Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/jsXee12bvu-ZP57QT85jN04UL6E.roa
File:                     jsXee12bvu-ZP57QT85jN04UL6E.roa (raw, json)
Hash identifier:          SgymiTyUTEyWZzfgt2pHDPt0K6rPB+UsNgaHx3jCAao=
Subject key identifier:   8E:C5:DE:7B:5D:9B:BE:EF:99:3F:9E:D0:4F:CE:63:37:4E:14:2F:A1
Certificate issuer:       /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial:       01942368D55480FD7740B66E2BD1470C5FB0
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/jsXee12bvu-ZP57QT85jN04UL6E.roa
Signing time:             Wed 01 Jan 2025 19:47:40 +0000
ROA not before:           Wed 01 Jan 2025 19:47:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60255
IP address blocks:        185.190.196.0/22 maxlen: 24
                          2a0e:2e80::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:68:d5:54:80:fd:77:40:b6:6e:2b:d1:47:0c:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
        Validity
            Not Before: Jan  1 19:47:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ec5de7b5d9bbeef993f9ed04fce63374e142fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:62:36:00:74:0a:23:41:89:46:84:a7:d7:
                    b4:46:a1:11:76:7e:72:55:31:35:58:f0:a6:29:cf:
                    57:e9:ac:ab:e9:7f:ce:68:29:6a:26:46:54:81:a4:
                    bb:ff:46:a5:f0:03:39:11:b8:48:ef:e8:7a:3d:1d:
                    a6:3d:43:5c:ca:f9:5b:70:08:2e:2c:72:96:40:40:
                    00:58:55:a1:9b:47:0e:3c:67:36:60:3b:36:70:c2:
                    13:97:ba:74:80:c5:11:59:95:89:af:3f:b5:f9:78:
                    70:8a:47:be:98:a8:59:66:21:8b:99:ad:d1:9e:f2:
                    06:8f:95:f4:69:30:03:45:ec:c0:82:cb:d1:d4:8f:
                    63:1a:85:ef:55:18:71:bd:9b:b0:cd:8f:d1:40:b3:
                    30:70:e3:cd:6d:e4:b3:08:fa:82:ca:f4:d5:6d:27:
                    fb:f6:e1:a2:bb:ea:5e:6d:03:e8:f5:c5:1d:5a:5f:
                    45:d2:3c:13:42:9f:7d:90:67:31:bd:fe:43:ab:76:
                    92:44:da:93:e0:d3:96:43:bb:1e:5a:4f:8f:22:62:
                    c8:28:aa:ac:71:c6:cb:f8:af:50:3d:5a:bd:b5:d6:
                    a2:63:bd:1d:b5:b7:f4:4e:94:c5:ac:b3:08:fc:71:
                    bd:7b:9f:6d:35:b4:7f:a3:ac:55:9d:93:11:68:35:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C5:DE:7B:5D:9B:BE:EF:99:3F:9E:D0:4F:CE:63:37:4E:14:2F:A1
            X509v3 Authority Key Identifier:
                keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/jsXee12bvu-ZP57QT85jN04UL6E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.196.0/22
                IPv6:
                  2a0e:2e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:e8:96:86:f5:c2:4b:84:a9:4f:98:ae:bf:d9:f2:cd:5e:
         21:08:3d:0c:99:10:dd:91:15:36:08:0c:4c:68:33:72:66:7d:
         37:84:c7:63:11:33:80:40:8d:1e:a7:88:8c:06:8a:9e:5e:3c:
         57:45:ca:c6:25:49:65:83:f5:21:f4:7b:b7:36:a3:81:bc:2c:
         8e:d0:21:57:a7:28:2e:96:d6:cb:5e:76:2a:26:d1:29:53:c0:
         ec:51:d0:8e:33:ba:6e:2b:0e:fd:fb:bb:77:0c:98:27:af:6b:
         3e:43:57:2d:46:0e:2c:52:9a:79:75:07:15:d1:1f:22:17:49:
         36:30:61:d6:27:71:25:10:c8:2b:3e:dd:38:9d:29:f9:55:e7:
         2b:b1:5f:e5:51:a0:d9:3c:88:72:b9:53:df:55:14:62:c4:b6:
         b4:0a:de:73:65:ba:a7:72:23:82:7e:10:f0:dc:cb:ae:94:6d:
         9f:13:04:f0:e7:76:62:87:e6:f3:27:2d:cf:93:c8:00:87:1f:
         11:b3:5c:78:fb:1a:fa:34:ef:9c:a5:30:97:c5:c0:74:d4:fe:
         26:e0:32:34:e6:ec:4d:ee:fa:ab:1c:b2:51:40:f6:4a:14:10:
         0d:51:08:3b:da:34:c3:93:f5:41:7c:c9:29:99:36:8c:c4:80:
         43:38:aa:68
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQjaNVUgP13QLZuK9FHDF+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZGZmMGUxNTIzNzgwNTUwN2FmNWQwM2FiZWRlYjg4MzJi
NGI4Y2IwHhcNMjUwMTAxMTk0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWM1ZGU3YjVkOWJiZWVmOTkzZjllZDA0ZmNlNjMzNzRlMTQyZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4hiNgB0CiNBiUaEp9e0RqERdn5y
VTE1WPCmKc9X6ayr6X/OaClqJkZUgaS7/0al8AM5EbhI7+h6PR2mPUNcyvlbcAgu
LHKWQEAAWFWhm0cOPGc2YDs2cMITl7p0gMURWZWJrz+1+Xhwike+mKhZZiGLma3R
nvIGj5X0aTADRezAgsvR1I9jGoXvVRhxvZuwzY/RQLMwcOPNbeSzCPqCyvTVbSf7
9uGiu+pebQPo9cUdWl9F0jwTQp99kGcxvf5Dq3aSRNqT4NOWQ7seWk+PImLIKKqs
ccbL+K9QPVq9tdaiY70dtbf0TpTFrLMI/HG9e59tNbR/o6xVnZMRaDWjGwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI7F3ntdm77vmT+e0E/OYzdOFC+hMB8GA1UdIwQY
MBaAFMTf8OFSN4BVB69dA6vt64gytLjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUt
NzE4ODdkMGE4M2JlLzEvanNYZWUxMmJ2dS1aUDU3UVQ4NWpOMDRVTDZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xNWJkNTMtOTk0YS00NmYyLTllNmUtNzE4ODdkMGE4M2Jl
LzEveE5fdzRWSTNnRlVIcjEwRHEtM3JpREswdU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub7EMA0E
AgACMAcDBQMqDi6AMA0GCSqGSIb3DQEBCwUAA4IBAQCUKuiWhvXCS4SpT5iuv9ny
zV4hCD0MmRDdkRU2CAxMaDNyZn03hMdjETOAQI0ep4iMBoqeXjxXRcrGJUllg/Uh
9Hu3NqOBvCyO0CFXpygultbLXnYqJtEpU8DsUdCOM7puKw79+7t3DJgnr2s+Q1ct
Rg4sUpp5dQcV0R8iF0k2MGHWJ3ElEMgrPt04nSn5VecrsV/lUaDZPIhyuVPfVRRi
xLa0Ct5zZbqnciOCfhDw3MuulG2fEwTw53Zih+bzJy3Pk8gAhx8Rs1x4+xr6NO+c
pTCXxcB01P4m4DI05uxN7vqrHLJRQPZKFBANUQg72jTDk/VBfMkpmTaMxIBDOKpo
-----END CERTIFICATE-----