Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/fvccoh-XRGUydolEQwVKUg__llM.roa
File:                     fvccoh-XRGUydolEQwVKUg__llM.roa (raw, json)
Hash identifier:          MESTegxG3uX73jrknXUqcZY7a9Gll4oI6clWX78ISS8=
Subject key identifier:   7E:F7:1C:A2:1F:97:44:65:32:76:89:44:43:05:4A:52:0F:FF:96:53
Certificate issuer:       /CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
Certificate serial:       019424448A08CFE6D0384D5C65043DF2CB4C
Authority key identifier: DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/fvccoh-XRGUydolEQwVKUg__llM.roa
Signing time:             Wed 01 Jan 2025 23:47:38 +0000
ROA not before:           Wed 01 Jan 2025 23:47:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210939
IP address blocks:        185.237.124.0/22 maxlen: 22
                          2a11:9700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:44:8a:08:cf:e6:d0:38:4d:5c:65:04:3d:f2:cb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90d04bf57fa4868e69997c83b3ad771fd50a9d
        Validity
            Not Before: Jan  1 23:47:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7ef71ca21f9744653276894443054a520fff9653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:a5:a4:e7:de:81:67:c3:26:2f:9f:53:4a:
                    c2:1a:a1:11:d8:d0:a6:fa:56:59:0b:74:54:e2:e3:
                    ec:6e:73:f4:8b:c8:25:52:df:26:82:52:35:fd:4d:
                    29:de:a2:9c:fe:97:61:48:b3:ce:af:b1:25:3a:35:
                    0e:bb:fe:ec:cd:87:a8:07:7e:24:d3:8c:51:35:2d:
                    ef:e5:72:f7:de:1f:92:85:20:42:79:b3:d3:2e:0f:
                    df:19:17:ef:27:58:aa:18:da:9f:12:b8:66:ab:53:
                    ad:2a:b9:bd:78:62:e9:1e:f1:b9:d1:2d:45:78:0d:
                    c1:b8:0e:bd:ae:31:0c:35:83:56:ed:1e:a3:d2:1b:
                    32:eb:d3:0c:ca:cb:99:b4:43:b9:b9:fc:a4:05:e9:
                    2a:78:49:ca:b4:b8:08:c9:90:89:a0:0b:21:04:ab:
                    f4:82:1c:04:3e:10:79:6c:90:6d:b5:e7:96:e5:ed:
                    38:05:b9:cf:1a:db:02:ac:a4:da:34:20:c3:c8:84:
                    7b:ac:f7:fb:7b:01:e5:1f:ce:72:cd:0f:de:09:39:
                    af:56:65:78:23:b6:a9:6f:33:a5:8f:f3:c6:c6:ab:
                    5d:9d:e5:1e:58:e7:4e:9b:68:58:99:c4:35:dd:b3:
                    78:3c:06:06:66:72:3c:46:d1:54:e7:28:cd:a6:cd:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F7:1C:A2:1F:97:44:65:32:76:89:44:43:05:4A:52:0F:FF:96:53
            X509v3 Authority Key Identifier:
                keyid:DA:90:D0:4B:F5:7F:A4:86:8E:69:99:7C:83:B3:AD:77:1F:D5:0A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pDQS_V_pIaOaZl8g7Otdx_VCp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/fvccoh-XRGUydolEQwVKUg__llM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4d2545-a7d5-465c-9618-51ad9c382a8d/1/2pDQS_V_pIaOaZl8g7Otdx_VCp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.124.0/22
