Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/hH7p55BYalQ3lSf5_ESdyJOLa1g.roa
File:                     hH7p55BYalQ3lSf5_ESdyJOLa1g.roa (raw, json)
Hash identifier:          CwjN/ntMIQN6pGzj4DyEYFD1soFJfMvM2aBgkytuAgc=
Subject key identifier:   84:7E:E9:E7:90:58:6A:54:37:95:27:F9:FC:44:9D:C8:93:8B:6B:58
Certificate issuer:       /CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
Certificate serial:       01941FFA93F3EFA0861C7F9D0DE4FC63950B
Authority key identifier: 1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/hH7p55BYalQ3lSf5_ESdyJOLa1g.roa
Signing time:             Wed 01 Jan 2025 03:48:23 +0000
ROA not before:           Wed 01 Jan 2025 03:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210863
IP address blocks:        37.16.72.0/24 maxlen: 24
                          2a11:5d00::/29 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:93:f3:ef:a0:86:1c:7f:9d:0d:e4:fc:63:95:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b7e7bdc8e15ba6b2e6d09552476bb1b55b159c3
        Validity
            Not Before: Jan  1 03:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=847ee9e790586a54379527f9fc449dc8938b6b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:e7:76:d4:c5:83:d2:98:67:e0:1c:80:e7:
                    bb:1f:41:24:24:5d:e8:17:a9:ea:8c:b5:3e:b1:b3:
                    f6:8b:31:71:aa:74:e5:bb:89:ed:5c:da:16:65:53:
                    a2:88:7c:3b:ba:b5:9a:ea:a4:78:e3:63:74:21:0c:
                    9d:0b:e8:7a:ef:dd:f9:0f:4a:2f:ca:61:52:a4:d1:
                    52:42:9b:8a:45:0d:a3:9a:c0:88:2d:71:7d:c2:c5:
                    19:1d:f4:37:b9:de:ac:51:af:61:18:7c:67:e9:e2:
                    03:11:c3:af:b1:34:aa:14:c1:e9:e4:67:0c:74:c8:
                    53:f4:13:99:30:c7:3e:a9:04:18:56:2f:88:6b:a1:
                    ce:c6:e2:af:60:9d:09:15:b8:8a:f6:34:0b:c8:0f:
                    8e:5d:76:8f:ed:e5:97:56:9f:18:e0:b2:cf:d3:67:
                    9c:9f:3c:1c:75:2f:0d:63:8d:cb:01:de:37:44:77:
                    18:e0:59:e9:98:5b:d4:3b:30:b8:2a:5b:c6:47:f4:
                    4a:e5:3b:4c:62:3c:92:0c:da:55:ed:54:4d:50:9f:
                    36:85:22:55:33:67:14:35:f2:e3:83:f8:d6:34:65:
                    5f:bf:85:86:48:3e:ab:3c:2c:ba:97:de:cc:74:21:
                    cd:fc:45:6f:0b:40:43:85:56:34:06:1f:d4:63:e2:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:E9:E7:90:58:6A:54:37:95:27:F9:FC:44:9D:C8:93:8B:6B:58
            X509v3 Authority Key Identifier:
                keyid:1B:7E:7B:DC:8E:15:BA:6B:2E:6D:09:55:24:76:BB:1B:55:B1:59:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3573I4VumsubQlVJHa7G1WxWcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/hH7p55BYalQ3lSf5_ESdyJOLa1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/G3573I4VumsubQlVJHa7G1WxWcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.72.0/24
