Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/piJhKM_we331Drsk15cixPVEH_I.roa
File:                     piJhKM_we331Drsk15cixPVEH_I.roa (raw, json)
Hash identifier:          NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=
Subject key identifier:   A6:22:61:28:CF:F0:7B:7D:F5:0E:BB:24:D7:97:22:C4:F5:44:1F:F2
Certificate issuer:       /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial:       01951EAAEF26F982BE32CA495F1628002C27
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/piJhKM_we331Drsk15cixPVEH_I.roa
Signing time:             Wed 19 Feb 2025 14:44:33 +0000
ROA not before:           Wed 19 Feb 2025 14:44:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207578
IP address blocks:        185.187.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:aa:ef:26:f9:82:be:32:ca:49:5f:16:28:00:2c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
        Validity
            Not Before: Feb 19 14:44:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a6226128cff07b7df50ebb24d79722c4f5441ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:1e:8f:4c:c0:f5:ee:f3:30:d0:88:47:a1:
                    d8:7f:31:d0:65:8c:ca:ec:ac:b5:94:51:30:54:0a:
                    2b:f3:85:14:fd:71:74:96:08:85:01:ea:c1:7d:95:
                    c8:15:1b:46:e2:da:fb:8d:56:69:bf:e9:7d:9b:ba:
                    31:b5:36:8a:d9:30:2b:0e:27:89:82:d8:3c:1e:72:
                    97:9e:58:62:31:32:63:4f:9d:4b:33:bf:fb:ca:c8:
                    ba:75:fd:c2:1b:13:d8:b0:a8:ba:8f:65:c7:6b:35:
                    86:2f:04:d4:bd:ae:89:cb:1a:68:51:b2:71:99:dd:
                    f4:34:56:aa:6c:0f:f6:41:5c:9d:f5:15:b2:17:05:
                    2d:5b:50:dc:c3:a9:57:de:06:83:9e:d3:7f:0d:31:
                    6e:3a:f5:57:a5:cc:b2:d9:2c:1e:36:0f:c0:0e:5d:
                    69:33:63:4a:58:2c:e4:9f:8c:ee:02:68:b3:38:57:
                    70:6f:b8:c9:7d:25:9c:fe:97:c3:79:13:aa:56:72:
                    6e:b1:4e:e5:5a:ef:25:7f:b4:ba:25:e6:f5:2d:74:
                    e3:bf:48:19:94:61:ab:54:4a:5d:67:e8:b2:1f:4e:
                    ef:29:67:ea:2f:39:e0:e2:e4:5c:5b:eb:ee:74:dc:
                    da:2b:75:ef:3e:86:b5:f2:86:86:1e:b4:70:e4:96:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:61:28:CF:F0:7B:7D:F5:0E:BB:24:D7:97:22:C4:F5:44:1F:F2
            X509v3 Authority Key Identifier:
                keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/piJhKM_we331Drsk15cixPVEH_I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:07:52:48:7a:53:05:fe:4f:bd:a1:f7:ab:f1:f1:fd:d1:15:
         e9:25:3a:9e:e7:4e:77:4d:31:dc:31:a7:50:92:52:a4:a2:15:
         8d:0e:4b:94:e5:5a:2a:14:12:62:4c:2e:13:28:f2:f7:13:60:
         69:c1:99:64:6c:39:9f:75:b5:b6:73:92:8d:91:c0:ed:62:4b:
         8d:3b:bf:66:d9:a0:82:58:e1:a8:ad:89:ed:4c:a6:19:2c:81:
         76:50:a3:f8:ad:79:b6:6c:8a:cc:a6:fe:06:0f:b2:29:b5:ce:
         d9:54:a3:b2:0a:3b:32:62:b6:87:4d:eb:26:e0:96:76:f1:84:
         9b:28:c5:a8:db:9a:c6:92:55:ae:9d:2c:30:8e:95:5e:e1:6f:
         18:31:0f:d6:d7:29:aa:ac:e1:c4:fb:29:8a:ba:7e:dc:44:8d:
         3c:03:fe:f1:50:46:fe:7f:7c:be:ef:a9:8f:87:34:88:51:3a:
         7a:e4:64:78:b3:f8:88:e1:74:19:04:fb:b1:2f:ef:f5:46:24:
         e0:ec:cf:b8:0b:fb:ec:43:18:81:ee:2a:e7:ed:c2:a5:d1:4b:
         96:21:8a:07:5c:7b:a7:0c:7b:92:68:a4:be:2e:1f:f0:29:ac:
         7d:b1:93:3c:c6:7e:d8:d7:0c:dc:ab:fa:bc:ed:1b:93:42:63:
         70:0b:c3:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUequ8m+YK+MspJXxYoACwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjA4YmE0ZTc1ZTI3YjA0NmY5ZTUyNzgyMjFiNDQ3Nzhi
NmFlOGQwHhcNMjUwMjE5MTQ0NDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjIyNjEyOGNmZjA3YjdkZjUwZWJiMjRkNzk3MjJjNGY1NDQxZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNIej0zA9e7zMNCIR6HYfzHQZYzK
7Ky1lFEwVAor84UU/XF0lgiFAerBfZXIFRtG4tr7jVZpv+l9m7oxtTaK2TArDieJ
gtg8HnKXnlhiMTJjT51LM7/7ysi6df3CGxPYsKi6j2XHazWGLwTUva6JyxpoUbJx
md30NFaqbA/2QVyd9RWyFwUtW1Dcw6lX3gaDntN/DTFuOvVXpcyy2SweNg/ADl1p
M2NKWCzkn4zuAmizOFdwb7jJfSWc/pfDeROqVnJusU7lWu8lf7S6Jeb1LXTjv0gZ
lGGrVEpdZ+iyH07vKWfqLzng4uRcW+vudNzaK3XvPoa18oaGHrRw5JZjXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYiYSjP8Ht99Q67JNeXIsT1RB/yMB8GA1UdIwQY
MBaAFCggi6TnXiewRvnlJ4IhtEd4tq6NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQt
YjdjZDliM2IyZTRmLzEvcGlKaEtNX3dlMzMxRHJzazE1Y2l4UFZFSF9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMmNjMDItYmZkOS00MDcwLWEzMWQtYjdjZDliM2IyZTRm
LzEvS0NDTHBPZGVKN0JHLWVVbmdpRzBSM2kycm8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubssMA0G
CSqGSIb3DQEBCwUAA4IBAQA4B1JIelMF/k+9ofer8fH90RXpJTqe5053TTHcMadQ
klKkohWNDkuU5VoqFBJiTC4TKPL3E2BpwZlkbDmfdbW2c5KNkcDtYkuNO79m2aCC
WOGorYntTKYZLIF2UKP4rXm2bIrMpv4GD7Iptc7ZVKOyCjsyYraHTesm4JZ28YSb
KMWo25rGklWunSwwjpVe4W8YMQ/W1ymqrOHE+ymKun7cRI08A/7xUEb+f3y+76mP
hzSIUTp65GR4s/iI4XQZBPuxL+/1RiTg7M+4C/vsQxiB7irn7cKl0UuWIYoHXHun
DHuSaKS+Lh/wKax9sZM8xn7Y1wzcq/q87RuTQmNwC8NR
-----END CERTIFICATE-----