Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/Ar5ixINRYv4h1JY24F8pTYnNdfU.roa
File:                     Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (raw, json)
Hash identifier:          cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=
Subject key identifier:   02:BE:62:C4:83:51:62:FE:21:D4:96:36:E0:5F:29:4D:89:CD:75:F5
Certificate issuer:       /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial:       0194266B352BC2ACE04385D696A78B73BC0A
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/Ar5ixINRYv4h1JY24F8pTYnNdfU.roa
Signing time:             Thu 02 Jan 2025 09:49:07 +0000
ROA not before:           Thu 02 Jan 2025 09:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51225
IP address blocks:        91.218.4.0/22 maxlen: 24
                          2001:7f8:94::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:6b:35:2b:c2:ac:e0:43:85:d6:96:a7:8b:73:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
        Validity
            Not Before: Jan  2 09:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02be62c4835162fe21d49636e05f294d89cd75f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:74:51:2b:b9:35:ab:95:79:94:7a:0d:52:
                    b4:bd:77:d5:05:07:81:15:8c:5f:57:5d:dd:16:3b:
                    0b:47:7a:2c:df:34:7b:53:fb:f2:07:20:44:d7:53:
                    d9:d3:8d:e7:9e:c2:37:9a:f1:45:b9:f5:4e:89:e8:
                    c2:b4:bb:35:e3:06:79:80:31:33:4d:bc:8f:d3:74:
                    a7:9d:b9:ca:0c:88:04:05:91:e1:f6:03:80:44:ee:
                    c4:3b:e4:7b:cb:ad:05:b0:be:e4:3d:0e:d7:e8:b5:
                    30:21:ec:7a:cb:6c:66:b3:12:a7:fd:7a:75:51:80:
                    cf:6a:3c:15:f9:fc:d9:15:95:de:f1:c0:a9:a8:af:
                    ae:a6:b1:2a:c9:4f:1a:84:45:2a:ed:00:4c:62:e1:
                    26:07:78:99:00:8c:79:14:0e:49:d1:16:c8:97:a0:
                    90:b4:51:6d:12:48:6c:44:9c:ff:76:2e:6e:3c:c5:
                    61:4a:fb:44:77:99:7c:6d:3c:cc:4a:08:b9:50:9b:
                    a1:49:1a:80:22:60:4d:e6:1e:d5:26:d2:d5:6e:fd:
                    cc:10:b3:d4:5e:d4:fc:ef:cb:4a:b0:08:43:e9:01:
                    ac:7e:01:fb:80:d7:f9:0c:dd:69:ba:84:b5:7f:09:
                    78:25:b9:ed:96:a0:73:c1:b7:d8:5a:f9:96:a0:bf:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BE:62:C4:83:51:62:FE:21:D4:96:36:E0:5F:29:4D:89:CD:75:F5
            X509v3 Authority Key Identifier:
                keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/Ar5ixINRYv4h1JY24F8pTYnNdfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.218.4.0/22
                IPv6:
                  2001:7f8:94::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:f9:c3:4d:04:bb:2f:7f:ba:54:02:9e:f1:64:e8:e8:c6:
         d3:f3:50:73:6f:2d:e4:47:0b:4e:1f:35:33:0a:a6:51:24:a8:
         8a:76:e7:79:8d:45:a7:e3:b2:e2:97:33:a6:ea:d1:55:25:f7:
         c2:f2:41:d2:aa:9b:41:b7:73:5c:75:34:82:9a:51:ee:2e:82:
         ac:26:ae:ca:96:7b:99:d4:b5:85:9b:f4:03:ff:4a:3e:e9:fe:
         ee:e1:30:7b:bf:61:b0:a8:ce:16:55:33:74:ac:18:dc:1a:56:
         81:ce:63:8c:6c:49:a7:1f:1f:dd:78:1b:b9:12:8c:73:8c:50:
         92:86:87:49:8e:35:0a:a9:e3:38:ec:0f:8e:54:50:8f:59:98:
         98:69:39:56:c7:61:49:57:d9:71:e3:17:aa:72:0d:d1:9c:94:
         a2:e9:ce:7f:92:92:4d:23:b5:f7:08:65:b3:71:41:0c:31:e6:
         ee:0f:3d:f9:16:06:1d:d4:ca:75:f0:0b:59:c6:ad:6e:b4:a8:
         43:83:11:09:9b:93:1c:64:54:a1:ba:1f:fd:45:27:0c:de:12:
         2b:be:be:c0:55:d2:e4:2b:f8:67:36:69:e5:b0:70:ab:a6:85:
         7b:ef:f3:62:83:b2:17:8b:ed:dd:97:b4:29:bf:4f:89:f8:f2:
         e2:0b:a9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----