                IPv6:
                  2a11:9700::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:82:de:dc:1f:7f:38:9e:5c:2b:7c:f9:24:fa:eb:e9:57:41:
         a8:c9:f2:9a:68:67:d5:76:07:0b:b9:37:1a:9d:55:17:90:28:
         f1:40:5e:0a:5a:c0:41:87:b3:fc:f3:5f:76:5c:18:18:ad:80:
         c4:ce:04:b6:1f:38:ae:42:50:c0:2b:64:05:bc:d3:db:88:df:
         d2:56:5e:49:c0:52:86:d5:87:91:84:52:dc:8c:e5:b7:5a:b8:
         85:3e:10:ce:c2:41:d5:fd:a3:26:d5:d1:8d:9d:50:92:11:75:
         39:df:5e:97:ab:9e:32:61:c1:1c:c3:8a:5a:36:6b:3b:fb:2a:
         71:3e:11:e5:81:97:64:6b:6b:12:5d:44:95:02:f4:f7:69:f7:
         fd:5c:be:68:f6:0d:22:8d:74:9f:8e:11:6d:47:c2:dc:dc:7a:
         c2:dd:2b:7a:d5:28:13:23:0f:54:f8:42:e5:31:12:b1:52:56:
         ba:15:3f:86:ce:c1:af:bb:27:e9:23:ce:67:63:42:49:38:f1:
         cd:2e:1b:e8:07:28:6a:13:23:2b:70:d4:47:f4:3a:65:eb:2f:
         70:99:ac:12:b2:d6:a4:02:51:f5:a7:e3:33:7d:d8:0e:94:6e:
         14:c7:d8:7e:c3:bb:41:bb:8c:56:82:c3:c2:98:ea:4a:1d:fe:
         19:56:1b:38
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRIoIz+bQOE1cZQQ98stMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTBkMDRiZjU3ZmE0ODY4ZTY5OTk3YzgzYjNhZDc3MWZk
NTBhOWQwHhcNMjUwMTAxMjM0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWY3MWNhMjFmOTc0NDY1MzI3Njg5NDQ0MzA1NGE1MjBmZmY5NjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYGlpOfegWfDJi+fU0rCGqER2NCm
+lZZC3RU4uPsbnP0i8glUt8mglI1/U0p3qKc/pdhSLPOr7ElOjUOu/7szYeoB34k
04xRNS3v5XL33h+ShSBCebPTLg/fGRfvJ1iqGNqfErhmq1OtKrm9eGLpHvG50S1F
eA3BuA69rjEMNYNW7R6j0hsy69MMysuZtEO5ufykBekqeEnKtLgIyZCJoAshBKv0
ghwEPhB5bJBtteeW5e04BbnPGtsCrKTaNCDDyIR7rPf7ewHlH85yzQ/eCTmvVmV4
I7apbzOlj/PGxqtdneUeWOdOm2hYmcQ13bN4PAYGZnI8RtFU5yjNps39ewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH73HKIfl0RlMnaJREMFSlIP/5ZTMB8GA1UdIwQY
MBaAFNqQ0Ev1f6SGjmmZfIOzrXcf1QqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgt
NTFhZDljMzgyYThkLzEvZnZjY29oLVhSR1V5ZG9sRVF3VktVZ19fbGxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80ZDI1NDUtYTdkNS00NjVjLTk2MTgtNTFhZDljMzgyYThk
LzEvMnBEUVNfVl9wSWFPYVpsOGc3T3RkeF9WQ3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCue18MA0E
AgACMAcDBQAqEZcAMA0GCSqGSIb3DQEBCwUAA4IBAQBLgt7cH384nlwrfPkk+uvp
V0GoyfKaaGfVdgcLuTcanVUXkCjxQF4KWsBBh7P88192XBgYrYDEzgS2HziuQlDA
K2QFvNPbiN/SVl5JwFKG1YeRhFLcjOW3WriFPhDOwkHV/aMm1dGNnVCSEXU5316X
q54yYcEcw4paNms7+ypxPhHlgZdka2sSXUSVAvT3aff9XL5o9g0ijXSfjhFtR8Lc
3HrC3St61SgTIw9U+ELlMRKxUla6FT+GzsGvuyfpI85nY0JJOPHNLhvoByhqEyMr
cNRH9Dpl6y9wmawSstakAlH1p+MzfdgOlG4Ux9h+w7tBu4xWgsPCmOpKHf4ZVhs4
-----END CERTIFICATE-----