Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/qMfArzwkX8G0WDNHJN4uX2h7ong.roa
File:                     qMfArzwkX8G0WDNHJN4uX2h7ong.roa (raw, json)
Hash identifier:          J4HIUTvl0CZ/07KSIMq+Jwo8Hxn+rCK5OIiJhW9OzqI=
Subject key identifier:   A8:C7:C0:AF:3C:24:5F:C1:B4:58:33:47:24:DE:2E:5F:68:7B:A2:78
Certificate issuer:       /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial:       019420D62292345D6DDF1058CF4D2CEA0833
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/qMfArzwkX8G0WDNHJN4uX2h7ong.roa
Signing time:             Wed 01 Jan 2025 07:48:11 +0000
ROA not before:           Wed 01 Jan 2025 07:48:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212224
IP address blocks:        91.245.20.0/22 maxlen: 24
                          2a01:5f6::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d6:22:92:34:5d:6d:df:10:58:cf:4d:2c:ea:08:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
        Validity
            Not Before: Jan  1 07:48:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a8c7c0af3c245fc1b458334724de2e5f687ba278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:eb:dc:35:24:ce:c8:5b:05:eb:c4:ca:04:
                    1e:be:41:86:1f:3a:a4:75:12:09:4c:5b:4d:c5:e9:
                    fb:57:3a:12:a0:dc:a8:57:50:be:44:3f:72:42:06:
                    a6:1e:01:e5:35:ac:9f:0d:fe:f3:91:6c:82:f8:a0:
                    b6:39:fa:ce:95:43:88:6c:4e:2c:5d:67:9d:a7:a5:
                    a5:8c:2c:b8:f7:f3:7c:56:9e:77:1b:67:91:4c:c6:
                    65:53:5f:90:01:79:e7:04:ff:7e:5f:01:6d:89:70:
                    ed:f3:9d:a6:d0:35:d2:82:d6:b5:1d:47:22:d0:c6:
                    38:52:65:6c:66:51:7d:45:c6:9a:bd:81:50:33:5c:
                    81:b9:70:94:1f:52:25:0a:77:15:22:53:4c:b1:5c:
                    db:02:85:09:da:9b:50:60:ac:c4:5d:d9:fe:b4:8e:
                    2e:af:42:ce:77:3a:c9:6c:71:56:9e:db:d5:d2:4c:
                    e2:99:8f:82:a3:a5:10:e7:60:d6:e9:b1:06:30:23:
                    5c:0a:f4:8a:32:01:f2:69:eb:72:0f:d1:1e:23:2b:
                    48:89:af:0c:a7:c3:da:64:7f:43:d0:90:1b:3b:9a:
                    4c:0f:54:44:62:4f:c2:4b:95:1a:b7:ef:99:a5:b5:
                    bb:b6:88:ff:4a:ab:b4:27:6b:68:21:c4:79:ef:fb:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C7:C0:AF:3C:24:5F:C1:B4:58:33:47:24:DE:2E:5F:68:7B:A2:78
            X509v3 Authority Key Identifier:
                keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/qMfArzwkX8G0WDNHJN4uX2h7ong.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.245.20.0/22
                IPv6:
                  2a01:5f6::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:98:c7:17:ce:2f:cf:2b:63:2d:bd:06:4e:f0:ee:ad:8a:4b:
         58:4a:c9:d6:76:01:65:51:ff:91:97:60:f8:0e:85:a3:eb:44:
         a4:b9:be:68:b0:08:5d:b1:ff:bf:f6:72:8b:fd:a8:da:4a:82:
         15:ee:b8:fa:d9:53:42:1d:3d:48:63:f8:de:0d:44:c7:1d:c0:
         04:49:1f:5a:01:90:00:36:37:4e:18:0b:96:f9:42:90:55:77:
         6c:b5:3f:51:98:32:a8:59:af:bc:85:c4:f6:a4:ba:e3:5b:06:
         f6:01:1c:6a:07:d0:cc:5e:44:02:3d:2b:a6:61:3b:9b:9e:14:
         21:5b:f5:c8:41:57:8c:d6:7c:33:b5:a4:d6:a5:1f:8e:5e:5c:
         b2:1b:96:ce:b2:0c:cd:f2:99:e2:d9:9c:d5:2e:be:12:5d:41:
         72:c0:3e:9e:94:7c:10:7e:02:03:ba:37:83:ef:d4:fa:f5:e4:
         57:de:31:52:79:04:f7:32:8e:44:22:6f:ab:5d:3f:fa:8d:a6:
         f7:e7:e4:4a:88:aa:bb:41:a4:e9:ec:9f:0a:4f:25:c4:8b:12:
         50:8c:49:89:38:df:3f:c0:a0:f9:1d:a5:fa:85:a7:15:55:9f:
         81:26:d0:14:8d:c2:90:c7:16:b2:e8:47:ce:a7:6c:cc:3e:27:
         76:0d:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----