Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/uZTEWQ6MhgXY2fMpr5mX4K6YNb8.roa
File:                     uZTEWQ6MhgXY2fMpr5mX4K6YNb8.roa (raw, json)
Hash identifier:          HLAK+cEsCk5oLAcpG65X2kCdflt34M6l8yr7wHR0wbw=
Subject key identifier:   B9:94:C4:59:0E:8C:86:05:D8:D9:F3:29:AF:99:97:E0:AE:98:35:BF
Certificate issuer:       /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial:       0193634A65A7A3AD4069CED8E91EAB710ED7
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/uZTEWQ6MhgXY2fMpr5mX4K6YNb8.roa
Signing time:             Mon 25 Nov 2024 12:27:20 +0000
ROA not before:           Mon 25 Nov 2024 12:27:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209641
IP address blocks:        2a0e:4585::/32 maxlen: 32
                          2a0e:4587::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:63:4a:65:a7:a3:ad:40:69:ce:d8:e9:1e:ab:71:0e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
        Validity
            Not Before: Nov 25 12:27:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b994c4590e8c8605d8d9f329af9997e0ae9835bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:74:83:d1:b9:f6:4d:53:9f:c3:f1:31:3e:
                    8b:e6:4b:a1:a5:4b:83:7f:fe:ee:54:d0:4b:92:3b:
                    a7:42:4d:99:ad:10:10:ff:df:a7:d7:a0:8f:fd:09:
                    d2:26:78:02:67:d2:8e:2e:38:3b:6b:e9:c0:32:4c:
                    91:89:93:51:34:67:9d:5f:d2:15:cc:78:db:fd:9c:
                    6e:77:91:de:ca:0a:f0:b2:a1:5b:da:73:76:04:f1:
                    bc:72:f6:0d:78:59:38:52:4f:da:21:58:ca:93:83:
                    f4:0c:83:25:7b:c9:e4:5e:81:80:89:e2:41:44:41:
                    18:04:5f:1e:69:cd:69:48:be:4d:1e:1a:5e:57:0a:
                    78:05:3f:09:ca:d5:6e:29:1a:c5:56:b6:4c:f7:bc:
                    47:b3:83:02:ea:d7:25:89:28:92:41:71:4c:85:2e:
                    a7:b0:22:e5:d0:c8:e4:f8:cd:89:9a:f7:3b:e6:1b:
                    5d:88:6b:48:10:08:71:8a:1c:ec:ea:55:3f:07:f2:
                    5b:5a:79:e9:4e:c2:2b:3f:60:d2:75:ef:91:83:59:
                    95:6d:4b:68:7a:38:02:e2:e5:e6:34:98:e9:55:8e:
                    32:5e:67:57:cb:e7:bb:70:cf:17:4f:35:b5:af:40:
                    ea:1b:c3:32:24:4d:9f:6b:5a:06:23:58:cd:6a:fc:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:94:C4:59:0E:8C:86:05:D8:D9:F3:29:AF:99:97:E0:AE:98:35:BF
            X509v3 Authority Key Identifier:
                keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/uZTEWQ6MhgXY2fMpr5mX4K6YNb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:4585::/32
                  2a0e:4587::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:36:ac:a8:38:47:0c:15:ee:9e:5f:27:a9:ab:4d:f2:d4:c4:
         0d:db:d1:0e:79:ca:48:4a:39:de:25:af:d4:47:6a:ee:26:33:
         fe:12:e0:6b:27:72:ff:c5:c1:89:ce:4f:0c:dd:68:52:2b:8d:
         cd:bb:a6:33:a2:65:e0:10:d3:df:82:16:d2:53:b4:2f:ec:e7:
         cf:37:0a:23:4f:eb:44:cf:77:59:03:77:2f:0a:59:14:a3:ed:
         51:45:07:0d:ed:5b:7b:2e:85:29:ff:4c:a5:a9:89:d8:c7:91:
         1c:8e:4b:3e:f2:b4:56:03:12:7d:6a:f0:08:64:4c:9d:4b:cd:
         77:5b:6f:33:25:af:89:8d:6f:4a:65:c1:84:03:5d:7b:c6:db:
         fe:62:60:1b:c9:4a:ae:c2:22:b4:8a:d6:fe:f7:b0:4f:fd:b4:
         79:d6:fc:20:4e:37:d6:b0:8e:a5:3d:77:8d:62:95:23:e2:bb:
         65:fc:ba:e3:f3:f1:fa:c0:50:81:12:fd:99:28:05:d8:7d:d0:
         27:9f:a4:22:a9:14:0b:9b:f7:0c:f2:7a:a0:8e:87:19:28:b5:
         5f:ff:eb:f8:30:9b:34:54:df:dc:66:bf:04:6e:f2:1e:ec:c7:
         02:69:06:59:18:eb:6c:67:97:dc:17:b1:03:39:cf:20:48:17:
         69:91:e9:27
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZNjSmWno61Aac7Y6R6rcQ7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMGIwNTI1MTM3ODk5NGNmYTgwODhkMjNiNmVlZWQ0ZTll
NmFiMDgwHhcNMjQxMTI1MTIyNzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTk0YzQ1OTBlOGM4NjA1ZDhkOWYzMjlhZjk5OTdlMGFlOTgzNWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw110g9G59k1Tn8PxMT6L5kuhpUuD
f/7uVNBLkjunQk2ZrRAQ/9+n16CP/QnSJngCZ9KOLjg7a+nAMkyRiZNRNGedX9IV
zHjb/Zxud5HeygrwsqFb2nN2BPG8cvYNeFk4Uk/aIVjKk4P0DIMle8nkXoGAieJB
REEYBF8eac1pSL5NHhpeVwp4BT8JytVuKRrFVrZM97xHs4MC6tcliSiSQXFMhS6n
sCLl0Mjk+M2Jmvc75htdiGtIEAhxihzs6lU/B/JbWnnpTsIrP2DSde+Rg1mVbUto
ejgC4uXmNJjpVY4yXmdXy+e7cM8XTzW1r0DqG8MyJE2fa1oGI1jNavw0NQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLmUxFkOjIYF2NnzKa+Zl+CumDW/MB8GA1UdIwQY
MBaAFDELBSUTeJlM+oCI0jtu7tTp5qsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEt
N2NmZGYyZGY2NjMyLzEvdVpURVdRNk1oZ1hZMmZNcHI1bVg0SzZZTmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEtN2NmZGYyZGY2NjMy
LzEvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKg5FhQMF
ACoORYcwDQYJKoZIhvcNAQELBQADggEBAGs2rKg4RwwV7p5fJ6mrTfLUxA3b0Q55
ykhKOd4lr9RHau4mM/4S4Gsncv/FwYnOTwzdaFIrjc27pjOiZeAQ09+CFtJTtC/s
5883CiNP60TPd1kDdy8KWRSj7VFFBw3tW3suhSn/TKWpidjHkRyOSz7ytFYDEn1q
8AhkTJ1LzXdbbzMlr4mNb0plwYQDXXvG2/5iYBvJSq7CIrSK1v73sE/9tHnW/CBO
N9awjqU9d41ilSPiu2X8uuPz8frAUIES/ZkoBdh90CefpCKpFAub9wzyeqCOhxko
tV//6/gwmzRU39xmvwRu8h7sxwJpBlkY62xnl9wXsQM5zyBIF2mR6Sc=
-----END CERTIFICATE-----