Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/KcohbphFnkSf2gxoBmgqyMOKDSE.roa
File:                     KcohbphFnkSf2gxoBmgqyMOKDSE.roa (raw, json)
Hash identifier:          /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=
Subject key identifier:   29:CA:21:6E:98:45:9E:44:9F:DA:0C:68:06:68:2A:C8:C3:8A:0D:21
Certificate issuer:       /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial:       01942825F7B86684AEADEBF77CD7C7719AB9
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/KcohbphFnkSf2gxoBmgqyMOKDSE.roa
Signing time:             Thu 02 Jan 2025 17:52:44 +0000
ROA not before:           Thu 02 Jan 2025 17:52:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199471
IP address blocks:        185.83.87.0/24 maxlen: 24
                          2001:67c:c48::/48 maxlen: 48
                          2a13:fc80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:25:f7:b8:66:84:ae:ad:eb:f7:7c:d7:c7:71:9a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
        Validity
            Not Before: Jan  2 17:52:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=29ca216e98459e449fda0c6806682ac8c38a0d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:f5:47:53:8b:28:d2:f1:27:91:a8:4b:a3:
                    e7:76:ca:33:c5:34:4a:53:0d:77:7d:2f:c9:16:5e:
                    11:3b:2a:a3:1e:9f:88:c9:b7:02:80:6d:46:22:2b:
                    1e:a9:45:57:0f:8b:80:7e:55:e7:96:64:01:bb:7c:
                    01:18:cb:5c:70:ec:b5:02:97:c8:e7:55:fc:10:b2:
                    79:73:c9:b3:0b:21:1c:85:fd:7e:04:37:0e:31:51:
                    41:4a:f6:38:76:92:79:31:34:e0:a8:9e:b5:dd:8b:
                    72:8f:6d:f5:ae:41:bf:5b:6a:eb:73:bc:82:2c:a5:
                    86:11:eb:6f:36:3b:de:f6:a9:63:17:6d:33:e4:4d:
                    51:c9:03:30:de:9d:47:95:0a:ea:c7:5d:c1:7b:82:
                    d4:3e:01:b1:27:b0:a3:4a:52:37:d0:6b:d0:af:c2:
                    e5:2f:61:a9:4a:0f:18:1e:ea:2f:0d:18:67:17:09:
                    4c:fa:b3:5e:2e:58:5f:b1:09:ef:e3:56:3b:d3:e7:
                    55:c9:04:0c:19:c9:1f:7b:f8:26:7b:d8:3f:8a:9b:
                    7e:76:d3:5c:1c:d0:d5:d3:a0:48:fd:3b:42:71:e7:
                    b0:3d:1f:ef:4d:f0:de:0f:f2:3a:b7:6f:80:87:6f:
                    93:09:7c:e1:a4:c6:e1:e8:02:f1:5e:4d:e7:d2:5c:
                    61:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:21:6E:98:45:9E:44:9F:DA:0C:68:06:68:2A:C8:C3:8A:0D:21
            X509v3 Authority Key Identifier:
                keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/KcohbphFnkSf2gxoBmgqyMOKDSE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.87.0/24
                IPv6:
                  2001:67c:c48::/48
                  2a13:fc80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:a2:ff:e3:ac:16:5d:9b:3e:38:8d:25:b9:58:15:bc:57:
         79:f9:db:4b:7f:85:52:26:ca:88:e2:94:7a:1f:ed:47:2a:70:
         7e:7d:dd:63:63:33:8e:01:b4:b8:8e:45:75:cb:04:2b:2a:9e:
         c7:ae:a0:1e:6c:a7:8e:12:f6:bd:bd:9a:54:f2:4f:1e:e9:34:
         a7:ad:3d:be:f9:99:da:ad:3f:33:e9:57:1b:37:d1:f7:60:98:
         be:ff:d2:f3:ba:10:43:d1:a5:02:16:1f:b0:7b:aa:04:d5:cb:
         93:a1:e8:01:8e:e6:9a:7a:ce:95:1c:17:99:6e:47:1c:90:d1:
         cc:23:fc:66:1c:87:d2:92:ea:0b:14:f1:18:03:49:0f:9d:3f:
         bf:72:56:42:49:f4:b2:49:e2:2d:24:e1:7c:12:d7:94:af:a0:
         3a:ca:4e:4e:46:eb:ab:72:7d:43:f4:57:89:48:32:52:b9:b6:
         a5:14:e0:c5:46:ab:9a:fb:45:84:fe:a7:02:c3:b7:fd:33:a2:
         a3:cc:a8:ba:63:8b:02:66:f9:32:f6:69:f6:96:d9:4c:78:d7:
         53:c3:0f:76:9e:38:20:e3:ac:a6:f4:fe:a0:e2:7a:83:95:08:
         6d:c2:0c:af:a7:90:3a:7d:15:ca:29:a4:79:e8:4e:ca:58:7a:
         3c:09:56:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----