Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa
File:                     mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (raw, json)
Hash identifier:          omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=
Subject key identifier:   99:25:2E:68:D6:3A:51:D9:18:9B:49:43:BF:0B:47:AA:FD:CD:BC:B5
Certificate issuer:       /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial:       01941FFA8253EACFECD3736BBDAF9453012F
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa
Signing time:             Wed 01 Jan 2025 03:48:18 +0000
ROA not before:           Wed 01 Jan 2025 03:48:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213025
IP address blocks:        91.200.179.0/24 maxlen: 24
                          2a0a:d700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:82:53:ea:cf:ec:d3:73:6b:bd:af:94:53:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
        Validity
            Not Before: Jan  1 03:48:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99252e68d63a51d9189b4943bf0b47aafdcdbcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:f5:fb:b4:69:03:a6:5c:b7:ed:f9:23:b1:
                    31:a6:b5:71:d2:50:a2:d6:44:e4:28:89:c0:3f:b0:
                    78:8f:88:1d:49:45:9e:bd:16:d6:2d:93:8f:e8:de:
                    07:37:5f:3c:ef:46:f7:68:a7:ce:62:b3:00:3c:d7:
                    81:83:b5:67:61:d9:8c:29:d3:b2:15:cd:ce:1c:dd:
                    94:db:ac:9e:8f:85:d7:5c:9b:d7:b9:b5:5f:c7:b5:
                    81:2e:66:96:1f:ab:ca:95:35:e2:30:68:70:9a:bf:
                    9f:2d:93:4e:6f:52:6e:64:4f:be:86:f9:a4:e5:77:
                    b4:8a:13:bc:a0:2b:da:2e:de:38:26:15:a3:a4:58:
                    cd:5c:dd:dd:4e:46:b2:01:74:3f:0b:4a:32:d8:c6:
                    22:ca:e4:73:16:ce:5f:bf:f0:a0:51:eb:57:81:d6:
                    91:25:ed:d9:fa:d7:fe:e1:f0:e7:a6:e9:34:4b:87:
                    76:97:7d:13:b6:d8:47:fe:51:84:cf:99:63:11:9c:
                    6a:e2:8f:fb:af:70:37:be:9d:4f:6f:d7:a1:9b:b2:
                    68:a0:ee:f1:81:37:e0:f9:6f:80:34:57:8d:6b:5a:
                    f0:02:18:50:12:58:72:8c:70:f4:73:0f:bf:65:4f:
                    0e:bb:06:79:72:25:f3:3c:1e:e9:47:61:ab:8e:19:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:25:2E:68:D6:3A:51:D9:18:9B:49:43:BF:0B:47:AA:FD:CD:BC:B5
            X509v3 Authority Key Identifier:
                keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.200.179.0/24
                IPv6:
                  2a0a:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:93:a7:10:2a:ce:a6:73:14:05:fc:fe:fa:58:56:5f:1d:
         f5:e5:20:8d:87:b5:e5:8f:7b:1d:eb:7a:3e:47:86:da:57:8a:
         94:6a:cd:89:e5:32:14:66:a3:42:fa:6f:aa:1a:ec:27:47:d6:
         49:34:69:17:e4:d8:02:a4:69:f5:06:5d:0f:ff:4d:a0:20:a0:
         56:aa:d1:e0:ee:14:69:69:22:37:72:73:09:68:30:8b:b7:28:
         ae:0e:08:cd:21:9b:49:49:ea:be:7d:0f:a8:43:46:27:53:4a:
         1e:71:3b:0f:d9:65:78:fa:82:73:2b:9a:45:ed:36:d7:13:8c:
         76:ff:7a:fd:72:9a:7e:db:4f:71:cc:55:6d:ff:19:88:30:c0:
         8c:5d:4b:fd:2a:71:b5:4f:9d:fa:dd:50:ab:81:2b:73:0d:13:
         fb:60:0b:46:83:2b:89:0a:2d:ed:10:26:39:c1:60:2a:4b:ee:
         31:ec:35:25:9d:d1:56:b2:e8:c5:d7:88:87:e3:25:b3:89:a2:
         63:12:c2:01:62:dd:b4:9b:70:6b:45:62:20:ef:35:d3:ba:2b:
         04:2c:a5:2e:fe:93:69:2a:30:48:75:c5:a0:89:29:f1:f8:02:
         c5:1a:be:b0:ca:ca:b0:33:18:3b:0d:b3:f3:b3:0e:9b:8d:7c:
         26:4f:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----