Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/6_MzG3BJa4ElBBdEF9-BTMf874s.roa
File:                     6_MzG3BJa4ElBBdEF9-BTMf874s.roa (raw, json)
Hash identifier:          JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=
Subject key identifier:   EB:F3:33:1B:70:49:6B:81:25:04:17:44:17:DF:81:4C:C7:FC:EF:8B
Certificate issuer:       /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial:       01942068024C421FF7EE07AE7FB448EEC975
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/6_MzG3BJa4ElBBdEF9-BTMf874s.roa
Signing time:             Wed 01 Jan 2025 05:47:54 +0000
ROA not before:           Wed 01 Jan 2025 05:47:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57007
IP address blocks:        91.229.252.0/22 maxlen: 22
                          2001:678:84c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:02:4c:42:1f:f7:ee:07:ae:7f:b4:48:ee:c9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
        Validity
            Not Before: Jan  1 05:47:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ebf3331b70496b812504174417df814cc7fcef8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2b:b8:6c:82:0c:e3:54:1e:9f:66:42:21:4b:
                    2b:ba:75:32:55:cd:1b:44:e2:02:e4:22:b8:5b:14:
                    67:a8:30:a9:50:aa:d4:85:bb:83:b0:2b:fe:56:99:
                    a5:69:d6:49:2d:4b:e1:d6:0c:3a:31:27:cd:c0:25:
                    f7:38:0d:d0:96:cd:01:4d:7f:a9:9b:93:4a:cc:69:
                    ee:4f:53:b3:69:65:d6:7a:8b:a7:5d:71:17:e9:2c:
                    14:67:ae:e2:92:f6:36:45:80:0e:4f:7b:35:ea:f6:
                    46:ab:31:75:03:c6:95:77:cf:b9:ff:73:c9:47:96:
                    0b:35:b0:2a:9a:f7:1b:1c:dc:2c:91:f9:08:62:24:
                    5c:3f:8e:9b:7b:e4:a1:31:9e:d0:fc:ac:ea:f6:cf:
                    18:f3:8f:c2:b0:b0:f1:bd:a8:02:69:1e:7e:b3:ef:
                    7a:34:fa:e3:57:b2:21:79:fb:8d:72:96:61:ff:c7:
                    49:06:23:54:a2:e6:da:6e:a5:c5:ad:07:5e:0d:71:
                    ab:31:89:0a:98:bf:6e:37:e0:c5:e5:c4:16:39:b6:
                    f3:55:8a:d9:83:24:82:03:71:61:8b:97:45:8c:dd:
                    18:fa:57:e7:1a:af:e0:b5:fe:d2:76:b6:3f:71:6b:
                    b7:c5:0f:11:21:a9:53:14:4c:d8:3a:60:01:a4:b8:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:33:1B:70:49:6B:81:25:04:17:44:17:DF:81:4C:C7:FC:EF:8B
            X509v3 Authority Key Identifier:
                keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/6_MzG3BJa4ElBBdEF9-BTMf874s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.229.252.0/22
                IPv6:
                  2001:678:84c::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:b0:91:02:b4:4f:8e:c7:11:56:70:e6:d1:c8:e1:eb:d6:
         96:df:10:3d:05:89:08:6b:c4:2e:02:4f:b4:54:c3:df:a2:41:
         e0:a8:a3:e0:45:18:94:25:f8:05:b7:62:9b:78:ce:a7:d7:6f:
         a4:74:40:08:fe:2c:49:4c:6a:00:8a:8e:ac:56:d3:7b:8a:db:
         5c:02:97:8d:5e:53:76:43:9b:61:d5:05:1c:3b:02:dd:de:52:
         44:c7:d4:62:9d:66:8f:f0:3d:0a:0d:19:a2:df:99:8d:4a:77:
         56:b3:8a:55:9a:af:8e:c1:9f:0e:5b:9d:4e:bf:00:33:c7:13:
         d6:c3:ad:37:fd:f9:f3:7d:0c:79:47:ef:78:53:05:d3:82:c0:
         42:6f:be:b1:76:e4:92:8c:8c:a9:5c:67:bd:bd:17:16:d5:5d:
         82:89:a9:6f:5f:ba:2d:78:65:98:e8:1c:5a:c7:4c:a4:11:ec:
         0d:49:72:58:13:29:62:59:e0:ca:30:23:0b:cf:29:ce:dc:54:
         0f:3e:cd:94:f3:14:55:45:50:65:84:81:6f:28:64:a8:11:e2:
         04:5b:df:14:04:ed:1d:37:d7:05:b5:5b:26:67:bc:3e:1f:d5:
         e8:fd:a1:91:3d:2e:14:ae:ae:83:e7:90:46:20:51:08:b3:c5:
         fc:20:71:90
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgaAJMQh/37geuf7RI7sl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NWQwYWRjMjk0ZGQzNjZkZjZhZGE4ODAxMzRkYmQwZTY4
OGNjZjcwHhcNMjUwMTAxMDU0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmYzMzMxYjcwNDk2YjgxMjUwNDE3NDQxN2RmODE0Y2M3ZmNlZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSu4bIIM41Qen2ZCIUsrunUyVc0b
ROIC5CK4WxRnqDCpUKrUhbuDsCv+VpmladZJLUvh1gw6MSfNwCX3OA3Qls0BTX+p
m5NKzGnuT1OzaWXWeounXXEX6SwUZ67ikvY2RYAOT3s16vZGqzF1A8aVd8+5/3PJ
R5YLNbAqmvcbHNwskfkIYiRcP46be+ShMZ7Q/Kzq9s8Y84/CsLDxvagCaR5+s+96
NPrjV7IhefuNcpZh/8dJBiNUoubabqXFrQdeDXGrMYkKmL9uN+DF5cQWObbzVYrZ
gySCA3Fhi5dFjN0Y+lfnGq/gtf7SdrY/cWu3xQ8RIalTFEzYOmABpLiDzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOvzMxtwSWuBJQQXRBffgUzH/O+LMB8GA1UdIwQY
MBaAFORdCtwpTdNm32raiAE029DmiMz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgt
ZmUyNzM1OWZkN2VhLzEvNl9NekczQkphNEVsQkJkRUY5LUJUTWY4NzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgtZmUyNzM1OWZkN2Vh
LzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+X8MA8E
AgACMAkDBwAgAQZ4CEwwDQYJKoZIhvcNAQELBQADggEBAIDosJECtE+OxxFWcObR
yOHr1pbfED0FiQhrxC4CT7RUw9+iQeCoo+BFGJQl+AW3Ypt4zqfXb6R0QAj+LElM
agCKjqxW03uK21wCl41eU3ZDm2HVBRw7At3eUkTH1GKdZo/wPQoNGaLfmY1Kd1az
ilWar47Bnw5bnU6/ADPHE9bDrTf9+fN9DHlH73hTBdOCwEJvvrF25JKMjKlcZ729
FxbVXYKJqW9fui14ZZjoHFrHTKQR7A1JclgTKWJZ4MowIwvPKc7cVA8+zZTzFFVF
UGWEgW8oZKgR4gRb3xQE7R031wW1WyZnvD4f1ej9oZE9LhSuroPnkEYgUQizxfwg
cZA=
-----END CERTIFICATE-----