Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa
File:                     0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa (raw, json)
Hash identifier:          M5B0SkG9hWwwlfig08E3JzP7e25LB4D53pzU2Ly/ANE=
Subject key identifier:   D0:58:3D:5A:2E:04:8C:38:B9:76:75:3E:EF:D9:5F:C2:F7:AA:F8:CF
Certificate issuer:       /CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
Certificate serial:       018CC64AEBD456A5A00830D6A07314425D5C
Authority key identifier: D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa
Signing time:             Mon 01 Jan 2024 18:30:47 +0000
ROA not before:           Mon 01 Jan 2024 18:30:47 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213199
IP address blocks:        2001:67c:285c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:eb:d4:56:a5:a0:08:30:d6:a0:73:14:42:5d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d71fbe3820f6f18ea1b3336da9f072b8fd2a0df2
        Validity
            Not Before: Jan  1 18:30:47 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d0583d5a2e048c38b976753eefd95fc2f7aaf8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:51:78:15:14:c4:00:b2:bc:94:64:db:e2:
                    8d:13:df:50:ac:e5:98:28:61:b0:26:01:9f:f3:35:
                    e4:e6:78:7c:e2:68:69:47:48:1b:d7:63:75:a5:19:
                    5b:88:f7:48:51:97:7a:cb:55:c0:9f:92:1f:40:56:
                    40:21:a8:78:61:a3:0a:89:60:88:73:19:b2:77:ef:
                    c4:01:bb:f4:ee:0c:90:98:f3:57:8d:68:7f:8e:e8:
                    f3:54:a7:cf:58:17:3a:b7:1a:60:1f:23:87:69:69:
                    9b:4a:a3:05:de:c0:8c:69:2c:c1:bd:fb:31:ed:b5:
                    01:92:b6:d1:18:5f:e4:d1:e4:09:fa:8f:49:78:bc:
                    2f:53:dc:a4:f0:7d:e0:a6:9e:65:51:71:b5:92:6c:
                    30:a5:06:3a:04:55:2e:78:d5:0b:bf:c9:12:68:28:
                    2d:ba:78:4c:13:46:07:97:cd:38:de:fb:eb:33:9d:
                    c4:fa:87:d4:dd:2a:b7:3d:02:45:bc:69:c7:82:57:
                    26:00:6f:cb:19:45:47:d1:3b:04:52:cf:38:b2:a4:
                    35:f3:89:33:c4:04:b3:99:83:d6:69:4c:fe:18:18:
                    0b:44:a0:7c:7f:3b:d1:f6:6b:08:c9:34:d9:2e:43:
                    a3:f7:af:9a:98:62:65:d5:35:f8:67:81:0c:9c:8c:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:3D:5A:2E:04:8C:38:B9:76:75:3E:EF:D9:5F:C2:F7:AA:F8:CF
            X509v3 Authority Key Identifier:
                keyid:D7:1F:BE:38:20:F6:F1:8E:A1:B3:33:6D:A9:F0:72:B8:FD:2A:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x--OCD28Y6hszNtqfByuP0qDfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/0Fg9Wi4EjDi5dnU-79lfwveq-M8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f3904-3898-42ed-8f40-97345ca17d7f/1/1x--OCD28Y6hszNtqfByuP0qDfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:285c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:63:f7:f3:7f:37:f0:51:d0:3d:30:fc:b9:8f:24:74:b7:
