Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/IWr6TuTrJyjayPLvTxSMqZtzabw.roa
File:                     IWr6TuTrJyjayPLvTxSMqZtzabw.roa (raw, json)
Hash identifier:          rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=
Subject key identifier:   21:6A:FA:4E:E4:EB:27:28:DA:C8:F2:EF:4F:14:8C:A9:9B:73:69:BC
Certificate issuer:       /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial:       0194206864FFB90ECBFE012152CA68365650
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/IWr6TuTrJyjayPLvTxSMqZtzabw.roa
Signing time:             Wed 01 Jan 2025 05:48:20 +0000
ROA not before:           Wed 01 Jan 2025 05:48:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24939
IP address blocks:        193.111.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:64:ff:b9:0e:cb:fe:01:21:52:ca:68:36:56:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
        Validity
            Not Before: Jan  1 05:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=216afa4ee4eb2728dac8f2ef4f148ca99b7369bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:72:f9:2f:a5:70:f1:4f:f2:3a:c8:31:48:
                    3c:eb:8b:ed:23:7f:a1:01:12:fd:37:8f:5c:78:7e:
                    07:ed:d7:bb:f2:02:8f:9b:ac:5a:93:0f:d2:3a:ef:
                    41:a9:45:43:55:4e:1d:3a:fe:c8:57:33:78:6c:a0:
                    79:66:79:6e:ad:d4:74:58:9d:95:40:ea:8b:da:e5:
                    c2:96:c0:5f:40:e8:0b:bb:98:91:e5:3d:76:d2:3d:
                    98:e9:fa:4a:49:be:42:a1:0a:c3:96:75:1a:94:53:
                    0a:83:53:6f:8c:0d:d3:64:61:c7:94:ed:53:40:28:
                    16:87:b3:1d:48:e5:10:f8:b5:73:bd:83:9b:8d:e9:
                    8e:db:74:78:cb:ee:a7:7b:c7:c6:f8:71:ad:94:f7:
                    cc:5c:00:4e:e2:66:30:d1:28:2d:fd:98:da:79:4b:
                    d6:92:55:f5:83:44:42:9c:0a:40:1a:83:25:c3:5d:
                    51:c0:da:08:9c:1d:70:a5:b1:85:2f:c1:0e:b1:24:
                    9f:b8:50:b3:71:37:18:af:d8:95:0a:88:55:c3:f8:
                    0b:45:21:6c:bd:0d:3e:31:6c:03:2c:60:3c:5c:ab:
                    a9:28:4a:d6:00:43:da:4a:c9:75:04:28:f5:46:6e:
                    b8:d9:82:e5:57:cb:d5:49:41:8e:f0:4b:14:a9:01:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6A:FA:4E:E4:EB:27:28:DA:C8:F2:EF:4F:14:8C:A9:9B:73:69:BC
            X509v3 Authority Key Identifier:
                keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/IWr6TuTrJyjayPLvTxSMqZtzabw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:a1:14:d5:8a:ff:8c:a5:dd:d9:b8:19:3d:6a:02:bd:45:3c:
         36:61:23:52:05:90:90:28:5d:3f:8f:a7:8e:07:2f:dc:02:e3:
         23:b5:7c:71:0b:cd:0f:de:fe:98:2e:37:44:eb:da:b1:87:32:
         f5:b9:4d:49:af:32:16:cd:f4:49:d2:d5:55:eb:c2:03:af:b4:
         c4:10:2a:2e:97:bb:78:01:c3:dd:ec:3d:10:6e:c3:a3:50:8e:
         72:94:7f:94:38:2e:1d:4a:76:76:bd:11:63:08:1f:4b:18:b2:
         ce:11:8b:9b:94:d6:ce:0c:19:db:35:c0:99:10:8b:3a:71:2b:
         a1:84:3c:89:8d:27:bf:6b:7b:97:81:98:01:c9:47:18:44:d3:
         cf:00:92:fe:ce:ca:2d:b9:01:33:97:c1:9b:3c:bb:55:f4:b2:
         ff:3f:df:d3:26:cf:63:1b:2e:fd:d9:af:c4:a0:06:0b:49:16:
         3b:e3:d6:2a:64:79:cf:1e:96:36:0d:26:3e:f2:31:0b:54:d7:
         88:e1:2e:10:99:c2:6a:1d:a9:28:ff:72:94:d6:08:a5:d8:0d:
         c7:18:e8:fd:6c:55:e9:9e:70:44:51:e5:ca:c9:60:ed:53:f0:
         6b:03:91:69:de:73:5e:3a:98:23:6f:0b:6e:25:4d:00:49:91:
         00:26:18:c0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQgaGT/uQ7L/gEhUspoNlZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWZmNzZlMTJkYzE0Yzc0NGFhNzI2ZTAxNzQxNzI3YzQ2
ZGMxNTkwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTZhZmE0ZWU0ZWIyNzI4ZGFjOGYyZWY0ZjE0OGNhOTliNzM2OWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNty+S+lcPFP8jrIMUg864vtI3+h
ARL9N49ceH4H7de78gKPm6xakw/SOu9BqUVDVU4dOv7IVzN4bKB5ZnlurdR0WJ2V
QOqL2uXClsBfQOgLu5iR5T120j2Y6fpKSb5CoQrDlnUalFMKg1NvjA3TZGHHlO1T
QCgWh7MdSOUQ+LVzvYObjemO23R4y+6ne8fG+HGtlPfMXABO4mYw0Sgt/ZjaeUvW
klX1g0RCnApAGoMlw11RwNoInB1wpbGFL8EOsSSfuFCzcTcYr9iVCohVw/gLRSFs
vQ0+MWwDLGA8XKupKErWAEPaSsl1BCj1Rm642YLlV8vVSUGO8EsUqQHb2wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCFq+k7k6yco2sjy708UjKmbc2m8MB8GA1UdIwQY
MBaAFPvv924S3BTHRKpybgF0FyfEbcFZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tXzNiaExjRk1kRXFuSnVBWFFYSjhSdHdWay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhm
LTNiOGY1MDhhNzU0YS8xL0lXcjZUdVRySnlqYXlQTHZUeFNNcVp0emFidy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWYvZDgwMWY3LTI4MjQtNGVhOS1hZDhmLTNiOGY1MDhhNzU0
YS8xLzEtLV8zYmhMY0ZNZEVxbkp1QVhRWEo4UnR3VmsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALBb9gw
DQYJKoZIhvcNAQELBQADggEBAAShFNWK/4yl3dm4GT1qAr1FPDZhI1IFkJAoXT+P
p44HL9wC4yO1fHELzQ/e/pguN0Tr2rGHMvW5TUmvMhbN9EnS1VXrwgOvtMQQKi6X
u3gBw93sPRBuw6NQjnKUf5Q4Lh1Kdna9EWMIH0sYss4Ri5uU1s4MGds1wJkQizpx
K6GEPImNJ79re5eBmAHJRxhE088Akv7Oyi25ATOXwZs8u1X0sv8/39Mmz2MbLv3Z
r8SgBgtJFjvj1ipkec8eljYNJj7yMQtU14jhLhCZwmodqSj/cpTWCKXYDccY6P1s
VemecERR5crJYO1T8GsDkWnec146mCNvC24lTQBJkQAmGMA=
-----END CERTIFICATE-----