Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/NTYUoge45dvOl1ZSuhPFRu0wgls.roa
File:                     NTYUoge45dvOl1ZSuhPFRu0wgls.roa (raw, json)
Hash identifier:          bVCgdreaadQsa1h3KDS0ys3D8VNZDzW4zMimMnGKLoQ=
Subject key identifier:   35:36:14:A2:07:B8:E5:DB:CE:97:56:52:BA:13:C5:46:ED:30:82:5B
Certificate issuer:       /CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
Certificate serial:       01951E939312AF2153BC608D2C4F0E108282
Authority key identifier: E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/NTYUoge45dvOl1ZSuhPFRu0wgls.roa
Signing time:             Wed 19 Feb 2025 14:19:02 +0000
ROA not before:           Wed 19 Feb 2025 14:19:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198249
IP address blocks:        185.221.41.0/24 maxlen: 24
                          2a09:f00:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:1e:93:93:12:af:21:53:bc:60:8d:2c:4f:0e:10:82:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b56f9ee18fdbfaf30a0da57982e27273dbcb42
        Validity
            Not Before: Feb 19 14:19:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=353614a207b8e5dbce975652ba13c546ed30825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:8f:8e:f2:c8:99:ba:d0:4f:25:e1:c1:2a:
                    67:f6:fb:3a:18:2a:59:3c:e6:a4:21:bd:45:95:4c:
                    a2:c9:da:20:b5:9b:b2:e8:db:51:d7:03:09:02:0e:
                    80:b9:55:e1:8f:75:a8:bd:57:0f:cc:55:96:11:f9:
                    a5:8f:64:c5:6c:1f:8d:b3:c1:c5:ed:a7:a8:c5:ff:
                    14:ad:f5:5b:9f:17:34:1c:4c:9d:8b:17:27:35:d7:
                    36:35:86:ca:c2:1c:7e:6d:77:0e:89:c5:99:83:20:
                    64:b7:0f:35:78:3f:db:37:5b:20:5b:a4:f8:4d:88:
                    6c:dd:b6:94:73:77:06:dd:65:93:ff:e2:06:c3:70:
                    35:51:71:dc:f2:6a:04:ec:b4:25:ca:71:fe:83:d2:
                    02:17:04:05:89:e4:d7:21:ec:2d:00:47:12:9e:e2:
                    96:d3:c2:cf:24:82:93:ac:d0:34:4b:e1:6e:5d:82:
                    dd:95:89:84:72:12:63:ec:fd:1e:50:3f:09:cb:90:
                    fc:3d:6f:74:80:a9:a9:ec:e2:9a:e5:bc:ac:ec:fd:
                    73:3f:80:8c:73:28:25:f3:4d:b3:e5:e2:de:ac:0f:
                    9e:89:49:61:6c:8a:ef:77:e7:7b:43:6f:ef:28:ac:
                    5a:2d:2c:f4:66:5a:74:45:71:f6:a0:42:04:5c:4e:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:14:A2:07:B8:E5:DB:CE:97:56:52:BA:13:C5:46:ED:30:82:5B
            X509v3 Authority Key Identifier:
                keyid:E8:B5:6F:9E:E1:8F:DB:FA:F3:0A:0D:A5:79:82:E2:72:73:DB:CB:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LVvnuGP2_rzCg2leYLicnPby0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/NTYUoge45dvOl1ZSuhPFRu0wgls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/63957b-3fc1-45c1-a9c6-7355b2043e54/1/6LVvnuGP2_rzCg2leYLicnPby0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.221.41.0/24
