Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa
File:                     4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa (raw, json)
Hash identifier:          9TU/QChXgdZn/WcufvGJiX+DQZh8m5mR65S2JB7VAL8=
Subject key identifier:   E2:74:FE:D6:F7:10:BB:8E:12:AF:E1:82:B7:A1:34:A2:85:80:D2:17
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       0194274883908ADE52E60CD31004766C65C6
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa
Signing time:             Thu 02 Jan 2025 13:50:51 +0000
ROA not before:           Thu 02 Jan 2025 13:50:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57591
IP address blocks:        91.229.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:83:90:8a:de:52:e6:0c:d3:10:04:76:6c:65:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Jan  2 13:50:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e274fed6f710bb8e12afe182b7a134a28580d217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:b5:9c:05:b9:13:95:66:73:bc:ba:e7:5e:
                    3b:54:38:82:31:e1:68:d3:4b:a4:d0:2a:0b:1d:17:
                    53:96:c5:3c:fb:3f:3f:5a:b0:1f:72:6b:0c:4f:0f:
                    82:67:d6:5f:f9:09:e3:ee:26:d7:43:f7:dc:16:56:
                    28:53:43:2a:0c:ad:46:04:2c:ce:82:d3:73:a4:8c:
                    08:cd:fa:46:df:cb:88:c7:59:4d:a0:33:4c:14:ec:
                    c2:1c:61:10:a3:4d:9c:52:ed:a6:28:e1:8d:7e:d7:
                    2f:33:31:88:9e:45:c8:75:44:ff:13:53:c4:32:e4:
                    77:3c:f3:b7:6a:bc:54:20:e3:f2:f0:71:69:63:1b:
                    68:08:8c:8e:fd:7f:10:85:01:c3:b5:1f:d3:31:69:
                    7e:6c:94:d2:7f:6a:d1:84:88:3c:e5:9f:b7:2d:91:
                    a3:5e:11:54:f4:3b:29:e2:f8:70:5d:f4:23:e8:87:
                    44:78:fe:a9:96:e1:68:f2:6e:37:25:99:ca:9b:bf:
                    f8:54:43:1f:9a:10:0c:17:5f:ff:eb:95:a3:27:4b:
                    61:01:62:9e:72:87:a8:e0:63:aa:bb:a0:ad:05:1b:
                    0f:12:dc:73:99:19:0a:1c:e9:3d:7e:6e:f6:32:c7:
                    34:2c:72:5a:11:15:92:fc:39:13:6b:e6:18:75:b2:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:74:FE:D6:F7:10:BB:8E:12:AF:E1:82:B7:A1:34:A2:85:80:D2:17
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/4nT-1vcQu44Sr-GCt6E0ooWA0hc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:11:e0:f9:9e:aa:dc:0d:0f:bd:5c:29:42:d5:d2:f0:45:e6:
         33:e2:b4:d1:02:57:ff:c6:62:cd:00:b4:e7:95:b0:e9:48:af:
         a1:ea:af:f2:b6:51:95:4e:dd:cb:57:3a:11:ac:82:06:64:59:
         b9:86:00:6d:20:aa:25:d8:6a:19:8e:09:17:2f:2a:f4:a8:72:
         b8:33:72:cf:58:48:ff:c5:c0:de:50:2c:6e:52:53:93:63:93:
         fc:f8:57:cd:e8:df:fa:f5:1c:32:a0:73:68:cb:ec:6e:90:19:
         5d:3e:8f:40:cf:c6:e3:21:47:d8:82:66:3a:e0:ce:37:a1:63:
         e3:77:8a:04:96:6c:42:ff:ba:f7:b0:9a:79:93:0f:d5:a8:b1:
         22:ba:ca:0e:a7:38:e2:e4:97:d9:d9:83:bd:0f:18:41:c3:4b:
         4d:c0:7d:5a:97:bf:11:79:a6:10:c7:1b:db:f4:82:58:0c:1d:
         c1:94:54:64:b8:d6:95:c4:83:bd:41:69:91:2d:0e:20:33:71:
         85:bf:61:51:ef:f8:68:7f:d1:2b:15:47:34:5a:fe:de:24:45:
         eb:13:3f:28:b3:05:fb:05:c1:75:1f:9f:c5:cc:6e:8d:15:08:
         04:33:77:80:d2:eb:cf:a8:08:95:fb:7f:39:61:2c:dc:39:b2:
         15:c1:73:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----