Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/6Ws74y6Nwf78AVosGHIH3KZShUI.roa
File:                     6Ws74y6Nwf78AVosGHIH3KZShUI.roa (raw, json)
Hash identifier:          HtNFOxzPI0ZbD22siO8UeJbW1HbOmrNLXjn5ZOwIrAs=
Subject key identifier:   E9:6B:3B:E3:2E:8D:C1:FE:FC:01:5A:2C:18:72:07:DC:A6:52:85:42
Certificate issuer:       /CN=0f784ebe35e41b610be154473bc219d0ad25278f
Certificate serial:       01942521C0D5882476B98DBE9DECB14804C7
Authority key identifier: 0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/6Ws74y6Nwf78AVosGHIH3KZShUI.roa
Signing time:             Thu 02 Jan 2025 03:49:16 +0000
ROA not before:           Thu 02 Jan 2025 03:49:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215252
IP address blocks:        194.62.44.0/24 maxlen: 24
                          2001:67c:13a8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:c0:d5:88:24:76:b9:8d:be:9d:ec:b1:48:04:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f784ebe35e41b610be154473bc219d0ad25278f
        Validity
            Not Before: Jan  2 03:49:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e96b3be32e8dc1fefc015a2c187207dca6528542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:72:f1:a2:c9:47:0d:aa:96:57:28:5c:cd:
                    84:ac:d8:57:74:14:1b:8e:65:b3:67:26:d9:b7:c4:
                    f9:b1:f0:bd:bb:66:18:e4:55:70:6e:3b:66:13:12:
                    47:4d:8e:ca:80:68:31:1b:10:f7:b4:6c:70:48:dc:
                    3b:43:40:2f:b0:98:0e:7e:3a:d6:71:1b:05:58:4d:
                    05:13:ad:e1:7b:b3:db:aa:67:39:5f:a7:e1:59:67:
                    f9:64:13:c7:3a:f8:cd:8b:e4:15:50:62:27:b0:29:
                    6c:14:53:c2:5c:d6:45:11:05:c4:ac:ef:d7:4b:a3:
                    a7:44:0b:a5:e8:5a:25:b0:68:29:5d:f1:97:00:4e:
                    83:5a:79:13:00:c6:d6:06:1d:24:4a:aa:0a:2f:28:
                    b9:b1:cd:ff:79:c7:34:23:a6:4c:b1:bd:a4:94:71:
                    81:a5:30:02:70:77:15:7a:b5:f5:80:ba:22:bf:01:
                    10:76:eb:1d:84:55:70:d3:1a:a5:6f:97:12:4c:0d:
                    48:5a:ec:ff:eb:f3:fe:bb:ff:0e:13:ea:8d:f5:e1:
                    e2:8b:79:1f:75:f5:dd:7e:c3:7d:d1:38:15:d2:fb:
                    6a:6c:d6:18:49:29:f0:40:24:81:cd:5c:87:3a:31:
                    9c:ac:d9:e1:d6:4f:3a:8c:0d:27:3b:ca:9e:e6:7e:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:3B:E3:2E:8D:C1:FE:FC:01:5A:2C:18:72:07:DC:A6:52:85:42
            X509v3 Authority Key Identifier:
                keyid:0F:78:4E:BE:35:E4:1B:61:0B:E1:54:47:3B:C2:19:D0:AD:25:27:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/6Ws74y6Nwf78AVosGHIH3KZShUI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/088a21-6214-49fa-a8f7-912e78c2f2eb/1/D3hOvjXkG2EL4VRHO8IZ0K0lJ48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.62.44.0/24