                IPv6:
                  2a09:f00:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:0e:56:69:8d:48:a5:22:3a:31:fb:fb:53:5b:02:2e:00:1f:
         45:de:4a:67:65:b6:47:11:ee:b0:cb:d9:df:58:86:00:3f:23:
         36:50:2e:6b:71:c6:62:7a:1f:14:68:0a:a5:d1:68:38:08:b2:
         bb:b9:0f:af:9e:59:0d:fe:01:f7:48:a9:91:4d:a4:c9:f5:05:
         88:d8:0b:11:08:84:c7:c0:b9:b4:9a:37:90:06:5c:c5:d6:b8:
         be:8c:1b:07:0f:ed:ce:7c:df:5b:bc:2a:2c:e6:9d:33:48:23:
         8c:97:28:c2:1b:4e:91:fa:7e:4c:8f:b5:4d:e1:ac:26:49:ed:
         84:7f:0c:83:70:a9:72:4e:fe:a6:c1:5a:ad:c9:b0:bc:58:21:
         87:1e:a0:9a:40:f5:af:8f:45:ea:e2:2b:1a:14:84:a1:37:03:
         14:35:4b:46:bf:d4:96:f5:c3:cd:bf:97:77:2f:6d:bb:78:a7:
         09:e4:72:9f:9f:06:c1:49:4f:e5:38:ea:9f:30:00:8c:9c:ff:
         40:9d:26:ea:27:2e:cf:86:b5:50:60:22:0f:ac:37:24:9f:4a:
         b2:d8:49:23:f3:47:05:c3:59:28:69:80:05:ef:7e:42:c3:fe:
         93:3d:dd:cb:80:eb:19:ae:65:60:31:74:1a:b0:97:6f:c3:cc:
         dc:e2:ec:31
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZUek5MSryFTvGCNLE8OEIKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjU2ZjllZTE4ZmRiZmFmMzBhMGRhNTc5ODJlMjcyNzNk
YmNiNDIwHhcNMjUwMjE5MTQxOTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTM2MTRhMjA3YjhlNWRiY2U5NzU2NTJiYTEzYzU0NmVkMzA4MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5GPjvLImbrQTyXhwSpn9vs6GCpZ
POakIb1FlUyiydogtZuy6NtR1wMJAg6AuVXhj3WovVcPzFWWEfmlj2TFbB+Ns8HF
7aeoxf8UrfVbnxc0HEydixcnNdc2NYbKwhx+bXcOicWZgyBktw81eD/bN1sgW6T4
TYhs3baUc3cG3WWT/+IGw3A1UXHc8moE7LQlynH+g9ICFwQFieTXIewtAEcSnuKW
08LPJIKTrNA0S+FuXYLdlYmEchJj7P0eUD8Jy5D8PW90gKmp7OKa5bys7P1zP4CM
cygl802z5eLerA+eiUlhbIrvd+d7Q2/vKKxaLSz0Zlp0RXH2oEIEXE6rRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDU2FKIHuOXbzpdWUroTxUbtMIJbMB8GA1UdIwQY
MBaAFOi1b57hj9v68woNpXmC4nJz28tCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxWdm51R1AyX3J6Q2cybGVZTGljblBieTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82Mzk1N2ItM2ZjMS00NWMxLWE5YzYt
NzM1NWIyMDQzZTU0LzEvTlRZVW9nZTQ1ZHZPbDFaU3VoUEZSdTB3Z2xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82Mzk1N2ItM2ZjMS00NWMxLWE5YzYtNzM1NWIyMDQzZTU0
LzEvNkxWdm51R1AyX3J6Q2cybGVZTGljblBieTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAud0pMA8E
AgACMAkDBwAqCQ8AAAwwDQYJKoZIhvcNAQELBQADggEBAAUOVmmNSKUiOjH7+1Nb
Ai4AH0XeSmdltkcR7rDL2d9YhgA/IzZQLmtxxmJ6HxRoCqXRaDgIsru5D6+eWQ3+
AfdIqZFNpMn1BYjYCxEIhMfAubSaN5AGXMXWuL6MGwcP7c5831u8KizmnTNII4yX
KMIbTpH6fkyPtU3hrCZJ7YR/DINwqXJO/qbBWq3JsLxYIYceoJpA9a+PReriKxoU
hKE3AxQ1S0a/1Jb1w82/l3cvbbt4pwnkcp+fBsFJT+U46p8wAIyc/0CdJuonLs+G
tVBgIg+sNySfSrLYSSPzRwXDWShpgAXvfkLD/pM93cuA6xmuZWAxdBqwl2/DzNzi
7DE=
-----END CERTIFICATE-----