30:00:9c:b9:94:b4:18:71:4e:7d:07:7b:
                    c4:69:e0:8d:62:2a:d5:32:73:e2:be:2b:96:c4:f9:
                    40:a0:26:ad:45:65:47:c8:1e:77:bb:af:54:60:14:
                    a7:68:7f:73:68:b0:50:de:87:a7:c0:e8:6a:fd:86:
                    51:19:40:83:f0:09:65:a5:c0:54:b4:10:c2:d1:38:
                    ed:c0:1a:1d:cd:4c:e3:23:53:37:c3:43:31:a1:50:
                    bf:e1:c4:92:46:94:5f:e2:89:92:6b:fb:40:87:5c:
                    fd:46:e8:e6:ce:d5:e1:6e:ea:d3:3b:5a:25:f2:e1:
                    f4:d7:5a:76:22:31:90:fc:83:c2:48:46:6c:6f:cb:
                    a1:05:76:e8:14:f2:ef:30:0b:dd:7a:2b:a7:08:01:
                    2f:e8:19:b6:ef:ae:3b:8b:30:60:4f:bc:4a:0b:93:
                    bf:71:8b:1b:d7:2a:40:11:cc:5b:44:cd:01:8e:81:
                    14:f0:67:d5:7b:98:33:f0:e2:77:53:c4:2e:a4:e7:
                    5e:aa:10:b3:76:e4:67:d3:31:47:6d:26:9b:ba:15:
                    9b:f0:e7:a9:0f:ef:97:12:51:98:04:44:8e:54:a7:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2F:30:2A:7A:DD:98:E5:E9:5F:DE:01:2C:B2:DB:8D:5B:AD:0D:51
            X509v3 Authority Key Identifier:
                keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/Li8wKnrdmOXpX94BLLLbjVutDVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.86.0/24
                IPv6:
                  2a13:fa80::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:d0:fb:a6:5c:c7:85:52:17:a4:ea:d0:8d:99:89:cc:da:03:
         b7:e6:79:d7:f2:d3:86:2d:5c:bd:84:aa:96:20:c9:09:25:35:
         f6:20:54:5e:ec:e7:8e:cd:cd:c1:4b:49:58:5a:67:70:d2:e5:
         35:2d:be:e8:70:20:90:7a:72:15:2b:1d:d9:c1:10:5d:cd:43:
         48:2e:d3:9f:0b:05:f8:9a:45:91:e6:aa:28:0f:ee:46:05:e2:
         a4:42:9b:e0:fa:95:a2:4a:04:d8:3f:23:99:64:c5:84:5a:9f:
         6c:a2:44:19:81:8c:78:c6:08:c7:10:aa:f4:e6:e7:8f:64:2f:
         23:3e:c2:33:8d:e4:38:f1:71:72:89:32:2b:df:71:5a:06:b2:
         1c:bd:e5:68:03:89:8b:8b:5b:c2:f0:4b:f9:1d:3b:bc:af:d0:
         d0:ca:4c:a2:c0:e9:16:67:72:b4:1f:46:d7:d4:28:bf:5a:cd:
         ad:24:1b:8e:bc:d5:bf:e5:50:02:53:7b:ad:3f:7d:cf:f8:f8:
         2f:2b:6c:52:50:48:18:0c:db:5a:d4:95:db:54:26:5b:d6:0a:
         c7:2d:81:c7:53:2a:d6:7e:ff:23:0a:f7:c0:77:47:98:d2:ca:
         1b:4d:b5:43:81:35:15:e2:97:d6:3f:60:ba:60:fa:2a:7d:13:
         b1:9c:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----