Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2IbL4y3hi0kNuyJJcIFdl_lNJCc.roa
File:                     2IbL4y3hi0kNuyJJcIFdl_lNJCc.roa (raw, json)
Hash identifier:          5OxTQB82FHMm8g9TM5hA54AoFcx9P3QauiS/j0wxels=
Subject key identifier:   D8:86:CB:E3:2D:E1:8B:49:0D:BB:22:49:70:81:5D:97:F9:4D:24:27
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       0194266C7BCBF2DB1E18140BBA27ED54D41E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2IbL4y3hi0kNuyJJcIFdl_lNJCc.roa
Signing time:             Thu 02 Jan 2025 09:50:31 +0000
ROA not before:           Thu 02 Jan 2025 09:50:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44412
IP address blocks:        212.94.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:7b:cb:f2:db:1e:18:14:0b:ba:27:ed:54:d4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  2 09:50:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d886cbe32de18b490dbb224970815d97f94d2427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:5a:1a:f4:f5:a4:8a:de:a1:3e:e0:9c:77:
                    ef:99:6d:7d:77:55:0d:20:cc:22:5d:3a:9c:24:87:
                    cf:1f:03:2c:07:aa:da:49:93:9c:ff:9a:5e:ba:c2:
                    f1:18:74:40:cc:19:b2:5f:bc:f3:b4:30:ea:95:f7:
                    07:8b:06:9b:e9:8d:00:ac:03:7f:7f:d5:39:40:c7:
                    b8:2d:11:7c:79:f8:dc:52:29:d3:6d:cd:1f:a2:8f:
                    83:28:ca:66:9e:a9:df:d0:fa:f4:da:59:37:b9:d4:
                    97:30:84:7c:fb:2e:be:bf:dd:35:ae:21:1e:15:d6:
                    04:9b:5e:80:3e:4e:47:e7:3e:21:40:99:25:28:76:
                    67:e2:18:1e:a3:97:4b:3e:3f:27:dc:7b:63:0b:12:
                    23:cf:21:9d:ff:5d:ba:5f:b8:a4:2d:3d:45:0a:23:
                    6b:f6:6d:c2:d9:c2:2f:d0:08:58:ef:36:35:24:c2:
                    18:81:25:aa:84:84:d2:e5:a4:d4:92:e5:0a:f2:4a:
                    4c:39:53:07:09:e8:e1:76:ee:e8:53:01:92:69:35:
                    9f:67:78:dc:e2:cd:f9:2f:e5:bf:94:22:d2:16:3b:
                    8b:70:65:c6:22:ba:2a:7f:ee:34:9c:65:1d:0b:1e:
                    b7:81:96:76:a6:3f:7f:d9:a3:b5:23:a5:63:b6:85:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:CB:E3:2D:E1:8B:49:0D:BB:22:49:70:81:5D:97:F9:4D:24:27
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/2IbL4y3hi0kNuyJJcIFdl_lNJCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:ba:9c:82:a7:58:02:0e:44:bc:84:94:6d:a4:8b:b9:a6:11:
         42:62:57:8f:6d:0f:3c:a1:a9:cf:d7:74:1e:75:0b:4a:7b:32:
         1f:cd:c5:1c:1c:ce:e8:6d:b2:a6:68:35:21:22:43:78:62:c5:
         91:5d:20:d3:06:7c:c1:ee:a6:ef:8d:04:91:2e:d2:f6:25:ed:
         0e:d1:19:18:e1:a5:31:4e:ed:d6:bd:dc:f9:55:46:b3:c6:bc:
         57:89:8a:2b:6a:09:9b:5a:a4:b5:4a:f4:68:da:74:24:e1:80:
         32:a4:a6:75:92:24:70:91:bd:e5:b4:1b:eb:7f:f0:80:95:db:
         3e:13:fd:7f:5a:c7:20:87:b7:e3:50:fc:b3:e0:88:36:b4:d5:
         3f:4a:e2:05:81:78:66:39:f2:85:5b:fe:42:08:97:ea:56:a6:
         d1:c5:62:9e:6a:59:7f:da:c6:fa:bf:c0:92:56:d8:fc:80:35:
         4d:8c:12:c6:0b:4b:11:d7:32:1f:01:c0:5f:8b:da:6a:53:41:
         df:3e:03:e1:9a:e5:cb:57:45:bf:86:38:25:37:c2:db:9a:1a:
         22:c8:ba:5d:5a:07:ec:fe:03:2d:6f:e9:f6:63:22:4f:27:84:
         ac:fb:c8:6f:6b:50:eb:b2:1a:96:33:f1:db:01:5b:65:b4:f9:
         3b:8f:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----