Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa
File:                     qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (raw, json)
Hash identifier:          4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=
Subject key identifier:   AA:19:15:FF:C9:9D:45:3A:C0:AF:CA:69:A1:90:4A:83:24:24:11:D3
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       0194221FDCE2C0FD1F59CAE396D7F2395893
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa
Signing time:             Wed 01 Jan 2025 13:48:21 +0000
ROA not before:           Wed 01 Jan 2025 13:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207498
IP address blocks:        212.6.41.0/24 maxlen: 24
                          2a0d:9b00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:dc:e2:c0:fd:1f:59:ca:e3:96:d7:f2:39:58:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Jan  1 13:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aa1915ffc99d453ac0afca69a1904a83242411d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:83:b8:23:66:37:84:52:4c:a4:7e:62:13:
                    3a:7f:94:76:bb:a9:9d:41:d7:e8:41:f3:71:68:79:
                    d5:c0:56:d1:25:34:b6:dc:f4:2c:57:1a:c2:a5:87:
                    67:98:dc:37:63:be:df:6e:b1:f9:54:a3:b7:39:bf:
                    b1:52:68:1e:d6:af:e1:ca:6f:0c:c8:2d:38:00:82:
                    33:29:b4:81:8b:bc:db:a7:a1:57:91:f2:4f:d8:f2:
                    33:88:35:f6:5a:35:5d:1b:e1:55:d3:fa:df:ee:bc:
                    30:33:14:3a:78:cf:7f:2f:d2:d1:5a:85:18:a1:85:
                    c1:d5:99:21:f6:4d:ba:84:09:b3:16:ce:29:0b:49:
                    c8:ad:60:ef:77:01:5a:12:7e:e1:00:76:bf:71:48:
                    7e:0c:ee:24:49:d2:fd:cc:3b:7b:80:b7:78:b3:af:
                    66:4b:07:72:9b:e5:5e:01:0f:1c:98:e3:09:f0:16:
                    9a:ba:86:03:73:71:09:54:33:c5:a7:45:ed:55:ab:
                    bc:5b:0e:ea:8b:20:f8:3c:5d:0e:b8:64:3e:55:f5:
                    20:55:50:d6:a3:54:2c:86:87:1d:29:f9:c9:df:1a:
                    bb:37:1a:6c:ee:df:e9:80:66:80:a3:08:65:a1:86:
                    75:fe:07:c9:29:eb:3a:46:99:83:72:19:0c:0c:69:
                    49:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:19:15:FF:C9:9D:45:3A:C0:AF:CA:69:A1:90:4A:83:24:24:11:D3
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.41.0/24
                IPv6:
                  2a0d:9b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:27:85:c7:b4:4c:81:93:65:3b:e3:3b:d8:f5:1c:1e:68:63:
         08:a1:db:ff:b6:4b:fa:f2:71:31:52:71:7c:e6:d3:83:38:fa:
         6f:c2:b1:df:c4:67:60:a4:96:13:54:82:09:aa:b3:11:c1:4d:
         7c:9d:62:16:94:ea:1d:1c:4f:9d:59:be:9e:83:00:57:00:1e:
         b5:5e:ee:4e:39:2f:ba:10:68:c8:bd:e9:e7:6f:4e:f6:ed:48:
         3f:43:ee:34:82:3e:9b:2a:09:51:ae:be:06:95:11:bd:bb:80:
         02:f1:f2:cf:f8:ee:15:16:c7:41:de:5d:20:19:0e:97:32:f0:
         93:21:b3:b8:1a:a5:52:3b:cb:b7:9c:78:6e:ac:c5:8b:d3:5d:
         a3:31:d9:be:4c:d5:94:ca:67:69:81:b6:fd:ad:c3:fc:98:3e:
         78:69:7c:d6:0b:07:1c:0d:23:bd:12:b4:0a:b3:a0:3b:95:77:
         9d:16:7d:38:1c:9b:05:ad:0e:0f:02:44:09:47:2f:7b:aa:cc:
         77:6f:f3:cd:b0:fd:4a:a7:87:ab:a0:91:30:47:fd:e9:13:0a:
         fb:b4:58:36:79:38:00:c2:a4:5c:48:97:80:7c:d1:e6:23:51:
         92:d8:65:89:55:47:fb:8a:36:0b:a0:55:e8:f4:e5:be:e6:75:
         b5:84:aa:81
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQiH9ziwP0fWcrjltfyOViTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi
ODUzZDEwHhcNMjUwMTAxMTM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTE5MTVmZmM5OWQ0NTNhYzBhZmNhNjlhMTkwNGE4MzI0MjQxMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTKDuCNmN4RSTKR+YhM6f5R2u6md
QdfoQfNxaHnVwFbRJTS23PQsVxrCpYdnmNw3Y77fbrH5VKO3Ob+xUmge1q/hym8M
yC04AIIzKbSBi7zbp6FXkfJP2PIziDX2WjVdG+FV0/rf7rwwMxQ6eM9/L9LRWoUY
oYXB1Zkh9k26hAmzFs4pC0nIrWDvdwFaEn7hAHa/cUh+DO4kSdL9zDt7gLd4s69m
Swdym+VeAQ8cmOMJ8BaauoYDc3EJVDPFp0XtVau8Ww7qiyD4PF0OuGQ+VfUgVVDW
o1QshocdKfnJ3xq7Nxps7t/pgGaAowhloYZ1/gfJKes6RpmDchkMDGlJawIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKoZFf/JnUU6wK/KaaGQSoMkJBHTMB8GA1UdIwQY
MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1
LTgxMTVkZjMxNzIzNS8xL3Foa1ZfOG1kUlRyQXI4cHBvWkJLZ3lRa0VkTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1LTgxMTVkZjMxNzIz
NS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBADUBikw
DQQCAAIwBwMFACoNmwAwDQYJKoZIhvcNAQELBQADggEBAKQnhce0TIGTZTvjO9j1
HB5oYwih2/+2S/rycTFScXzm04M4+m/Csd/EZ2CklhNUggmqsxHBTXydYhaU6h0c
T51Zvp6DAFcAHrVe7k45L7oQaMi96edvTvbtSD9D7jSCPpsqCVGuvgaVEb27gALx
8s/47hUWx0HeXSAZDpcy8JMhs7gapVI7y7eceG6sxYvTXaMx2b5M1ZTKZ2mBtv2t
w/yYPnhpfNYLBxwNI70StAqzoDuVd50WfTgcmwWtDg8CRAlHL3uqzHdv882w/Uqn
h6ugkTBH/ekTCvu0WDZ5OADCpFxIl4B80eYjUZLYZYlVR/uKNgugVej05b7mdbWE
qoE=
-----END CERTIFICATE-----