Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa
File:                     3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa (raw, json)
Hash identifier:          MbX2Jo3+qNy9yJ51qumhhpSA5fjjpKXnL9+Ixdd7q/M=
Subject key identifier:   DE:37:4E:21:3B:1A:41:38:95:A3:6E:E7:A2:00:A3:9A:7B:7F:23:21
Certificate issuer:       /CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
Certificate serial:       3A7D42E91742D99B123806CAB92C2F87B2142408
Authority key identifier: CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa
Signing time:             Sun 30 Mar 2025 05:13:12 +0000
ROA not before:           Sun 30 Mar 2025 05:08:12 +0000
ROA not after:            Sun 29 Mar 2026 05:13:12 +0000
asID:                     207936
IP address blocks:        194.124.235.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7d:42:e9:17:42:d9:9b:12:38:06:ca:b9:2c:2f:87:b2:14:24:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb29a77669df5a7a5cb506d839ee8aa4337ccaac
        Validity
            Not Before: Mar 30 05:08:12 2025 GMT
            Not After : Mar 29 05:13:12 2026 GMT
        Subject: CN=DE374E213B1A413895A36EE7A200A39A7B7F2321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:a3:6a:57:a3:8a:63:4b:20:8a:3b:fe:42:
                    84:e0:63:30:6e:0f:c8:19:7d:ed:6a:0f:53:f1:57:
                    73:0b:4a:b2:4c:5d:9d:53:ae:f2:7e:8b:d9:65:0d:
                    d4:16:f1:f8:45:ab:ad:8f:cb:b9:b7:49:5d:96:fb:
                    c7:ae:c7:f5:12:15:c7:87:53:84:13:7b:8e:9b:84:
                    b6:9e:c2:85:f3:3c:d9:08:9c:09:5d:4e:4b:68:06:
                    6b:4b:6b:a1:a6:17:e7:4e:cc:01:ba:72:0f:3a:db:
                    5c:9c:0a:f2:d4:42:b0:52:c1:3f:5e:a0:36:78:4f:
                    d9:d9:3f:68:f8:30:d5:b4:39:b7:74:87:7b:a9:10:
                    ef:c5:62:5d:33:0f:0c:8e:76:e8:69:c6:f0:50:fd:
                    a5:02:8f:19:de:76:8d:5e:34:e0:43:fa:e1:d5:26:
                    62:de:27:86:16:ee:73:53:02:7c:77:bd:8c:e1:0b:
                    b4:1e:e9:38:68:0e:72:3d:a6:58:2a:64:a7:82:f5:
                    69:21:ec:d2:d8:5c:6e:e4:f5:fb:b4:fc:45:20:a8:
                    0c:74:81:67:58:7a:8b:57:52:98:f9:28:89:4e:7d:
                    ad:f4:bc:74:02:a6:0e:bb:16:65:08:3a:9a:ae:e1:
                    3c:e0:06:9d:56:0b:4d:74:bc:65:75:bf:23:fd:ff:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:37:4E:21:3B:1A:41:38:95:A3:6E:E7:A2:00:A3:9A:7B:7F:23:21
            X509v3 Authority Key Identifier:
                keyid:CB:29:A7:76:69:DF:5A:7A:5C:B5:06:D8:39:EE:8A:A4:33:7C:CA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/CB29A77669DF5A7A5CB506D839EE8AA4337CCAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yymndmnfWnpctQbYOe6KpDN8yqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bb25d068-7f9c-4b0e-a695-1779b7d8f06e/0/3139342e3132342e3233352e302f32342d3234203d3e20323037393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.124.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:f6:f7:85:05:99:f9:b9:db:a8:ed:11:93:f7:7c:e3:43:
         e7:6c:df:30:2e:89:91:40:1d:6e:98:a2:5a:71:d5:de:a9:3b:
         d2:bb:e0:39:48:d4:88:59:3f:ac:2e:34:3a:6a:be:1c:d2:9b:
         bf:20:ba:40:32:cc:97:7a:98:3f:5a:d9:01:55:07:e9:82:34:
         c0:e7:f7:49:31:7f:72:4c:72:89:d9:c2:3a:5f:58:47:53:35:
         8b:91:53:4f:0b:6d:b1:a4:8b:51:ed:75:e9:c9:82:b6:a0:fa:
         6a:ef:2b:6a:11:28:0b:fd:71:71:57:c9:28:6e:1e:ae:27:aa:
         b6:56:2a:44:04:5e:33:ec:17:3b:47:04:a2:21:a1:7f:8d:2b:
         2a:04:8b:96:9b:0c:9d:c8:4d:ef:39:76:c4:88:a8:fa:26:62:
         b8:fb:40:9a:91:6d:56:ed:85:25:c3:3a:4c:6b:da:0e:e7:e0:
         20:59:03:86:7b:58:26:1a:9a:1f:73:8a:5d:3e:b6:56:ef:90:
         0d:92:38:63:9e:04:c4:2c:74:94:19:0f:6c:a3:30:8e:13:70:
         79:16:7e:82:14:f3:a5:85:bd:16:50:72:25:e9:c1:e8:13:55:
         84:40:9c:a1:e7:a7:fe:ea:7c:dd:97:42:18:5f:35:02:bc:cb:
         89:a5:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----