Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa
File:                     1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (raw, json)
Hash identifier:          FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=
Subject key identifier:   D4:7D:F0:AF:D1:0C:12:EF:FD:91:FE:99:97:7F:16:AE:4A:00:90:15
Certificate issuer:       /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial:       019426D944354F488379D0BC6F62F9638480
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa
Signing time:             Thu 02 Jan 2025 11:49:20 +0000
ROA not before:           Thu 02 Jan 2025 11:49:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56662
IP address blocks:        2001:67c:21ec::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:44:35:4f:48:83:79:d0:bc:6f:62:f9:63:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
        Validity
            Not Before: Jan  2 11:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d47df0afd10c12effd91fe99977f16ae4a009015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:79:ac:2e:e8:48:5b:52:bc:e2:c5:e4:e5:
                    c4:46:2e:8e:f1:75:fd:19:ca:b6:aa:42:be:ab:5c:
                    23:aa:e3:84:63:7c:c0:f6:c9:73:78:dc:10:f0:a9:
                    b1:7e:7a:f9:d2:1b:8e:9d:b6:6e:4c:23:d8:8e:e4:
                    bc:0c:70:5e:a1:33:44:79:90:d2:e3:b6:bb:7c:3f:
                    b4:c3:35:c1:fb:7c:d0:af:6c:c3:a3:13:76:94:a8:
                    88:eb:73:26:81:f3:e0:e9:0b:f8:bd:d9:c2:5f:97:
                    1d:49:b2:78:6f:7a:4f:8b:d0:98:25:df:5e:63:92:
                    81:09:c4:c3:e6:b2:aa:8c:81:20:d2:9e:d1:90:6c:
                    92:74:6b:55:80:f7:16:0d:54:f2:a0:cf:f2:b8:cd:
                    dc:32:e1:5f:32:30:66:30:ba:c7:b5:6c:1c:f2:e5:
                    45:e7:39:d4:f7:29:b1:11:c3:ef:09:73:dc:b8:d1:
                    c8:4e:8e:a4:e9:0a:32:35:bf:09:25:60:93:1c:9e:
                    9c:60:89:22:de:72:f6:48:2d:f9:93:14:e9:ca:32:
                    e2:f0:85:3f:01:21:69:1d:15:98:c2:89:35:fd:73:
                    6c:a1:01:eb:87:8f:61:42:8d:5b:24:19:4a:07:62:
                    90:99:16:6f:bd:6a:52:99:e3:f8:0b:27:51:05:cb:
                    98:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7D:F0:AF:D1:0C:12:EF:FD:91:FE:99:97:7F:16:AE:4A:00:90:15
            X509v3 Authority Key Identifier:
                keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:21ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:33:dd:8d:67:55:aa:a0:d1:9b:99:ab:c3:17:7e:47:d5:
         fc:72:76:b3:e3:6d:e6:8a:4d:85:ba:e9:35:29:0f:e8:a7:3c:
         7c:ea:0c:c5:0d:05:e7:e4:16:de:1a:d5:cb:c2:32:e1:b5:4f:
         70:c6:e8:64:b1:97:ff:6c:dd:3b:d7:4e:60:37:a5:05:d4:04:
         8c:53:50:dd:02:00:c2:ce:83:83:83:47:3b:49:2f:ce:fe:fb:
         03:92:8e:fc:6b:25:80:82:41:54:d4:77:f8:89:65:9d:22:26:
         ff:04:09:21:90:fa:b5:24:7e:c0:b4:8d:cb:13:04:9e:eb:19:
         ea:a1:bd:98:04:51:97:29:7e:1c:f5:ab:da:e2:05:3f:75:df:
         57:f8:6b:dc:64:92:0b:76:2e:6f:78:0a:5c:6a:67:32:72:80:
         25:db:ee:b9:35:81:f4:9b:e2:7e:4c:78:8d:94:26:6a:73:c7:
         da:2d:ca:ab:24:a8:9b:d4:41:94:6e:d9:72:f1:5c:0d:38:79:
         8f:d0:6f:95:51:c0:61:ae:68:d4:a4:14:70:2b:5c:b6:98:4b:
         0a:56:6f:c9:95:5f:a7:f4:db:44:25:ac:bb:b4:db:cf:d0:51:
         24:a1:4c:6c:e2:fa:be:d2:bd:72:2d:bc:fc:79:ec:ef:22:c0:
         af:c5:33:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQm2UQ1T0iDedC8b2L5Y4SAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw
NTczOTEwHhcNMjUwMTAyMTE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDdkZjBhZmQxMGMxMmVmZmQ5MWZlOTk5NzdmMTZhZTRhMDA5MDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMt5rC7oSFtSvOLF5OXERi6O8XX9
Gcq2qkK+q1wjquOEY3zA9slzeNwQ8Kmxfnr50huOnbZuTCPYjuS8DHBeoTNEeZDS
47a7fD+0wzXB+3zQr2zDoxN2lKiI63MmgfPg6Qv4vdnCX5cdSbJ4b3pPi9CYJd9e
Y5KBCcTD5rKqjIEg0p7RkGySdGtVgPcWDVTyoM/yuM3cMuFfMjBmMLrHtWwc8uVF
5znU9ymxEcPvCXPcuNHITo6k6QoyNb8JJWCTHJ6cYIki3nL2SC35kxTpyjLi8IU/
ASFpHRWYwok1/XNsoQHrh49hQo1bJBlKB2KQmRZvvWpSmeP4CydRBcuYuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNR98K/RDBLv/ZH+mZd/Fq5KAJAVMB8GA1UdIwQY
MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt
YTlhZWI0ODVkNTkyLzEvMUgzd3I5RU1FdV85a2Y2WmwzOFdya29Ba0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky
LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHs
MA0GCSqGSIb3DQEBCwUAA4IBAQBbKTPdjWdVqqDRm5mrwxd+R9X8cnaz423mik2F
uuk1KQ/opzx86gzFDQXn5BbeGtXLwjLhtU9wxuhksZf/bN07105gN6UF1ASMU1Dd
AgDCzoODg0c7SS/O/vsDko78ayWAgkFU1Hf4iWWdIib/BAkhkPq1JH7AtI3LEwSe
6xnqob2YBFGXKX4c9ava4gU/dd9X+GvcZJILdi5veApcamcycoAl2+65NYH0m+J+
THiNlCZqc8faLcqrJKib1EGUbtly8VwNOHmP0G+VUcBhrmjUpBRwK1y2mEsKVm/J
lV+n9NtEJay7tNvP0FEkoUxs4vq+0r1yLbz8eezvIsCvxTMv
-----END CERTIFICATE-----