Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7t39UO78LeFsKwD7CJstzTknIXs.roa
File:                     7t39UO78LeFsKwD7CJstzTknIXs.roa (raw, json)
Hash identifier:          QthZq6ZVZqJtxtcGdDvDYL6VwA/yafoVzBmUfyLehqw=
Subject key identifier:   EE:DD:FD:50:EE:FC:2D:E1:6C:2B:00:FB:08:9B:2D:CD:39:27:21:7B
Certificate issuer:       /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial:       0194274883311579F0327779178238A4C535
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7t39UO78LeFsKwD7CJstzTknIXs.roa
Signing time:             Thu 02 Jan 2025 13:50:51 +0000
ROA not before:           Thu 02 Jan 2025 13:50:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25540
IP address blocks:        91.226.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:83:31:15:79:f0:32:77:79:17:82:38:a4:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
        Validity
            Not Before: Jan  2 13:50:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eeddfd50eefc2de16c2b00fb089b2dcd3927217b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:c0:81:ac:f4:ef:9e:07:c0:65:5a:ac:6d:
                    b9:30:b9:ab:59:12:55:fb:d3:7d:a1:aa:ee:5f:9e:
                    f0:15:a9:a0:9c:2a:f4:96:9d:6e:d6:70:e9:3e:52:
                    6f:d9:20:7b:3d:8c:9d:57:f4:a5:d5:27:8e:bd:31:
                    39:7e:ba:3d:17:41:d4:69:06:18:1d:5a:ab:7f:f9:
                    b7:51:39:01:5f:06:b7:4d:3f:2e:86:af:91:d9:cd:
                    9f:da:de:89:1b:54:7d:05:5f:8d:cd:59:fe:72:b9:
                    52:04:24:88:08:17:38:30:42:85:73:2b:49:b4:57:
                    84:be:17:13:09:a6:b3:45:62:59:1a:c2:4e:86:8e:
                    b9:33:ee:c8:43:99:91:30:4e:f9:13:78:61:3d:52:
                    d4:b3:01:11:46:dc:7c:f3:b0:1a:26:2e:f8:00:cd:
                    4a:df:d5:ba:37:4a:78:2f:6b:a0:a8:b5:05:47:ba:
                    3f:eb:2c:db:3b:b9:f2:c5:de:da:b3:78:99:4d:0c:
                    51:38:d5:17:9b:14:7a:db:c0:c6:a0:08:52:00:d1:
                    46:26:c2:31:38:28:68:c3:0c:e3:0a:07:24:db:85:
                    2e:48:e4:fb:fd:8d:37:e2:77:7d:12:df:e2:29:82:
                    d8:bb:fd:c8:31:d8:69:85:f2:94:d3:d1:40:21:ce:
                    59:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:FD:50:EE:FC:2D:E1:6C:2B:00:FB:08:9B:2D:CD:39:27:21:7B
            X509v3 Authority Key Identifier:
                keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/7t39UO78LeFsKwD7CJstzTknIXs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:02:e4:64:f9:0e:9a:ed:74:13:67:75:a5:8d:33:78:0c:4d:
         82:29:e7:fc:c4:a7:0d:42:78:4b:46:97:e5:98:c6:4c:3b:5a:
         00:74:ba:94:cc:87:b6:32:55:ca:87:8c:8b:e0:b6:2e:a0:51:
         f1:01:eb:6f:a7:9d:06:65:69:29:59:72:2a:05:a0:44:5e:d3:
         9c:8a:6e:4d:a5:47:72:64:19:b9:ea:e9:93:7c:ed:cf:e8:a2:
         ca:60:44:42:e7:39:66:55:fb:17:47:7d:c1:43:aa:cf:fd:00:
         62:4d:ab:aa:44:c0:92:35:4f:45:31:f5:8c:79:66:52:62:1b:
         71:95:33:8f:85:0f:2a:3f:40:e1:8f:27:6b:d2:b1:30:2b:d5:
         82:46:4d:43:fb:78:dd:16:c8:a9:6b:fc:2a:a9:76:94:0b:5b:
         98:c9:4b:d7:44:f2:f0:6d:16:0e:a5:b5:38:c2:a0:02:cb:0c:
         11:f2:5d:70:bf:44:ba:61:c0:72:56:bd:47:2a:41:5d:f3:79:
         d0:5a:72:bc:6d:e6:0d:9e:a2:90:7d:30:50:bb:69:73:d0:c0:
         21:d9:a3:8e:b0:af:fb:d4:83:35:da:55:9f:22:47:3b:9f:9b:
         8e:79:b3:54:fd:c9:6d:68:7c:64:47:52:50:b7:c7:ee:91:e9:
         90:ba:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----