Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/xwYkLak0tseV-cTQ1ic58KIpdCM.roa
File:                     xwYkLak0tseV-cTQ1ic58KIpdCM.roa (raw, json)
Hash identifier:          wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=
Subject key identifier:   C7:06:24:2D:A9:34:B6:C7:95:F9:C4:D0:D6:27:39:F0:A2:29:74:23
Certificate issuer:       /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial:       019423D7F9D2576090965EC668C51C291519
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/xwYkLak0tseV-cTQ1ic58KIpdCM.roa
Signing time:             Wed 01 Jan 2025 21:49:04 +0000
ROA not before:           Wed 01 Jan 2025 21:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25512
IP address blocks:        91.234.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:f9:d2:57:60:90:96:5e:c6:68:c5:1c:29:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
        Validity
            Not Before: Jan  1 21:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=c706242da934b6c795f9c4d0d62739f0a2297423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:1b:2f:9d:fa:87:f2:e0:ba:6b:fa:61:08:
                    0b:32:33:d5:f9:1e:6a:f6:03:a0:d7:98:60:8b:b7:
                    68:ca:38:33:81:b7:9a:2b:70:91:52:81:c0:b7:51:
                    39:6f:06:ba:ce:4a:a7:5f:ee:5a:1c:fe:39:a1:7a:
                    48:61:97:28:45:cd:39:c3:2d:ea:df:66:e9:69:e4:
                    58:15:aa:37:ad:75:dc:ac:31:7d:c8:81:c0:bd:94:
                    39:33:6b:01:eb:d9:84:81:ef:90:d9:49:3a:8d:1a:
                    1e:0a:9b:6a:2b:e7:30:de:5d:68:4f:d5:05:13:80:
                    31:6c:3e:5e:54:9d:79:3e:b3:6e:ed:b6:24:ec:14:
                    3d:29:4f:e4:f3:cc:46:54:f0:11:57:25:6e:58:21:
                    03:d2:34:74:1c:cb:49:1a:c3:4d:67:43:98:d0:c6:
                    5b:64:8a:f5:17:94:47:2f:08:0e:ae:91:ac:f4:79:
                    be:14:69:30:17:52:0a:28:c2:f6:30:d7:bf:a2:40:
                    56:86:9e:99:62:79:86:c4:04:69:7e:a7:bf:f9:18:
                    49:9c:79:f9:57:98:eb:71:63:3e:6f:0a:28:e0:54:
                    af:34:88:ae:be:80:3a:4d:4f:8e:3d:1c:fb:46:4c:
                    56:b6:c9:a7:a9:d4:6a:59:8c:9d:2e:00:36:be:13:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:06:24:2D:A9:34:B6:C7:95:F9:C4:D0:D6:27:39:F0:A2:29:74:23
            X509v3 Authority Key Identifier:
                keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/xwYkLak0tseV-cTQ1ic58KIpdCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:16:00:41:00:7d:f2:ea:99:68:43:f5:60:a2:14:d3:c1:
         2e:ce:9e:b3:a2:4c:48:e4:0b:c8:7b:37:ea:36:0a:f7:d1:eb:
         00:fd:0a:92:f1:45:ee:c6:ba:a2:1a:e7:38:64:2a:71:19:54:
         9e:53:e8:25:ef:db:c7:cc:a3:55:54:0d:ee:e5:e4:e0:a6:1a:
         e2:0d:7d:f5:28:05:b3:94:65:9d:c4:9e:61:33:ea:2e:8d:58:
         5a:88:24:be:ef:8f:c3:12:a2:61:c2:3a:3a:80:07:c0:4a:92:
         44:c2:3f:bd:ef:99:33:fc:15:7a:74:43:48:b8:52:cc:33:1f:
         cc:b0:a5:e8:06:bc:a5:e9:c0:65:d1:3a:2f:f7:42:0d:a9:9b:
         be:81:c4:01:05:b8:1d:1b:3e:8d:fb:3d:9f:f5:ed:ab:f4:c5:
         c7:f3:b5:5f:a6:82:ac:37:3d:79:05:57:4d:8c:09:fe:c8:8f:
         ab:6c:72:c4:86:89:21:3a:58:a8:84:9d:bf:95:cb:b9:9b:82:
         05:46:fe:d0:71:69:de:ed:2e:60:d9:01:ed:8d:ca:ce:74:00:
         08:2d:28:f6:d1:7a:2f:e1:11:08:b4:ab:bc:e1:bc:90:28:d7:
         d7:0f:29:ca:99:ec:87:15:f0:57:1c:12:55:05:14:13:7c:c9:
         77:80:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----