Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/83mV6yawMzQK2SCxftoSMyu4KQM.roa
File:                     83mV6yawMzQK2SCxftoSMyu4KQM.roa (raw, json)
Hash identifier:          Ym53AuQQ1IOQFSv9FN5b6IJFKHPfScCZ99xNqtHb8Fo=
Subject key identifier:   F3:79:95:EB:26:B0:33:34:0A:D9:20:B1:7E:DA:12:33:2B:B8:29:03
Certificate issuer:       /CN=59a06c187953cfc8133b2beee5f01a15e45da078
Certificate serial:       0193B0D3F9D74EADCE9C92AEC5580247DFBD
Authority key identifier: 59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/83mV6yawMzQK2SCxftoSMyu4KQM.roa
Signing time:             Tue 10 Dec 2024 13:48:22 +0000
ROA not before:           Tue 10 Dec 2024 13:48:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210994
IP address blocks:        91.233.120.0/24 maxlen: 24
                          2a11:6740::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b0:d3:f9:d7:4e:ad:ce:9c:92:ae:c5:58:02:47:df:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a06c187953cfc8133b2beee5f01a15e45da078
        Validity
            Not Before: Dec 10 13:48:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f37995eb26b033340ad920b17eda12332bb82903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:3b:29:83:00:78:fa:05:bf:d5:0b:b0:44:
                    7e:c9:38:f3:65:b8:4c:ff:b0:77:2f:47:48:b8:ce:
                    4f:d8:21:f1:4a:82:a2:d9:47:29:56:4b:0d:63:ba:
                    bf:fd:9b:13:c6:13:dd:fa:62:da:e4:bc:60:c4:d8:
                    64:74:49:12:d0:f5:6d:bc:82:b1:ef:aa:21:b7:a1:
                    5f:d1:3b:92:8f:48:94:f1:f7:5c:f3:0f:8b:41:3b:
                    92:6e:7b:dc:45:04:c8:76:52:03:51:f1:b2:61:67:
                    f2:9a:9c:22:c3:92:5e:dd:35:84:9e:4f:ed:79:b0:
                    f7:59:a0:d6:29:e7:dc:d6:e7:0b:c8:97:ad:80:7b:
                    73:32:47:ca:1d:b9:86:d9:c9:d6:cb:21:3a:4a:f9:
                    ae:be:ae:3e:82:ff:f3:59:d2:a4:5f:d6:38:9d:67:
                    e3:d8:70:d7:d5:a9:9a:db:be:48:ea:0f:86:cd:96:
                    1d:2e:a5:c0:88:ef:0b:3d:25:fe:5f:9d:b4:7b:ba:
                    17:4d:85:1b:4e:e0:3b:40:82:0d:f3:2c:5c:80:ab:
                    56:36:6b:fa:54:da:18:ab:10:58:f5:cd:20:d8:a3:
                    6b:91:02:6e:ab:a2:17:85:28:b1:11:44:3f:07:05:
                    d5:40:fc:65:f5:df:a7:f8:34:92:e9:50:0d:58:e7:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:79:95:EB:26:B0:33:34:0A:D9:20:B1:7E:DA:12:33:2B:B8:29:03
            X509v3 Authority Key Identifier:
                keyid:59:A0:6C:18:79:53:CF:C8:13:3B:2B:EE:E5:F0:1A:15:E4:5D:A0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WaBsGHlTz8gTOyvu5fAaFeRdoHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/83mV6yawMzQK2SCxftoSMyu4KQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9170e3-e9b3-4d6d-8787-e46ea89bf849/1/WaBsGHlTz8gTOyvu5fAaFeRdoHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.120.0/24
                IPv6:
                  2a11:6740::/29

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:e5:18:ff:e7:7f:b6:b6:14:d8:74:6b:3c:61:e2:d7:c0:
         1e:5a:d9:87:a2:2a:e8:8f:54:bf:58:e3:c8:5e:73:6f:da:5f:
         cb:07:de:88:97:c1:13:80:b9:62:2c:47:13:16:bd:62:c8:08:
         fc:5c:b6:45:e6:08:57:40:b6:a1:45:16:8b:cb:d8:65:54:d5:
         43:6f:21:be:09:62:66:e6:05:e2:32:6e:f0:30:c5:62:fb:b7:
         84:e1:9e:7d:7c:4d:6c:8e:8d:ac:4e:21:b3:79:1b:d3:2a:94:
         6d:36:a7:45:28:04:8c:86:9f:90:d0:57:d3:ef:ae:0b:19:b1:
         e9:ea:e5:76:9d:c4:f4:a5:78:43:79:e1:97:08:1b:28:d7:39:
         09:ad:a7:7b:8b:b5:88:9f:d5:ab:99:4c:d5:93:bc:c4:4d:fd:
         08:89:ac:b9:db:1d:cd:06:a3:8f:c3:d4:3b:77:be:7b:fe:d8:
         d3:50:61:ef:33:ff:66:c2:fd:87:1f:e9:f1:66:6f:17:ff:d7:
         ec:d2:30:58:8e:9d:1c:b3:f2:f9:25:d7:e7:88:78:8d:b7:0c:
         b0:7e:7d:47:17:b9:9b:11:85:89:3d:80:1e:4e:18:0a:d6:8d:
         35:28:d7:72:cf:38:0f:1e:17:0e:4a:ea:e9:8d:67:2e:95:9d:
         53:8f:a5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----