Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa
File:                     8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa (raw, json)
Hash identifier:          BX2fgKcwA/D+GDVmNic2yN4VwJrGKaQ4xJFsZbX1RYA=
Subject key identifier:   F0:6B:BB:F4:E2:11:35:7B:D4:A3:E6:C8:41:2B:C1:C7:BC:54:AB:1D
Certificate issuer:       /CN=53122e03a841b8878963affff695ca4f9fd0682c
Certificate serial:       01958424CFF070450306C6CFFE2C7BFD98BA
Authority key identifier: 53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa
Signing time:             Tue 11 Mar 2025 07:39:19 +0000
ROA not before:           Tue 11 Mar 2025 07:39:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59437
IP address blocks:        91.226.226.0/24 maxlen: 24
                          2a0c:3c80::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:84:24:cf:f0:70:45:03:06:c6:cf:fe:2c:7b:fd:98:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53122e03a841b8878963affff695ca4f9fd0682c
        Validity
            Not Before: Mar 11 07:39:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f06bbbf4e211357bd4a3e6c8412bc1c7bc54ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:14:f2:76:f2:c3:d3:3d:43:1e:c0:ea:5b:
                    32:9e:e3:a2:8e:ac:50:c7:d7:ee:64:7e:80:13:00:
                    da:4e:40:0d:d8:01:f2:a1:8b:ac:cc:17:ca:51:4d:
                    72:10:e2:46:7f:eb:bd:27:34:80:2e:0a:da:cb:f0:
                    f6:10:45:18:9d:bf:6b:95:06:a3:17:45:d9:73:18:
                    22:cf:b7:79:d3:28:3f:67:ac:47:24:5a:f0:8d:4b:
                    b0:90:c2:9e:a1:6d:5a:f8:53:2c:1a:11:31:02:d4:
                    8e:c0:7f:f5:61:43:9f:c0:ee:ad:c7:d9:da:08:97:
                    0c:23:ac:a2:a4:79:6d:45:40:48:b6:32:d6:9d:82:
                    ce:9b:ea:4e:00:83:c5:3d:4b:c8:f8:66:6a:c8:50:
                    d2:8b:12:f7:86:1f:e8:fc:82:ec:af:0e:db:f3:c1:
                    67:06:f4:05:d0:32:94:79:f5:c7:20:0a:9a:03:24:
                    80:d6:22:43:11:e4:ea:f2:bf:2e:60:b7:18:c4:fa:
                    5d:3a:7f:4a:d5:67:48:27:ce:e2:1d:01:39:1e:84:
                    c3:01:9d:5d:0c:c4:27:00:f4:a2:77:27:9e:8d:8c:
                    1d:76:ea:38:40:0e:63:d8:48:fa:ef:b2:ac:15:3a:
                    ad:b4:fc:ef:f5:ba:55:1f:f1:00:8b:36:5e:da:59:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6B:BB:F4:E2:11:35:7B:D4:A3:E6:C8:41:2B:C1:C7:BC:54:AB:1D
            X509v3 Authority Key Identifier:
                keyid:53:12:2E:03:A8:41:B8:87:89:63:AF:FF:F6:95:CA:4F:9F:D0:68:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxIuA6hBuIeJY6__9pXKT5_QaCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/8Gu79OIRNXvUo-bIQSvBx7xUqx0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f539cb-14bf-48a2-a835-ce8d2dd43066/1/UxIuA6hBuIeJY6__9pXKT5_QaCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.226.0/24
                IPv6:
                  2a0c:3c80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:35:ac:f9:70:e1:7d:ad:fb:be:58:99:98:d6:b9:fa:7d:
         03:97:4a:b5:01:e0:68:bf:a8:3a:f3:b0:8d:59:04:26:56:53:
         76:be:cb:90:4e:59:a3:9d:29:f9:93:49:36:a8:94:75:eb:b3:
         ef:d7:19:2f:81:3b:dd:96:6f:fa:68:90:67:e4:3d:69:72:5a:
         17:ee:a4:59:09:72:cf:99:fd:40:2c:31:40:66:0b:41:94:d4:
         bf:a3:3c:aa:61:1f:fc:d5:72:49:90:f7:67:a0:63:38:9b:83:
         18:a7:5d:88:72:bc:2d:9a:c8:e7:df:2e:5b:4f:99:69:77:41:
         7d:af:4a:87:bc:77:a7:0f:bf:74:8f:d5:61:5c:17:ed:cd:67:
         83:d5:27:89:8c:0a:e9:dd:b3:f2:43:fb:76:24:b5:67:d4:ba:
         de:94:42:d0:9e:99:14:0b:54:72:54:1d:0a:ba:3e:60:56:ce:
         44:c2:d7:e1:23:a3:49:6a:c5:51:bc:64:48:3b:76:a6:ec:bb:
         06:86:09:79:f2:07:53:2a:e6:c5:ba:51:69:49:60:62:6b:24:
         37:24:f6:68:34:bc:e9:9f:f3:a0:be:6c:31:39:c0:cd:5d:14:
         b7:6d:37:d6:95:4f:18:4b:67:ae:db:63:e9:25:64:ea:7d:fe:
         7f:73:8c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----