Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa
File:                     WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa (raw, json)
Hash identifier:          iOllh5gi/7wnwzUfRzCTrEG6FgLIkJkLCK4mhZ+VRkU=
Subject key identifier:   59:83:97:7F:F6:6E:AE:6F:3E:6D:64:BF:45:84:09:DE:AE:D1:8B:B5
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       01942521878C4D805EA8F3CDFB9A67524AD2
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa
Signing time:             Thu 02 Jan 2025 03:49:01 +0000
ROA not before:           Thu 02 Jan 2025 03:49:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     912
IP address blocks:        185.156.184.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:87:8c:4d:80:5e:a8:f3:cd:fb:9a:67:52:4a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Jan  2 03:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5983977ff66eae6f3e6d64bf458409deaed18bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:d6:41:33:37:59:94:79:77:94:96:bc:81:
                    24:ec:89:1e:33:80:4d:1d:57:f6:00:6a:26:a8:5a:
                    d0:47:3a:84:88:f6:40:cb:3c:d4:21:4a:1f:5e:41:
                    99:f6:81:5d:9d:ee:57:8b:bb:ea:46:e1:e5:78:b0:
                    85:ba:17:39:dd:b5:54:dd:15:e4:b5:c6:07:1a:77:
                    fe:04:d1:4d:4e:94:e4:94:1f:1b:37:f5:b8:51:76:
                    2d:d6:88:cd:02:26:b9:d5:ea:df:81:7d:38:6c:93:
                    73:76:23:8a:de:f4:ed:12:29:7d:66:b7:8e:7b:a2:
                    83:3f:a2:06:8c:86:d2:e2:ce:e7:41:83:b2:29:81:
                    83:06:4b:ff:26:cf:53:6c:31:b7:ab:1b:9e:4b:d6:
                    c1:09:16:8e:4e:96:bf:5f:cb:3d:13:8b:b4:3c:77:
                    f8:e1:26:33:93:35:31:e9:ab:7a:cf:1e:61:af:0e:
                    38:24:f9:6b:2d:81:12:83:70:d3:d8:44:6f:6b:92:
                    7d:b7:bb:6c:9b:54:a5:da:e3:1f:f7:40:e5:e0:93:
                    14:8b:34:c3:19:06:79:6f:f1:b0:ed:40:95:b3:21:
                    63:95:8b:7a:bd:3a:4e:cc:19:5b:9b:7e:7f:b6:c8:
                    a0:ae:d3:ba:67:4b:7b:da:11:53:97:2b:c7:eb:01:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:97:7F:F6:6E:AE:6F:3E:6D:64:BF:45:84:09:DE:AE:D1:8B:B5
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/WYOXf_Zurm8-bWS_RYQJ3q7Ri7U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:d4:45:b5:1e:dc:69:d2:0b:82:aa:41:21:ed:f6:b7:4a:
         39:d9:cd:1f:8e:d3:78:cb:c2:87:31:cf:0f:cc:b7:b4:ec:9e:
         30:a2:fc:45:a5:01:a3:56:23:be:15:63:04:63:d2:65:3d:ce:
         66:27:d7:4a:53:37:f4:1a:3a:13:41:f2:c1:4b:41:c7:c5:04:
         92:72:13:b1:2f:c9:9b:db:30:4a:4f:27:96:b8:c6:04:e1:62:
         6a:97:56:ff:10:1e:2b:96:83:33:71:9f:c4:46:46:8e:2e:9f:
         13:11:3d:6e:5c:3d:64:9e:e9:38:db:e9:38:e6:7b:b5:a2:55:
         36:34:fa:bf:3c:9b:0e:01:c9:75:22:23:77:20:27:b9:e7:96:
         89:bb:89:87:1a:69:5d:28:38:cb:55:49:77:e6:67:42:4f:37:
         08:d7:97:34:c6:01:36:9a:e4:c1:10:d7:42:87:99:4d:d8:5a:
         e8:50:51:fa:66:68:c2:61:46:c3:54:1b:2e:0c:e8:14:c6:02:
         a9:0d:4d:2e:7c:bb:4b:73:5a:50:d8:20:e9:53:37:02:03:9d:
         df:eb:25:1d:6b:22:47:06:a8:69:a6:9a:ba:98:92:37:ae:00:
         c4:22:45:5a:b0:f2:fb:b3:ec:22:8d:82:32:c7:55:6d:f8:81:
         77:36:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----