Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa
File:                     Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (raw, json)
Hash identifier:          PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=
Subject key identifier:   16:0D:10:B0:34:BF:A0:89:F4:00:71:65:A0:56:CE:58:B5:CB:3D:8C
Certificate issuer:       /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial:       0194228E1B45A35B281345278B4EA69E034D
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa
Signing time:             Wed 01 Jan 2025 15:48:45 +0000
ROA not before:           Wed 01 Jan 2025 15:48:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210861
IP address blocks:        93.190.126.0/24 maxlen: 24
                          2a11:7980::/40 maxlen: 40
                          2a11:7980:ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8e:1b:45:a3:5b:28:13:45:27:8b:4e:a6:9e:03:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
        Validity
            Not Before: Jan  1 15:48:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=160d10b034bfa089f4007165a056ce58b5cb3d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:34:1d:21:52:ea:6c:0a:c8:d2:f8:43:8c:48:
                    1a:a2:67:5f:97:a1:62:f5:84:c3:70:f5:42:fd:ff:
                    78:23:b7:78:76:aa:cb:15:10:6a:3a:64:ab:22:cf:
                    8b:b2:50:01:e9:13:bd:5c:cc:e5:e8:b9:00:6b:12:
                    e6:51:a4:68:28:8b:31:f9:37:ac:85:52:09:17:ad:
                    97:dc:35:1b:fe:9b:2a:f7:cc:2c:49:4e:38:8f:fb:
                    e1:0c:52:82:3d:8c:9d:7d:13:5e:8c:69:c2:aa:99:
                    37:a9:6e:fd:59:31:33:b3:93:2b:bc:92:ed:14:dc:
                    0b:d0:96:04:0e:b0:04:64:b8:81:ac:d4:9e:a7:9f:
                    dc:92:1e:c5:6e:ad:bd:e5:90:d4:7a:e7:ff:fa:8b:
                    60:d6:a6:d8:3a:21:08:96:4e:21:55:b1:e5:20:91:
                    b5:96:9f:bf:ac:23:7a:d1:41:fb:5f:2b:10:7e:4f:
                    b4:5b:90:99:93:79:64:1d:95:be:61:6a:a9:70:81:
                    9a:8d:f7:72:b8:4a:c8:22:ed:34:db:a2:e1:2e:b6:
                    0e:b1:61:77:8b:16:45:fe:94:02:73:3c:85:49:e3:
                    41:3a:b2:a0:68:05:5b:4a:79:9f:f9:32:4f:70:21:
                    2d:79:76:ac:8d:41:e5:4a:1d:f2:c9:70:42:2d:36:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0D:10:B0:34:BF:A0:89:F4:00:71:65:A0:56:CE:58:B5:CB:3D:8C
            X509v3 Authority Key Identifier:
                keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.126.0/24
                IPv6:
                  2a11:7980::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:eb:6b:88:09:ed:81:55:95:c3:1b:85:e4:1e:35:4b:c1:e3:
         c8:03:14:71:48:ac:02:62:92:cf:b0:ac:b4:26:8c:b0:88:75:
         f0:8d:73:dd:3c:21:96:bb:5a:c7:98:34:b9:13:18:62:11:82:
         e0:3e:85:b6:c3:bd:e4:64:4b:bc:88:62:9f:76:d3:c1:58:32:
         44:13:86:40:3d:49:37:e6:c9:5c:ee:6a:77:4d:6b:84:6b:b1:
         f8:6c:14:60:a3:eb:ba:70:e0:19:26:ab:07:0e:ef:bb:de:17:
         07:28:f0:59:ca:d2:92:9f:42:6f:c8:19:7a:9d:c9:27:7f:a1:
         d8:b7:27:e7:6e:96:40:54:34:ee:24:df:4b:03:eb:6c:ba:12:
         8a:15:31:a8:20:52:28:eb:72:4c:ab:f2:e7:fa:1e:07:8d:b9:
         09:22:21:07:cb:ae:46:a9:8c:f5:dd:31:4a:1a:e2:23:e1:35:
         1e:ae:78:06:85:18:8f:4f:7d:25:a2:fc:19:be:07:92:19:58:
         ae:2e:06:17:e6:58:9c:51:c3:5a:02:3d:ff:e9:e3:5c:0c:20:
         74:c8:0c:dc:16:2c:b9:d8:63:12:b8:53:a6:ab:93:95:d9:da:
         5e:18:36:ef:88:b2:ac:df:0f:10:32:e8:79:b6:dd:4e:ad:0a:
         bf:a0:86:a6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQijhtFo1soE0Uni06mngNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmE4ZDY0ZTkwMWIzOWI1MDFlZDM2OTNlYzI3NDMwNzEz
ODg2ZTMwHhcNMjUwMTAxMTU0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjBkMTBiMDM0YmZhMDg5ZjQwMDcxNjVhMDU2Y2U1OGI1Y2IzZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TQdIVLqbArI0vhDjEgaomdfl6Fi
9YTDcPVC/f94I7d4dqrLFRBqOmSrIs+LslAB6RO9XMzl6LkAaxLmUaRoKIsx+Tes
hVIJF62X3DUb/psq98wsSU44j/vhDFKCPYydfRNejGnCqpk3qW79WTEzs5MrvJLt
FNwL0JYEDrAEZLiBrNSep5/ckh7Fbq295ZDUeuf/+otg1qbYOiEIlk4hVbHlIJG1
lp+/rCN60UH7XysQfk+0W5CZk3lkHZW+YWqpcIGajfdyuErIIu0026LhLrYOsWF3
ixZF/pQCczyFSeNBOrKgaAVbSnmf+TJPcCEteXasjUHlSh3yyXBCLTa4SwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFBYNELA0v6CJ9ABxZaBWzli1yz2MMB8GA1UdIwQY
MBaAFGa6jWTpAbObUB7TaT7CdDBxOIbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEt
MGIzZTdlYmU0YWMyLzEvRmcwUXNEU19vSW4wQUhGbG9GYk9XTFhMUFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hYTdlNTMtNDkwZi00MTc3LThiMTEtMGIzZTdlYmU0YWMy
LzEvWnJxTlpPa0JzNXRRSHROcFBzSjBNSEU0aHVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXb5+MA4E
AgACMAgDBgAqEXmAADANBgkqhkiG9w0BAQsFAAOCAQEAcOtriAntgVWVwxuF5B41
S8HjyAMUcUisAmKSz7CstCaMsIh18I1z3Twhlrtax5g0uRMYYhGC4D6FtsO95GRL
vIhin3bTwVgyRBOGQD1JN+bJXO5qd01rhGux+GwUYKPrunDgGSarBw7vu94XByjw
WcrSkp9Cb8gZep3JJ3+h2Lcn526WQFQ07iTfSwPrbLoSihUxqCBSKOtyTKvy5/oe
B425CSIhB8uuRqmM9d0xShriI+E1Hq54BoUYj099JaL8Gb4HkhlYri4GF+ZYnFHD
WgI9/+njXAwgdMgM3BYsudhjErhTpquTldnaXhg274iyrN8PEDLoebbdTq0Kv6CG
pg==
-----END CERTIFICATE-----