Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/meyQlZ2V2fFm7jP19tS1SnwZU8o.roa
File:                     meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (raw, json)
Hash identifier:          Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=
Subject key identifier:   99:EC:90:95:9D:95:D9:F1:66:EE:33:F5:F6:D4:B5:4A:7C:19:53:CA
Certificate issuer:       /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial:       01942444FF1C431EB1043AF8A015B43A8B19
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/meyQlZ2V2fFm7jP19tS1SnwZU8o.roa
Signing time:             Wed 01 Jan 2025 23:48:08 +0000
ROA not before:           Wed 01 Jan 2025 23:48:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200356
IP address blocks:        185.159.106.0/23 maxlen: 23
                          2a07:b880:80::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:ff:1c:43:1e:b1:04:3a:f8:a0:15:b4:3a:8b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
        Validity
            Not Before: Jan  1 23:48:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=99ec90959d95d9f166ee33f5f6d4b54a7c1953ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:26:79:39:f5:03:99:1d:e6:07:28:2b:e4:
                    0f:56:4b:76:f9:50:f9:4a:54:a1:4a:40:c2:2b:8a:
                    4b:f8:80:38:ac:68:9d:b2:e5:83:45:38:1f:32:ab:
                    6f:a9:b1:48:9f:ce:be:40:2f:1a:35:2e:b3:7d:00:
                    24:41:9e:be:84:1e:3e:0b:2e:d9:e1:8e:32:19:81:
                    99:1a:5f:4d:09:ce:2e:f3:58:91:61:44:7a:5d:ad:
                    8f:c1:a1:31:ec:0e:5d:19:ea:12:22:e8:96:fe:15:
                    44:47:d6:af:fc:a4:ba:fc:15:42:c5:28:82:c2:d5:
                    52:e3:be:b8:df:52:a7:4d:b9:1e:31:03:c0:3e:49:
                    f4:24:5e:83:a3:e7:c7:d9:55:14:f9:a0:73:d5:52:
                    76:e5:6f:d7:07:3a:20:ca:e6:72:fa:7d:2c:9f:3b:
                    19:5a:97:cb:29:aa:cc:3c:06:b0:6f:83:08:50:fc:
                    44:e5:e2:b6:79:27:b1:f2:da:e5:bf:fb:c6:0c:a1:
                    f9:2f:a5:91:f7:51:4d:f0:10:9b:54:65:45:36:b3:
                    87:97:07:17:6b:f3:e3:be:c6:ce:87:68:15:53:d3:
                    11:09:b3:b6:da:ca:1a:d0:10:5e:6c:0a:30:17:59:
                    b5:cc:43:52:8d:9d:2a:38:7a:a6:32:3c:09:7a:a3:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EC:90:95:9D:95:D9:F1:66:EE:33:F5:F6:D4:B5:4A:7C:19:53:CA
            X509v3 Authority Key Identifier:
                keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/meyQlZ2V2fFm7jP19tS1SnwZU8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.159.106.0/23
                IPv6:
                  2a07:b880:80::/41

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:e3:fa:7f:ee:65:50:36:66:e1:20:6f:1e:9c:11:71:2a:
         34:33:a5:5b:cb:44:12:ca:1e:d0:e2:f5:3a:dc:02:56:72:4a:
         ec:4e:c0:5c:87:26:e0:3a:37:d5:ac:51:76:53:04:06:36:49:
         c7:e6:3f:7d:d8:25:95:92:f9:3f:28:2c:5b:85:6d:53:4f:9b:
         ee:51:ce:b9:87:2d:5a:2b:76:6c:f4:e8:b6:5b:42:17:6e:ac:
         6f:74:e6:d8:15:4a:a1:34:c1:cf:11:01:67:84:42:a2:94:bd:
         b7:b0:6c:cb:96:a2:cc:bd:f4:77:3f:1d:fe:56:d8:f5:bc:e4:
         08:89:83:53:5e:5e:0d:78:96:9e:70:47:29:0e:ea:6b:08:74:
         6b:67:99:fe:bc:76:16:41:1a:50:ff:0b:60:68:bc:70:22:cb:
         f4:b1:8b:1a:ef:63:74:dd:61:08:88:81:31:c6:92:ec:4a:a4:
         18:74:4b:59:fb:ad:b6:01:58:9f:77:a5:56:b6:f2:8e:89:24:
         be:60:6c:2e:c5:a8:9b:24:95:46:6e:29:64:b6:c6:15:cc:54:
         68:b2:a8:a7:4b:b4:34:e9:cc:a6:c8:2d:47:5d:91:36:21:ef:
         18:49:4c:fa:53:5e:38:c9:6d:6c:3a:95:4c:8b:72:b0:30:eb:
         5b:73:4c:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkRP8cQx6xBDr4oBW0OosZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz
MTIwZDIwHhcNMjUwMTAxMjM0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWVjOTA5NTlkOTVkOWYxNjZlZTMzZjVmNmQ0YjU0YTdjMTk1M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzowmeTn1A5kd5gcoK+QPVkt2+VD5
SlShSkDCK4pL+IA4rGidsuWDRTgfMqtvqbFIn86+QC8aNS6zfQAkQZ6+hB4+Cy7Z
4Y4yGYGZGl9NCc4u81iRYUR6Xa2PwaEx7A5dGeoSIuiW/hVER9av/KS6/BVCxSiC
wtVS476431KnTbkeMQPAPkn0JF6Do+fH2VUU+aBz1VJ25W/XBzogyuZy+n0snzsZ
WpfLKarMPAawb4MIUPxE5eK2eSex8trlv/vGDKH5L6WR91FN8BCbVGVFNrOHlwcX
a/PjvsbOh2gVU9MRCbO22soa0BBebAowF1m1zENSjZ0qOHqmMjwJeqOtLQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJnskJWdldnxZu4z9fbUtUp8GVPKMB8GA1UdIwQY
MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt
MDA0ZmU0MzNjN2M4LzEvbWV5UWxaMlYyZkZtN2pQMTl0UzFTbndaVThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4
LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuZ9qMA8E
AgACMAkDBwcqB7iAAIAwDQYJKoZIhvcNAQELBQADggEBAI4C4/p/7mVQNmbhIG8e
nBFxKjQzpVvLRBLKHtDi9TrcAlZySuxOwFyHJuA6N9WsUXZTBAY2ScfmP33YJZWS
+T8oLFuFbVNPm+5RzrmHLVordmz06LZbQhdurG905tgVSqE0wc8RAWeEQqKUvbew
bMuWosy99Hc/Hf5W2PW85AiJg1NeXg14lp5wRykO6msIdGtnmf68dhZBGlD/C2Bo
vHAiy/SxixrvY3TdYQiIgTHGkuxKpBh0S1n7rbYBWJ93pVa28o6JJL5gbC7FqJsk
lUZuKWS2xhXMVGiyqKdLtDTpzKbILUddkTYh7xhJTPpTXjjJbWw6lUyLcrAw61tz
TL4=
-----END CERTIFICATE-----