Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa
File:                     8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa (raw, json)
Hash identifier:          6c5KWPrXXMji3H6W3aAMo6TC6fKptrhCcp/hd4gp2T0=
Subject key identifier:   F2:B2:98:2B:E8:98:1B:5A:A0:F0:AC:A3:5F:F6:5F:74:91:63:50:9A
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       0194266BFE370CD2494F172D1CE051286CFB
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa
Signing time:             Thu 02 Jan 2025 09:49:59 +0000
ROA not before:           Thu 02 Jan 2025 09:49:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202692
IP address blocks:        185.156.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:fe:37:0c:d2:49:4f:17:2d:1c:e0:51:28:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Jan  2 09:49:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f2b2982be8981b5aa0f0aca35ff65f749163509a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:5c:d2:9e:4b:fb:ed:8c:2c:96:12:98:5f:
                    c7:f3:87:ae:af:05:fa:72:55:f0:ca:80:3b:c5:13:
                    1d:5f:46:21:a9:7b:17:e0:04:e0:d5:89:5d:0b:67:
                    fc:fb:1a:23:3d:44:c5:b3:f4:67:c9:8f:e0:52:7f:
                    cc:39:50:e8:b9:f1:03:aa:e1:94:29:2d:ac:08:ca:
                    78:e8:c0:30:db:d2:05:56:44:9c:45:3e:51:5e:0c:
                    6a:26:96:9c:f7:c1:cf:ad:6c:50:ce:68:1d:3b:9b:
                    fe:75:9f:b3:a3:98:b0:8a:79:af:b4:46:9b:33:a9:
                    90:aa:5e:f3:c6:58:33:ff:1a:2a:d4:4c:fc:77:9e:
                    6d:38:cc:cb:ba:9d:00:c2:69:e0:b5:11:f7:d5:53:
                    87:bd:c0:f9:8b:c8:64:c1:63:7d:b5:da:91:ca:e1:
                    19:00:22:2d:10:78:40:23:f8:49:33:68:8b:aa:f8:
                    1e:44:3c:32:d7:96:ef:32:2d:f5:c5:52:57:d2:07:
                    dc:0b:7f:24:62:71:e4:5e:e7:cc:ba:f4:62:30:e0:
                    93:68:2a:60:ad:61:27:91:1c:e6:16:07:8b:3d:64:
                    dc:0a:9b:e6:14:69:9a:0e:71:10:e8:dd:81:a3:e9:
                    49:52:3e:3e:ca:18:70:69:8d:8d:74:6c:aa:36:33:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B2:98:2B:E8:98:1B:5A:A0:F0:AC:A3:5F:F6:5F:74:91:63:50:9A
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/8rKYK-iYG1qg8KyjX_ZfdJFjUJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.156.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:fb:9a:b2:ec:af:39:d9:19:a3:dc:b3:05:2b:73:50:9a:58:
         fc:5a:88:9c:a4:19:d8:9e:d9:11:37:e2:9a:eb:3b:42:83:78:
         a5:1f:66:50:18:be:a9:b0:d8:84:d4:eb:3c:7a:d2:ab:a0:dd:
         06:92:51:3b:07:e9:49:4f:69:cc:17:28:9e:23:83:d8:4d:97:
         e3:7c:d8:bf:83:a5:16:5e:9c:6c:32:0f:ea:b1:5f:33:97:74:
         25:1c:d1:0c:4c:92:68:4a:1d:58:f0:06:a5:31:a3:0c:c0:9d:
         ce:91:59:1d:e6:88:ef:d4:a9:e4:4d:bc:2c:ee:df:39:e1:1b:
         e6:f4:a7:af:e9:1b:e7:66:2a:87:98:43:53:b1:95:41:65:65:
         df:a7:db:b3:73:a8:35:41:77:e7:68:e2:94:83:d3:20:9d:7e:
         2f:18:cd:43:2b:43:fd:6f:49:30:04:6e:20:c5:4c:ef:e6:51:
         90:78:50:67:dc:7c:46:b8:0b:6b:74:67:8a:89:df:d1:c4:52:
         35:da:84:19:97:a7:3b:5b:39:02:a6:40:61:46:2d:c2:f3:cc:
         e2:82:f8:be:27:18:4a:ab:09:46:00:7a:f8:58:de:b2:91:94:
         af:be:40:37:a4:8e:44:d9:24:d9:12:97:84:65:31:62:c2:ed:
         9b:1c:8f:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma/43DNJJTxctHOBRKGz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjUwMTAyMDk0OTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmIyOTgyYmU4OTgxYjVhYTBmMGFjYTM1ZmY2NWY3NDkxNjM1MDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE5c0p5L++2MLJYSmF/H84eurwX6
clXwyoA7xRMdX0YhqXsX4ATg1YldC2f8+xojPUTFs/RnyY/gUn/MOVDoufEDquGU
KS2sCMp46MAw29IFVkScRT5RXgxqJpac98HPrWxQzmgdO5v+dZ+zo5iwinmvtEab
M6mQql7zxlgz/xoq1Ez8d55tOMzLup0AwmngtRH31VOHvcD5i8hkwWN9tdqRyuEZ
ACItEHhAI/hJM2iLqvgeRDwy15bvMi31xVJX0gfcC38kYnHkXufMuvRiMOCTaCpg
rWEnkRzmFgeLPWTcCpvmFGmaDnEQ6N2Bo+lJUj4+yhhwaY2NdGyqNjOMJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPKymCvomBtaoPCso1/2X3SRY1CaMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvOHJLWUstaVlHMXFnOEt5alhfWmZkSkZqVUpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZzQMA0G
CSqGSIb3DQEBCwUAA4IBAQCm+5qy7K852Rmj3LMFK3NQmlj8WoicpBnYntkRN+Ka
6ztCg3ilH2ZQGL6psNiE1Os8etKroN0GklE7B+lJT2nMFyieI4PYTZfjfNi/g6UW
XpxsMg/qsV8zl3QlHNEMTJJoSh1Y8AalMaMMwJ3OkVkd5ojv1KnkTbws7t854Rvm
9Kev6RvnZiqHmENTsZVBZWXfp9uzc6g1QXfnaOKUg9MgnX4vGM1DK0P9b0kwBG4g
xUzv5lGQeFBn3HxGuAtrdGeKid/RxFI12oQZl6c7WzkCpkBhRi3C88zigvi+JxhK
qwlGAHr4WN6ykZSvvkA3pI5E2STZEpeEZTFiwu2bHI8z
-----END CERTIFICATE-----