                IPv6:
                  2a11:5d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:1a:bd:07:91:d5:d4:d0:b5:65:41:b6:e7:47:0e:df:d0:
         9e:6c:15:29:18:b1:c5:fd:90:42:78:33:f1:63:41:1d:a5:cc:
         e9:b1:9e:82:21:f8:65:cd:a2:e0:9d:bf:06:e0:2c:9b:61:33:
         53:da:95:5d:29:4f:b8:03:ae:76:4f:d3:87:f4:66:6d:44:3c:
         a0:fb:43:db:d5:d9:03:a1:2f:b2:d5:75:59:1f:90:db:ee:d1:
         e6:22:99:74:c3:8c:28:8b:ae:3f:39:1c:24:27:97:a0:77:03:
         99:78:35:fc:a3:21:19:ee:8f:d6:ad:4e:cb:f3:2b:34:62:e4:
         1f:f9:ed:e5:aa:a9:5e:bf:43:5e:06:75:ee:68:14:57:96:64:
         e1:f6:ea:11:0f:82:15:84:3d:2f:b9:9e:1c:3e:8f:6b:1f:3e:
         1a:7a:35:17:53:43:3e:48:6b:b2:34:35:3d:fc:be:34:85:71:
         72:f3:96:c2:d5:2c:f8:83:e6:72:84:eb:b4:d9:68:39:82:d0:
         7c:79:b5:e4:a3:42:ee:ec:0f:44:94:e6:05:f1:59:f3:7e:89:
         90:83:95:e6:60:07:69:bf:82:f6:f7:90:97:ad:53:0a:d0:cf:
         9e:f4:03:cc:81:46:9d:be:cf:4f:a9:25:1f:b8:49:d8:57:d2:
         be:f4:e0:76
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+pPz76CGHH+dDeT8Y5ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiN2U3YmRjOGUxNWJhNmIyZTZkMDk1NTI0NzZiYjFiNTVi
MTU5YzMwHhcNMjUwMTAxMDM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDdlZTllNzkwNTg2YTU0Mzc5NTI3ZjlmYzQ0OWRjODkzOGI2YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPndtTFg9KYZ+AcgOe7H0EkJF3o
F6nqjLU+sbP2izFxqnTlu4ntXNoWZVOiiHw7urWa6qR442N0IQydC+h67935D0ov
ymFSpNFSQpuKRQ2jmsCILXF9wsUZHfQ3ud6sUa9hGHxn6eIDEcOvsTSqFMHp5GcM
dMhT9BOZMMc+qQQYVi+Ia6HOxuKvYJ0JFbiK9jQLyA+OXXaP7eWXVp8Y4LLP02ec
nzwcdS8NY43LAd43RHcY4FnpmFvUOzC4KlvGR/RK5TtMYjySDNpV7VRNUJ82hSJV
M2cUNfLjg/jWNGVfv4WGSD6rPCy6l97MdCHN/EVvC0BDhVY0Bh/UY+JbNwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIR+6eeQWGpUN5Un+fxEnciTi2tYMB8GA1UdIwQY
MBaAFBt+e9yOFbprLm0JVSR2uxtVsVnDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODIt
MzBlNTQwZDVkM2E3LzEvaEg3cDU1QllhbFEzbFNmNV9FU2R5Sk9MYTFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yNDcyYTktZmY2Ni00ZGNmLWFjODItMzBlNTQwZDVkM2E3
LzEvRzM1NzNJNFZ1bXN1YlFsVkpIYTdHMVd4V2NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAJRBIMA0E
AgACMAcDBQMqEV0AMA0GCSqGSIb3DQEBCwUAA4IBAQAkthq9B5HV1NC1ZUG250cO
39CebBUpGLHF/ZBCeDPxY0EdpczpsZ6CIfhlzaLgnb8G4CybYTNT2pVdKU+4A652
T9OH9GZtRDyg+0Pb1dkDoS+y1XVZH5Db7tHmIpl0w4woi64/ORwkJ5egdwOZeDX8
oyEZ7o/WrU7L8ys0YuQf+e3lqqlev0NeBnXuaBRXlmTh9uoRD4IVhD0vuZ4cPo9r
Hz4aejUXU0M+SGuyNDU9/L40hXFy85bC1Sz4g+ZyhOu02Wg5gtB8ebXko0Lu7A9E
lOYF8VnzfomQg5XmYAdpv4L295CXrVMK0M+e9APMgUadvs9PqSUfuEnYV9K+9OB2
-----END CERTIFICATE-----