         15:13:ac:24:51:29:85:bc:29:13:3d:dd:dd:9a:9c:29:19:28:
         8d:98:a5:20:9a:4c:2a:89:8a:24:12:f0:72:55:37:83:2e:75:
         ec:ea:ca:1a:f2:18:ac:3a:e5:89:b0:cb:61:23:50:35:b8:a0:
         44:32:97:42:48:c6:39:7d:fd:31:99:59:3f:e2:42:85:56:58:
         4c:26:9e:a8:8f:fa:5a:29:ff:d0:36:28:7c:19:05:df:c1:6b:
         69:10:b0:e2:91:e5:85:7e:2c:ab:d2:b2:4f:94:bd:5e:13:f9:
         15:e0:98:cf:0f:72:dd:3d:29:32:f4:1a:bb:08:c8:01:dc:ff:
         a0:0c:2d:4b:33:22:b8:ca:40:34:06:5d:17:6a:f2:cc:cf:d0:
         0d:ab:04:3b:a8:7d:88:e1:d6:57:24:96:ec:cd:29:90:b7:cf:
         e0:0d:d7:17:a8:e1:6b:7b:74:1b:8b:be:e4:4b:0a:fd:0f:fd:
         09:fe:4d:03:b8:c5:a4:79:bd:ae:05:d7:19:2f:a4:53:d7:64:
         cd:d3:03:c0:97:0e:be:09:05:de:9f:27:9c:4b:99:92:f5:24:
         7b:e5:72:61:2b:77:6a:2c:fd:6e:96:6e:e2:f5:e4:d9:f2:67:
         9b:74:0b:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSuvUVqWgCDDWoHMUQl1cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MWZiZTM4MjBmNmYxOGVhMWIzMzM2ZGE5ZjA3MmI4ZmQy
YTBkZjIwHhcNMjQwMTAxMTgzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDU4M2Q1YTJlMDQ4YzM4Yjk3Njc1M2VlZmQ5NWZjMmY3YWFmOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsdReBUUxACyvJRk2+KNE99QrOWY
KGGwJgGf8zXk5nh84mhpR0gb12N1pRlbiPdIUZd6y1XAn5IfQFZAIah4YaMKiWCI
cxmyd+/EAbv07gyQmPNXjWh/jujzVKfPWBc6txpgHyOHaWmbSqMF3sCMaSzBvfsx
7bUBkrbRGF/k0eQJ+o9JeLwvU9yk8H3gpp5lUXG1kmwwpQY6BFUueNULv8kSaCgt
unhME0YHl8043vvrM53E+ofU3Sq3PQJFvGnHglcmAG/LGUVH0TsEUs84sqQ184kz
xASzmYPWaUz+GBgLRKB8fzvR9msIyTTZLkOj96+amGJl1TX4Z4EMnIx5MwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNBYPVouBIw4uXZ1Pu/ZX8L3qvjPMB8GA1UdIwQY
MBaAFNcfvjgg9vGOobMzbanwcrj9Kg3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXgtLU9DRDI4WTZoc3pOdHFmQnl1UDBxRGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yZjM5MDQtMzg5OC00MmVkLThmNDAt
OTczNDVjYTE3ZDdmLzEvMEZnOVdpNEVqRGk1ZG5VLTc5bGZ3dmVxLU04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yZjM5MDQtMzg5OC00MmVkLThmNDAtOTczNDVjYTE3ZDdm
LzEvMXgtLU9DRDI4WTZoc3pOdHFmQnl1UDBxRGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfChc
MA0GCSqGSIb3DQEBCwUAA4IBAQAbTGP383838FHQPTD8uY8kdLcVE6wkUSmFvCkT
Pd3dmpwpGSiNmKUgmkwqiYokEvByVTeDLnXs6soa8hisOuWJsMthI1A1uKBEMpdC
SMY5ff0xmVk/4kKFVlhMJp6oj/paKf/QNih8GQXfwWtpELDikeWFfiyr0rJPlL1e
E/kV4JjPD3LdPSky9Bq7CMgB3P+gDC1LMyK4ykA0Bl0XavLMz9ANqwQ7qH2I4dZX
JJbszSmQt8/gDdcXqOFre3Qbi77kSwr9D/0J/k0DuMWkeb2uBdcZL6RT12TN0wPA
lw6+CQXenyecS5mS9SR75XJhK3dqLP1ulm7i9eTZ8mebdAs2
-----END CERTIFICATE-----