Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/piuA8xpomSv55xGeH4ecg4F2dqc.roa
File:                     piuA8xpomSv55xGeH4ecg4F2dqc.roa (raw, json)
Hash identifier:          FtQ7ui0hwqrL0OiU0sJDOI0qLWWWybm5qo4kHyS10sQ=
Subject key identifier:   A6:2B:80:F3:1A:68:99:2B:F9:E7:11:9E:1F:87:9C:83:81:76:76:A7
Certificate issuer:       /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial:       019EB39B7AF4BAD4B250601732FC9560C070
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/piuA8xpomSv55xGeH4ecg4F2dqc.roa
Signing time:             Wed 10 Jun 2026 22:16:11 +0000
ROA not before:           Wed 10 Jun 2026 22:16:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203567
IP address blocks:        109.125.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b3:9b:7a:f4:ba:d4:b2:50:60:17:32:fc:95:60:c0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
        Validity
            Not Before: Jun 10 22:16:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a62b80f31a68992bf9e7119e1f879c83817676a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:17:56:33:05:1e:3b:83:7f:e2:5f:9e:23:3e:
                    f0:7f:de:7e:8c:37:27:a1:c7:52:7d:28:e1:38:0a:
                    a2:1e:a1:31:5c:34:3e:b3:61:8a:02:c2:95:89:a9:
                    b3:43:6d:60:d5:fc:a4:f2:5f:32:bc:8c:32:92:4e:
                    1f:71:08:6b:88:ef:fa:cc:8c:85:33:25:e9:3e:e1:
                    05:8c:98:a5:e8:b0:a2:9b:94:b2:c9:31:59:5d:d5:
                    99:3e:3f:e1:d5:37:c0:c0:8b:1b:66:d7:96:1a:a9:
                    28:80:e7:71:50:86:44:70:ef:b7:a4:66:70:bd:b1:
                    06:93:e5:2b:a7:11:4f:b2:4d:c9:30:6e:b1:8f:87:
                    43:e3:16:49:34:11:c3:50:14:d5:5d:44:f8:36:bb:
                    86:a2:26:80:c1:98:43:89:a7:92:0a:76:ce:e5:68:
                    17:80:1a:a3:fd:69:27:59:ec:4c:a2:4d:bb:d9:ce:
                    82:d2:8f:e1:99:1c:6a:bb:97:cb:b1:b8:89:6d:24:
                    50:85:d0:93:e0:36:0d:7c:98:06:0a:c1:9e:c6:d6:
                    c2:15:c8:7f:73:9c:9a:a5:33:4d:eb:68:45:cb:8e:
                    37:00:af:65:a9:c9:51:c9:fe:52:72:61:5b:69:d4:
                    ff:dc:52:4d:80:0e:30:bc:bf:31:23:c6:23:f0:05:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2B:80:F3:1A:68:99:2B:F9:E7:11:9E:1F:87:9C:83:81:76:76:A7
            X509v3 Authority Key Identifier:
                keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/piuA8xpomSv55xGeH4ecg4F2dqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.125.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:3a:b9:e7:f0:d7:c6:ad:39:e8:71:8a:7a:e6:8b:e2:94:57:
         d8:7c:9f:64:dc:d4:2a:df:54:a9:a8:ee:68:ba:96:96:3d:50:
         70:0f:5a:3f:d1:f3:f6:08:45:82:76:24:ed:50:2f:78:0b:df:
         82:dd:ee:5e:1c:ad:21:d6:b6:0f:2d:26:bf:eb:89:7e:c1:6c:
         84:f5:bd:b1:db:f1:ab:76:67:b5:28:cd:fe:de:58:0a:2c:aa:
         e9:d1:6e:d6:ed:23:0b:4f:a8:08:6d:b8:4f:2e:04:88:36:5e:
         b4:83:ca:62:1b:2e:66:ee:d6:d2:06:56:85:02:a7:a6:25:a5:
         a0:2c:21:bd:32:02:69:dc:f9:3f:bd:b3:4c:a4:96:f7:e6:a0:
         94:8b:a3:20:f3:1c:77:e8:77:18:87:7b:95:00:07:d1:d4:9b:
         0e:5d:94:d9:aa:27:03:f0:f4:a4:2c:83:d5:0e:9d:47:a3:1e:
         50:c1:6f:e8:fa:31:00:b6:ee:01:b1:47:46:cf:d4:96:09:25:
         5f:33:b8:3d:46:fc:91:24:cb:e5:96:22:6d:07:db:69:8e:d7:
         b8:5c:44:12:d2:92:1a:65:30:8f:55:b2:79:94:b7:9b:9c:64:
         30:f4:4f:98:c3:d8:6f:58:03:9e:84:aa:d5:3a:49:ff:37:5c:
         c5:fa:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----