Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gkeNJ5s30U5Q2kSgHJK9LZ1zZzs.roa
File:                     gkeNJ5s30U5Q2kSgHJK9LZ1zZzs.roa (raw, json)
Hash identifier:          q64PK85MQXFs08rEVnh0jhKP8o+iN0ggZuQRMeEnkEo=
Subject key identifier:   82:47:8D:27:9B:37:D1:4E:50:DA:44:A0:1C:92:BD:2D:9D:73:67:3B
Certificate issuer:       /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial:       0194266C4EFECE8E69E6DF3A55198B56013E
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gkeNJ5s30U5Q2kSgHJK9LZ1zZzs.roa
Signing time:             Thu 02 Jan 2025 09:50:19 +0000
ROA not before:           Thu 02 Jan 2025 09:50:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     6828
IP address blocks:        212.220.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6c:4e:fe:ce:8e:69:e6:df:3a:55:19:8b:56:01:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
        Validity
            Not Before: Jan  2 09:50:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82478d279b37d14e50da44a01c92bd2d9d73673b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:41:b6:45:f8:ac:89:1e:64:a0:44:1b:70:
                    b5:24:3e:fa:75:e6:11:ee:06:c8:04:3e:50:d7:24:
                    66:96:8c:57:4f:86:c4:16:fc:ba:e7:bd:07:db:17:
                    5f:1f:78:b0:6a:fd:78:40:7d:3e:e2:7f:99:ad:c9:
                    cb:26:02:16:ba:a2:e6:4e:84:e9:9c:0a:ab:c9:d1:
                    6b:de:6a:fa:ee:a8:cd:b7:06:70:c6:39:8e:5f:9d:
                    0d:ba:c1:af:b3:7a:dd:4b:c2:ba:60:be:9e:c4:66:
                    98:db:0c:ff:d3:6e:81:47:9b:f8:44:f9:4d:12:8a:
                    10:bd:91:ef:f0:83:9e:bc:87:6e:04:b6:6d:ef:65:
                    fc:c9:0c:86:62:6e:bb:e9:2f:30:fc:be:d3:15:c3:
                    c6:67:1f:93:ba:39:7a:43:23:2f:bd:54:4a:29:9c:
                    71:51:66:54:9e:54:e3:b8:67:07:c3:57:2a:fa:a3:
                    ae:11:b3:7d:de:0b:d3:f7:25:75:9b:f8:73:f0:1a:
                    df:d0:3c:40:41:60:0a:15:50:80:22:7b:68:4c:be:
                    6b:f1:78:17:39:2c:f4:60:c2:50:f9:6c:50:e7:4d:
                    04:be:69:60:98:3b:bd:7b:d3:df:19:7d:7d:52:ec:
                    b1:20:38:18:9e:05:68:8a:2b:ca:5c:60:da:a9:b4:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:8D:27:9B:37:D1:4E:50:DA:44:A0:1C:92:BD:2D:9D:73:67:3B
            X509v3 Authority Key Identifier:
                keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/gkeNJ5s30U5Q2kSgHJK9LZ1zZzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.220.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:e7:4c:5b:0e:4e:ae:06:c5:34:b0:9b:ee:7c:ea:c5:96:
         b2:20:12:9e:be:2d:16:91:86:29:75:ee:90:d4:43:8e:6e:af:
         ab:e4:8f:94:99:6d:9d:83:fa:f3:e8:3a:fb:81:e6:90:47:0a:
         85:2a:2a:3f:dc:6b:f2:be:32:a1:db:d3:70:0b:3b:48:6d:84:
         39:6a:86:80:fa:f2:ab:29:7d:b1:e0:a8:9f:ca:8c:8e:89:4b:
         82:cb:75:65:99:0f:f7:0e:97:d9:15:35:dd:66:fa:03:61:8a:
         9a:29:cb:9e:57:50:24:3a:de:b1:2a:3f:27:ca:50:0e:d1:74:
         93:0f:11:b7:94:b6:b9:f3:6b:38:70:ea:38:f8:39:a6:ba:6a:
         ec:92:31:f8:3e:06:22:e0:b4:48:b4:63:85:5d:74:bb:0a:ed:
         4b:d9:ca:04:d4:24:21:e6:c7:79:30:4e:b6:d6:23:36:7b:d6:
         83:cb:c1:c9:44:8f:9a:5a:1f:75:34:e1:15:0c:3f:a4:3a:76:
         19:ee:f9:2a:f8:4f:fe:6f:93:1b:29:0f:84:ee:ea:c1:97:98:
         b2:f8:3c:45:47:f7:59:24:2d:4e:93:87:c8:a0:65:0c:6a:7e:
         e6:9f:6f:27:b8:e8:4e:ba:07:95:e1:84:3b:83:91:b3:35:08:
         55:e7:03:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----