                IPv6:
                  2001:67c:13a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:fe:35:6e:86:5a:4b:79:27:8a:e5:48:90:9c:9e:60:6e:24:
         71:8f:e4:46:d5:04:65:ba:b0:af:93:dc:a8:e1:c7:40:52:b7:
         22:2f:ea:ae:ae:24:30:04:d1:b4:29:c8:33:6a:1d:2d:a7:ca:
         bb:71:39:5e:59:3b:0e:04:fa:56:60:5e:d0:c6:43:b1:f5:71:
         cc:36:12:73:dd:09:66:09:7c:84:06:a2:29:83:52:bf:86:b6:
         5e:a9:37:cf:7d:26:aa:42:8c:c5:c7:04:e7:ba:0f:f2:3d:26:
         d1:c1:4f:18:61:31:5e:c1:3d:06:b4:54:6d:6b:d9:09:ea:25:
         c3:32:8b:ee:a3:ea:95:25:26:92:e0:fd:22:85:d9:f3:20:f1:
         0a:77:3b:03:d1:79:46:13:49:cf:ee:1d:23:90:69:55:ed:c9:
         f7:1e:0a:76:82:4a:f9:63:98:a8:b9:22:8d:35:f7:9d:b1:f9:
         43:9b:a7:b8:bd:5e:86:8a:e9:6e:a8:d6:fd:64:d2:53:4c:d6:
         f2:ee:1e:43:9f:40:c1:3e:7c:10:e8:12:10:fa:0b:fd:53:e7:
         8a:a9:20:b7:8c:00:e9:5a:b9:b9:cf:14:95:64:72:72:45:a7:
         6f:86:55:3b:2d:c2:d9:78:e3:3d:a7:ea:31:4f:e7:66:96:77:
         b3:8b:84:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIcDViCR2uY2+neyxSATHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNzg0ZWJlMzVlNDFiNjEwYmUxNTQ0NzNiYzIxOWQwYWQy
NTI3OGYwHhcNMjUwMTAyMDM0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTZiM2JlMzJlOGRjMWZlZmMwMTVhMmMxODcyMDdkY2E2NTI4NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbly8aLJRw2qllcoXM2ErNhXdBQb
jmWzZybZt8T5sfC9u2YY5FVwbjtmExJHTY7KgGgxGxD3tGxwSNw7Q0AvsJgOfjrW
cRsFWE0FE63he7Pbqmc5X6fhWWf5ZBPHOvjNi+QVUGInsClsFFPCXNZFEQXErO/X
S6OnRAul6FolsGgpXfGXAE6DWnkTAMbWBh0kSqoKLyi5sc3/ecc0I6ZMsb2klHGB
pTACcHcVerX1gLoivwEQdusdhFVw0xqlb5cSTA1IWuz/6/P+u/8OE+qN9eHii3kf
dfXdfsN90TgV0vtqbNYYSSnwQCSBzVyHOjGcrNnh1k86jA0nO8qe5n63JQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOlrO+MujcH+/AFaLBhyB9ymUoVCMB8GA1UdIwQY
MBaAFA94Tr415BthC+FURzvCGdCtJSePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4Zjct
OTEyZTc4YzJmMmViLzEvNldzNzR5Nk53Zjc4QVZvc0dISUgzS1pTaFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wODhhMjEtNjIxNC00OWZhLWE4ZjctOTEyZTc4YzJmMmVi
LzEvRDNoT3ZqWGtHMkVMNFZSSE84SVowSzBsSjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj4sMA8E
AgACMAkDBwAgAQZ8E6gwDQYJKoZIhvcNAQELBQADggEBAFj+NW6GWkt5J4rlSJCc
nmBuJHGP5EbVBGW6sK+T3Kjhx0BStyIv6q6uJDAE0bQpyDNqHS2nyrtxOV5ZOw4E
+lZgXtDGQ7H1ccw2EnPdCWYJfIQGoimDUr+Gtl6pN899JqpCjMXHBOe6D/I9JtHB
TxhhMV7BPQa0VG1r2QnqJcMyi+6j6pUlJpLg/SKF2fMg8Qp3OwPReUYTSc/uHSOQ
aVXtyfceCnaCSvljmKi5Io01952x+UObp7i9XoaK6W6o1v1k0lNM1vLuHkOfQME+
fBDoEhD6C/1T54qpILeMAOlaubnPFJVkcnJFp2+GVTstwtl44z2n6jFP52aWd7OL
hBc=
-----END CERTIFICATE-----