Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa
File:                     hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa (raw, json)
Hash identifier:          E3NJlfBqIWJ89UYs9nMw+LOY3dmFw01LCnketh8FRY0=
Subject key identifier:   84:F2:AB:83:38:58:AD:9D:7E:84:86:5D:3C:8A:37:B0:7A:6E:49:DE
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       0195FD462E07B92D207A8FD1AEDA70E7C574
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa
Signing time:             Thu 03 Apr 2025 20:09:49 +0000
ROA not before:           Thu 03 Apr 2025 20:09:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     11003
IP address blocks:        193.17.96.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:fd:46:2e:07:b9:2d:20:7a:8f:d1:ae:da:70:e7:c5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Apr  3 20:09:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=84f2ab833858ad9d7e84865d3c8a37b07a6e49de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:d7:6b:b7:44:88:d7:10:14:ef:0d:5d:36:
                    d0:1e:58:18:b5:36:0a:df:ce:a0:0a:12:9d:71:21:
                    65:6e:97:5a:e4:4a:57:c0:86:a7:30:95:68:2e:23:
                    dd:9e:8d:32:60:17:e5:dd:85:78:88:80:32:4d:cf:
                    92:3a:41:26:7b:f3:45:25:a9:4f:30:4e:97:38:39:
                    8e:ba:a7:30:d3:2b:e7:13:80:2f:96:62:cf:5f:bc:
                    d9:ea:b1:a3:08:c5:07:5e:59:19:31:a3:a9:11:5c:
                    86:ac:69:19:99:0d:fd:7b:e7:b4:48:f6:1a:48:b7:
                    ca:b2:77:53:8e:85:1c:53:41:5f:4a:ee:80:a7:38:
                    e3:29:fe:c2:61:41:80:90:40:23:7e:71:e9:9b:bf:
                    26:b9:f2:38:0b:f9:cb:24:bd:79:5b:7e:a7:93:34:
                    7e:3e:dd:12:d4:2e:20:df:e2:a7:b1:e4:36:19:d4:
                    8b:26:a0:54:9e:2b:8a:79:44:2e:49:d0:64:86:a7:
                    b1:68:34:6c:4f:e1:03:4e:5f:76:ab:87:8d:65:80:
                    b5:51:7a:23:b1:56:fb:92:bf:4c:ca:90:e6:ff:41:
                    ef:d9:54:be:d7:3d:96:4e:a2:07:f7:03:35:dd:53:
                    ed:57:9f:17:4b:95:40:be:0e:03:f5:91:55:6d:73:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:AB:83:38:58:AD:9D:7E:84:86:5D:3C:8A:37:B0:7A:6E:49:DE
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/hPKrgzhYrZ1-hIZdPIo3sHpuSd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         59:09:d2:9a:6b:03:cc:11:75:75:9d:ba:da:5f:26:9c:33:70:
         1c:02:5f:da:4a:dd:37:a1:df:91:d7:44:b2:d1:b0:95:24:44:
         87:00:b2:96:7f:03:62:b4:a1:d4:30:4f:d2:6a:16:8d:6c:78:
         d1:ce:37:5b:4e:24:cb:7b:b5:5d:08:62:46:1e:4a:89:c9:8b:
         e3:a0:d5:57:00:be:4c:8d:30:e1:aa:b9:02:70:e3:ff:31:7d:
         f5:70:31:bd:68:5d:64:6e:42:94:92:2e:4e:da:5d:d1:e8:a8:
         ba:40:29:c6:91:99:19:c0:86:04:fc:e7:de:39:f1:a5:9b:0a:
         d5:13:67:b8:b3:71:08:e8:df:8f:69:ec:01:81:1f:93:62:ad:
         c1:04:89:40:2e:21:2a:66:a3:ea:f7:d6:cd:d3:d6:af:4f:23:
         51:5d:a5:2a:eb:9a:f8:9e:6b:25:e6:11:ea:20:9a:17:82:6a:
         8a:b1:39:f7:96:d6:b1:fe:02:cf:bd:ed:d4:90:89:14:59:ea:
         c4:f3:e9:b2:b2:28:cd:7f:54:53:6c:b6:5d:33:77:c0:3e:a8:
         c5:1b:01:eb:b1:68:3d:0a:8f:57:03:0e:16:76:31:67:53:b1:
         ab:81:c0:8c:cd:8a:71:bc:97:bc:a6:cc:44:24:82:2c:f1:69:
         01:cf:dd:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX9Ri4HuS0geo/Rrtpw58V0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjBhMGNlMDEzZTJkNTJhNmZmMzU0YTI3MDg5NGJiOTk4
ZTQ1NDcwHhcNMjUwNDAzMjAwOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGYyYWI4MzM4NThhZDlkN2U4NDg2NWQzYzhhMzdiMDdhNmU0OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIXXa7dEiNcQFO8NXTbQHlgYtTYK
386gChKdcSFlbpda5EpXwIanMJVoLiPdno0yYBfl3YV4iIAyTc+SOkEme/NFJalP
ME6XODmOuqcw0yvnE4AvlmLPX7zZ6rGjCMUHXlkZMaOpEVyGrGkZmQ39e+e0SPYa
SLfKsndTjoUcU0FfSu6ApzjjKf7CYUGAkEAjfnHpm78mufI4C/nLJL15W36nkzR+
Pt0S1C4g3+KnseQ2GdSLJqBUniuKeUQuSdBkhqexaDRsT+EDTl92q4eNZYC1UXoj
sVb7kr9MypDm/0Hv2VS+1z2WTqIH9wM13VPtV58XS5VAvg4D9ZFVbXO7SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITyq4M4WK2dfoSGXTyKN7B6bkneMB8GA1UdIwQY
MBaAFBEgoM4BPi1Spv81SicIlLuZjkVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUt
MzFhZjNlMjk0NjcxLzEvaFBLcmd6aFlyWjEtaElaZFBJbzNzSHB1U2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC80MjE0OTgtMjhkMy00Mzc2LWI2MjUtMzFhZjNlMjk0Njcx
LzEvRVNDZ3pnRS1MVkttX3pWS0p3aVV1NW1PUlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwRFgMA0G
CSqGSIb3DQEBCwUAA4IBAQBZCdKaawPMEXV1nbraXyacM3AcAl/aSt03od+R10Sy
0bCVJESHALKWfwNitKHUME/SahaNbHjRzjdbTiTLe7VdCGJGHkqJyYvjoNVXAL5M
jTDhqrkCcOP/MX31cDG9aF1kbkKUki5O2l3R6Ki6QCnGkZkZwIYE/OfeOfGlmwrV
E2e4s3EI6N+PaewBgR+TYq3BBIlALiEqZqPq99bN09avTyNRXaUq65r4nmsl5hHq
IJoXgmqKsTn3ltax/gLPve3UkIkUWerE8+mysijNf1RTbLZdM3fAPqjFGwHrsWg9
Co9XAw4WdjFnU7GrgcCMzYpxvJe8psxEJIIs8WkBz93q
-----END CERTIFICATE-----