Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa
File:                     qW5ruWmELXcPHa8kFDUBFkPKez4.roa (raw, json)
Hash identifier:          uoLHYHxLsKBacLBKR/F1NYX0UeOaZwmzWyXMoDWlcOg=
Subject key identifier:   A9:6E:6B:B9:69:84:2D:77:0F:1D:AF:24:14:35:01:16:43:CA:7B:3E
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       01942143E101C1F385A6470EE31D88E8788D
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa
Signing time:             Wed 01 Jan 2025 09:48:04 +0000
ROA not before:           Wed 01 Jan 2025 09:48:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42927
IP address blocks:        213.210.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:e1:01:c1:f3:85:a6:47:0e:e3:1d:88:e8:78:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 09:48:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a96e6bb969842d770f1daf241435011643ca7b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:72:86:bd:bb:af:99:81:f2:80:2b:bd:51:
                    15:7c:fb:3d:26:c0:0e:2b:3a:69:b0:82:4d:5a:78:
                    6b:17:e4:f4:c2:5a:32:23:9b:fc:68:11:6e:cb:9f:
                    43:03:20:53:95:b3:47:5d:cf:ea:5f:7a:d5:8e:0e:
                    93:96:c8:cc:5c:b1:f0:f7:88:55:0b:1c:6a:fa:65:
                    5e:c9:84:af:3b:83:4e:ea:5e:d2:f4:21:ca:04:ca:
                    92:b4:8d:77:42:ef:7a:76:c6:f6:8e:33:1a:91:57:
                    40:41:cd:e1:6e:1c:61:04:2c:78:6d:8e:f5:94:d2:
                    7d:2c:41:dc:44:ff:e7:32:bd:8b:63:2c:72:93:36:
                    45:b8:b9:62:a0:84:cd:9d:9c:6e:01:2f:a7:e5:32:
                    df:95:35:9c:2a:be:67:d0:12:5c:63:ac:9d:32:25:
                    93:86:81:ab:0f:6e:08:01:a6:77:5e:a8:6b:b2:bb:
                    36:1c:01:8e:7c:82:44:ae:b4:f2:0f:15:3f:86:b3:
                    fc:fe:19:ce:d5:d5:4c:ac:4c:7e:d9:fe:68:26:13:
                    24:2f:90:f1:bd:58:80:41:fe:0c:63:1d:4b:ff:07:
                    af:77:d3:e3:39:51:fe:cd:8e:10:75:4e:a9:88:08:
                    39:a2:d6:ba:12:ee:2d:9f:61:e4:97:dd:e8:d2:dc:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:6B:B9:69:84:2D:77:0F:1D:AF:24:14:35:01:16:43:CA:7B:3E
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qW5ruWmELXcPHa8kFDUBFkPKez4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.210.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:87:68:d9:ea:93:18:82:9a:9d:97:91:68:70:71:3f:14:
         8c:79:ae:59:97:d6:1b:53:8a:39:9b:4c:b0:33:a7:3f:7b:63:
         1a:90:46:60:b4:74:a1:a5:ac:34:53:3b:a5:4c:43:57:c4:77:
         3f:79:0a:ea:1c:e1:69:64:bc:3d:2a:84:ef:b6:12:8c:7a:b7:
         36:83:88:a6:14:8e:cb:3a:92:2d:ef:98:ab:5f:2c:ee:8c:b6:
         e0:96:5b:c1:9b:b1:98:e9:59:d2:e8:dd:44:ad:1e:69:e4:b9:
         82:8e:f4:97:ce:b6:30:30:f6:b0:75:a8:11:e0:9f:d1:83:fe:
         de:f6:79:71:3e:ed:b4:df:81:0d:84:ad:a6:07:ed:3b:cd:e0:
         65:cf:9c:42:d7:f2:2d:c8:d6:0b:cc:98:2c:53:3a:40:ca:a6:
         b0:f2:1d:57:94:6e:13:6c:94:e3:e5:a7:f5:aa:71:e8:e0:83:
         cb:1c:1d:a3:3d:46:04:02:ad:9b:0c:4d:b1:10:bb:d0:3e:25:
         dd:b9:6e:de:17:fb:1a:9b:ac:c2:b0:d0:fd:99:c8:91:b6:a9:
         d4:ac:b4:b7:37:bd:88:82:ee:68:b9:e9:aa:1c:83:78:21:dc:
         37:36:92:e9:88:f4:b9:b6:1d:c4:4d:88:87:64:eb:d6:23:6f:
         e2:29:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 15:16:39 2025 by rpki-client