Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa
File:                     rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (raw, json)
Hash identifier:          o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=
Subject key identifier:   AC:9A:98:3C:0F:C7:BD:AF:88:68:12:DF:52:7F:51:72:86:36:A2:36
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       01942747D072061CC66D4FC60CD9645C82EC
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa
Signing time:             Thu 02 Jan 2025 13:50:05 +0000
ROA not before:           Thu 02 Jan 2025 13:50:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200630
IP address blocks:        109.69.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:d0:72:06:1c:c6:6d:4f:c6:0c:d9:64:5c:82:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Jan  2 13:50:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ac9a983c0fc7bdaf886812df527f51728636a236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:93:4e:b2:43:f5:57:6c:a8:a9:7f:74:c6:
                    03:7d:51:cf:cc:98:db:f8:39:f2:e7:cc:c5:21:4f:
                    b2:db:ac:78:e5:11:50:0f:1d:1d:d0:b1:ae:68:96:
                    2c:d7:42:83:e9:51:a4:84:a3:de:8b:ef:9a:1e:0a:
                    cc:13:68:c4:dd:c3:dd:d2:62:e1:21:c7:fb:3c:98:
                    77:72:91:75:4d:2f:d1:3d:57:64:cf:b2:88:1e:94:
                    05:32:7b:3f:25:89:02:f3:d0:40:1a:3e:cf:f4:9e:
                    b4:f5:5b:29:a3:3f:12:c6:6e:50:70:c9:9b:71:55:
                    36:13:d1:f3:b1:aa:74:ea:73:8e:ff:ae:33:bb:5e:
                    1b:ec:2d:33:04:a6:80:9e:3c:de:65:88:55:43:84:
                    2c:29:fe:3f:62:01:34:b4:b5:80:2b:51:a3:94:17:
                    f0:01:e0:f3:50:db:a3:b2:fb:cb:ba:4b:62:70:59:
                    7f:80:93:fe:8a:ae:2a:b1:ff:e4:19:25:46:10:a3:
                    56:c3:25:1e:db:b5:bb:be:2e:49:b0:0a:58:ff:dd:
                    98:e4:59:a6:48:be:2b:d8:07:bd:2e:3b:7a:e9:2b:
                    c5:53:65:9d:f8:49:86:3b:25:18:10:c3:66:c8:70:
                    b5:af:54:f4:a6:c8:a4:1c:0b:75:c5:d2:db:8a:1a:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9A:98:3C:0F:C7:BD:AF:88:68:12:DF:52:7F:51:72:86:36:A2:36
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.69.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:fa:f3:45:10:2b:3a:1b:82:e2:a7:2c:04:21:26:66:fa:
         08:b5:42:b6:82:ba:41:45:03:e0:26:ee:e5:7d:ff:33:e6:7f:
         4e:e7:04:80:b0:04:6d:ed:21:40:5e:42:9e:19:93:24:08:72:
         cd:af:de:88:64:f5:ee:cb:50:28:ec:84:25:73:82:fc:5a:91:
         7c:af:1a:88:df:a2:76:24:5e:52:6a:e4:8e:3f:6d:26:4f:53:
         3d:ac:21:69:41:6c:fc:6b:0e:6f:6b:f7:d3:d4:d0:10:b4:ad:
         1b:4d:e2:34:c6:3a:e8:69:4d:9d:3b:6b:58:da:f1:f4:ee:fd:
         56:82:a3:c2:9e:a8:46:99:f4:52:48:ce:5c:78:82:1b:7a:61:
         f7:01:6d:3f:01:89:96:8c:fa:24:aa:0c:ba:60:0d:2b:67:4c:
         d2:f2:47:26:9c:ee:14:0c:a8:16:20:b8:86:f0:17:36:35:c6:
         bb:c9:2c:aa:43:6b:3e:8e:ed:f7:71:ad:9b:91:b5:69:20:35:
         1c:46:39:5a:c2:bc:b2:a7:48:05:c6:bb:03:77:1c:3d:72:93:
         0d:bb:b5:28:54:86:1c:3b:0a:9e:1c:97:2b:8e:f9:1b:c9:c4:
         7d:37:4a:53:e5:d3:ee:df:96:bf:cd:43:15:68:05:97:f2:01:
         65:29:8a:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR9ByBhzGbU/GDNlkXILsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy
ZmVmMDgwHhcNMjUwMTAyMTM1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzlhOTgzYzBmYzdiZGFmODg2ODEyZGY1MjdmNTE3Mjg2MzZhMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy+TTrJD9VdsqKl/dMYDfVHPzJjb
+Dny58zFIU+y26x45RFQDx0d0LGuaJYs10KD6VGkhKPei++aHgrME2jE3cPd0mLh
Icf7PJh3cpF1TS/RPVdkz7KIHpQFMns/JYkC89BAGj7P9J609Vspoz8Sxm5QcMmb
cVU2E9Hzsap06nOO/64zu14b7C0zBKaAnjzeZYhVQ4QsKf4/YgE0tLWAK1GjlBfw
AeDzUNujsvvLukticFl/gJP+iq4qsf/kGSVGEKNWwyUe27W7vi5JsApY/92Y5Fmm
SL4r2Ae9Ljt66SvFU2Wd+EmGOyUYEMNmyHC1r1T0psikHAt1xdLbihp03wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyamDwPx72viGgS31J/UXKGNqI2MB8GA1UdIwQY
MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt
NjM5ZTE0ZDA0ZGU2LzEvckpxWVBBX0h2YS1JYUJMZlVuOVJjb1kyb2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2
LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUUkMA0G
CSqGSIb3DQEBCwUAA4IBAQCmy/rzRRArOhuC4qcsBCEmZvoItUK2grpBRQPgJu7l
ff8z5n9O5wSAsARt7SFAXkKeGZMkCHLNr96IZPXuy1Ao7IQlc4L8WpF8rxqI36J2
JF5SauSOP20mT1M9rCFpQWz8aw5va/fT1NAQtK0bTeI0xjroaU2dO2tY2vH07v1W
gqPCnqhGmfRSSM5ceIIbemH3AW0/AYmWjPokqgy6YA0rZ0zS8kcmnO4UDKgWILiG
8Bc2Nca7ySyqQ2s+ju33ca2bkbVpIDUcRjlawryyp0gFxrsDdxw9cpMNu7UoVIYc
OwqeHJcrjvkbycR9N0pT5dPu35a/zUMVaAWX8gFlKYrH
-----END CERTIFICATE-----