Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/t_GXvizzbbtQwSd_rqjoEMAWE2Y.roa
File:                     t_GXvizzbbtQwSd_rqjoEMAWE2Y.roa (raw, json)
Hash identifier:          ZkiqsfUq4HUiMQwjqugEWSy9vPbelZw6D7VGclM/F3k=
Subject key identifier:   B7:F1:97:BE:2C:F3:6D:BB:50:C1:27:7F:AE:A8:E8:10:C0:16:13:66
Certificate issuer:       /CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
Certificate serial:       019621D9EBA0F275126465E6D8D3B8F8BE68
Authority key identifier: 91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/t_GXvizzbbtQwSd_rqjoEMAWE2Y.roa
Signing time:             Thu 10 Apr 2025 22:37:31 +0000
ROA not before:           Thu 10 Apr 2025 22:37:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134844
IP address blocks:        103.214.206.0/24 maxlen: 24
                          2001:67c:2d4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:21:d9:eb:a0:f2:75:12:64:65:e6:d8:d3:b8:f8:be:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91bd5883c82aed25fef1b18d70d0215b07f727d8
        Validity
            Not Before: Apr 10 22:37:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b7f197be2cf36dbb50c1277faea8e810c0161366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:e6:eb:6c:73:71:a4:83:ee:50:31:be:c7:
                    15:c6:fa:1c:22:69:50:3c:cc:68:11:e3:5f:65:4c:
                    a6:61:75:fb:00:7c:6a:be:59:1b:6b:e6:28:d1:9b:
                    9d:e1:2b:50:7a:9c:22:b2:d3:46:1d:2f:3b:a6:e1:
                    3e:ba:74:4a:38:fa:46:30:72:c5:1e:03:b8:98:3a:
                    91:b0:fc:af:7c:64:69:bd:33:2e:d8:06:5c:9d:70:
                    92:73:d2:76:b5:72:ee:c6:ea:81:ac:4c:84:35:a2:
                    ec:50:25:49:48:be:27:b1:1e:79:87:49:e3:6d:c6:
                    90:d7:52:e4:54:ce:99:ab:be:9a:30:b9:d1:ce:7a:
                    ea:81:01:a4:b4:5c:f4:49:f4:94:8c:d4:6e:6b:f2:
                    91:90:1d:27:ab:35:f0:ee:18:5e:90:31:fb:33:33:
                    fc:79:d2:a1:1a:bd:80:47:88:27:14:7f:9b:ba:bf:
                    1c:83:3d:e4:b5:f0:fd:02:77:f2:60:43:bd:cf:ab:
                    68:4a:ac:b1:f9:51:e5:29:f1:66:95:38:b1:a0:8c:
                    75:7f:5b:d3:91:2d:ea:b8:5b:de:5a:65:aa:c0:0e:
                    55:23:f3:83:52:63:df:ea:e1:b2:2c:38:3b:7c:d6:
                    68:58:64:45:0f:d4:a3:79:8d:20:fd:d1:c0:2c:4f:
                    7e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F1:97:BE:2C:F3:6D:BB:50:C1:27:7F:AE:A8:E8:10:C0:16:13:66
            X509v3 Authority Key Identifier:
                keyid:91:BD:58:83:C8:2A:ED:25:FE:F1:B1:8D:70:D0:21:5B:07:F7:27:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/t_GXvizzbbtQwSd_rqjoEMAWE2Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9d56a3-4417-4940-baa2-9e962cd9dd82/1/kb1Yg8gq7SX-8bGNcNAhWwf3J9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.206.0/24
                IPv6:
                  2001:67c:2d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:11:d7:e1:4c:74:24:95:5d:5b:81:8e:c3:62:f7:66:f6:
         0d:ce:43:59:67:1c:47:3b:f1:43:c7:ff:9a:98:6f:b7:94:e9:
         51:21:f8:94:7b:10:49:c6:4c:94:41:ee:98:55:30:93:28:bc:
         c3:03:09:d0:44:0c:bb:c5:9d:d1:8b:e5:44:46:1a:ba:1e:36:
         e7:62:49:d7:e1:cc:78:51:3a:cb:64:5c:7b:f2:76:c8:74:8d:
         97:5e:1b:38:cf:59:a8:55:38:f4:ea:89:11:96:08:88:1c:e8:
         64:98:36:bf:3a:2e:29:46:f8:e3:e8:4d:c8:a4:82:f6:c8:04:
         7a:85:9b:f2:7a:24:5c:cf:ee:d8:8c:1b:e7:90:1a:a0:93:52:
         58:4e:93:00:aa:fa:88:10:17:ba:76:d9:bd:73:41:9b:8a:e1:
         23:9a:10:48:e1:65:de:06:9d:3c:8a:fa:06:66:54:da:8e:17:
         41:61:38:8a:42:ba:58:0f:47:6c:5f:4e:4d:5b:40:91:6a:89:
         8c:29:5e:77:80:6e:65:2b:ce:7d:90:cd:64:56:8c:ce:ec:e3:
         89:30:32:97:34:28:08:32:b7:ef:a2:ff:60:62:7d:61:33:8a:
         13:9d:e1:e8:b6:b6:b1:98:23:52:a6:f0:65:eb:83:4f:ad:fb:
         3f:4a:82:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----