Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa
File:                     tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (raw, json)
Hash identifier:          V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=
Subject key identifier:   B4:2F:68:12:F3:EB:44:AD:DA:2A:E2:B5:EC:5A:BF:83:0E:A8:C4:65
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       0194266B7584AE9BE8F4E9CD8D2B2D197F3A
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa
Signing time:             Thu 02 Jan 2025 09:49:24 +0000
ROA not before:           Thu 02 Jan 2025 09:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15490
IP address blocks:        185.141.252.0/22 maxlen: 24
                          185.141.252.0/24 maxlen: 24
                          2a07:2780::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:75:84:ae:9b:e8:f4:e9:cd:8d:2b:2d:19:7f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Jan  2 09:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b42f6812f3eb44adda2ae2b5ec5abf830ea8c465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:98:50:79:bf:78:fc:65:4e:56:65:dd:5f:
                    e9:e2:e7:b3:07:20:3f:b0:fd:b3:a9:6d:cc:4d:d9:
                    db:08:85:f7:04:ff:d7:54:d9:62:46:bb:9d:2e:ec:
                    fc:87:45:78:c4:6a:6a:69:ea:70:67:87:7d:57:dc:
                    58:ca:98:f1:cc:47:c4:f4:57:90:34:b9:b4:ac:8a:
                    e4:66:93:9c:c5:77:5e:4f:b5:74:a4:91:34:fa:ee:
                    11:f4:16:61:96:64:88:7d:66:1e:b9:dc:96:74:a6:
                    f0:50:aa:e8:36:7f:5a:4f:7d:a8:a0:16:95:f2:bf:
                    ca:d9:c2:a6:88:d5:b9:8e:4a:17:41:d6:1d:f3:80:
                    d3:af:15:18:17:4d:48:a2:1c:96:08:ee:69:f1:ae:
                    ed:12:7a:ea:d0:1d:29:84:2b:a3:88:7e:85:6e:42:
                    26:4d:33:ff:8c:09:fe:a1:8b:1e:7d:41:05:4a:22:
                    c9:b1:9c:61:05:ce:c1:f2:e9:e4:78:f7:e4:29:b6:
                    ff:c3:d7:e0:fa:14:c2:3b:b9:cd:5e:9e:fd:67:a4:
                    c5:9c:6f:39:65:a0:28:57:67:a0:d2:2f:43:48:58:
                    36:62:5f:c5:48:ed:25:9d:50:e7:e4:cc:6c:30:ac:
                    d2:e9:01:d1:d2:ac:59:6a:c1:6e:08:13:7d:e0:3d:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:68:12:F3:EB:44:AD:DA:2A:E2:B5:EC:5A:BF:83:0E:A8:C4:65
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.252.0/22
                IPv6:
                  2a07:2780::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:cb:b7:41:71:b0:bd:8f:cb:dd:e6:d8:12:c3:52:f0:a5:89:
         3f:ed:61:1a:53:37:b5:5d:7e:67:f5:9e:26:e0:6c:ba:a4:09:
         2d:93:01:1e:66:65:8f:51:2c:e2:50:b3:bc:c2:c0:9a:34:10:
         a3:9b:43:1e:44:5d:a1:60:3e:12:3f:0a:05:6b:d1:38:8d:48:
         8c:71:0f:5e:ff:3a:0c:63:50:e2:54:e2:fe:6f:de:33:30:d6:
         dc:c9:3d:39:51:aa:dc:d7:32:1a:f0:07:1f:ec:13:b9:f6:7e:
         ef:8a:80:30:80:37:b7:ed:7c:6b:c2:61:68:2e:a9:e9:0c:11:
         d9:f6:6a:04:d3:01:d4:7b:b5:0d:c1:9e:b3:5c:58:ef:81:f7:
         1b:be:1b:77:6a:c4:89:dc:b4:80:8b:90:83:16:ed:8e:62:63:
         18:32:ad:80:b7:17:ba:2c:0a:b0:a0:36:d0:ea:80:21:4c:9f:
         05:26:e3:32:be:40:09:f3:e6:7b:26:c6:fb:5d:b8:b5:f1:df:
         8d:3f:d5:71:08:98:7c:1e:cc:02:96:00:9a:af:70:2c:71:0d:
         0f:e7:8d:c1:55:9c:7f:ef:70:08:c2:aa:b5:e1:c9:6b:17:b4:
         c0:11:bb:96:ae:ff:1c:d9:13:d1:6d:d7:6b:e4:d1:b3:a3:bd:
         92:34:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----