Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/1pDvZiuSWLhx-92O6KDv3xsMTOQ.roa
File:                     1pDvZiuSWLhx-92O6KDv3xsMTOQ.roa (raw, json)
Hash identifier:          sR9Re4LpEGUmEdWfCRVo4ttWGl2TY8E5Ay1QWsq/ZLE=
Subject key identifier:   D6:90:EF:66:2B:92:58:B8:71:FB:DD:8E:E8:A0:EF:DF:1B:0C:4C:E4
Certificate issuer:       /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial:       019426D9A7D18699FC535F6A91B6C88E2DC5
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/1pDvZiuSWLhx-92O6KDv3xsMTOQ.roa
Signing time:             Thu 02 Jan 2025 11:49:45 +0000
ROA not before:           Thu 02 Jan 2025 11:49:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31655
IP address blocks:        2a03:15c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:a7:d1:86:99:fc:53:5f:6a:91:b6:c8:8e:2d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
        Validity
            Not Before: Jan  2 11:49:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d690ef662b9258b871fbdd8ee8a0efdf1b0c4ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:4f:a9:ef:3f:78:66:5b:aa:77:c5:04:e9:
                    a7:80:49:ac:39:8e:e3:8b:33:e8:5c:e0:ba:67:61:
                    a9:9d:b2:46:ce:62:59:cb:c0:22:dd:5a:aa:a9:7e:
                    4f:4a:e7:f2:42:81:02:39:73:fa:56:92:47:07:6e:
                    e0:4e:44:43:44:fa:7d:cf:c2:ef:a5:91:68:0b:2a:
                    8a:a8:38:fd:34:e1:3c:82:97:cf:d4:f1:87:a4:1d:
                    b8:04:a7:ec:8e:c4:d7:8a:1b:a1:f2:5c:8f:75:30:
                    bb:98:1e:1d:f4:49:48:f2:29:08:03:80:42:93:5a:
                    26:35:d3:ec:60:41:95:cd:dc:d2:37:4b:8d:bd:fe:
                    65:59:16:ee:44:9f:30:e5:67:6e:9d:6e:16:d7:21:
                    29:a9:86:3b:ef:2a:ea:da:9d:35:e7:a8:aa:16:4f:
                    f8:fe:fc:9e:26:ad:28:d6:b0:ff:ba:7b:f8:0b:d6:
                    5d:cd:f0:9d:98:c5:91:82:ea:6c:ae:a3:bb:0d:a1:
                    20:d4:9c:84:4d:b5:97:95:82:8b:2c:20:37:a7:36:
                    17:30:75:57:64:55:89:94:31:03:08:f2:d7:15:97:
                    ae:f4:0e:d9:c1:34:31:0d:07:d4:e7:70:6d:d8:40:
                    18:b5:c0:fa:ec:40:17:88:03:cd:12:77:f9:a1:08:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:EF:66:2B:92:58:B8:71:FB:DD:8E:E8:A0:EF:DF:1B:0C:4C:E4
            X509v3 Authority Key Identifier:
                keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/1pDvZiuSWLhx-92O6KDv3xsMTOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:1f:85:1a:90:5e:ce:5b:79:d7:3a:2f:76:ea:1e:ba:8e:12:
         b0:ac:bc:91:c3:72:9b:a2:94:16:30:c2:6a:46:8d:9a:34:2a:
         78:f4:17:42:a2:18:b3:2d:75:e3:bc:15:01:32:da:8f:7c:55:
         9f:2a:58:e7:6a:ea:2a:d5:2c:2d:f4:46:1d:67:46:79:24:ff:
         fc:75:e5:cb:5a:fe:22:62:c7:2d:e1:dc:e6:83:78:89:c8:ce:
         c1:90:29:99:8c:dc:d0:53:75:0f:a1:63:0d:cf:40:0a:30:f8:
         13:95:d1:8f:71:34:42:c9:80:53:a4:5a:b2:99:e5:c6:32:64:
         51:1a:48:fd:e5:cc:a7:c5:af:ed:c8:be:70:25:a0:b9:f5:e1:
         f7:b6:3e:d6:9a:12:4f:2e:d0:88:4e:e6:1e:93:98:bf:19:b4:
         92:a9:e4:16:5c:f5:45:69:1d:4f:57:4e:80:87:20:68:2d:bd:
         87:11:41:6e:2e:37:8d:d4:2b:d6:32:9d:22:e3:e5:f4:9d:fa:
         f7:3b:29:ad:d6:e7:04:fa:d6:4a:8d:49:6f:20:9d:eb:ae:e7:
         38:7b:fc:db:81:c3:9f:03:ed:11:cb:b5:02:56:39:42:60:47:
         42:3d:27:24:46:41:bb:97:3e:bb:d1:06:01:06:c3:6a:d0:5d:
         24:a4:40:a9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQm2afRhpn8U19qkbbIji3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1
ZjhjMzMwHhcNMjUwMTAyMTE0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjkwZWY2NjJiOTI1OGI4NzFmYmRkOGVlOGEwZWZkZjFiMGM0Y2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0NPqe8/eGZbqnfFBOmngEmsOY7j
izPoXOC6Z2GpnbJGzmJZy8Ai3VqqqX5PSufyQoECOXP6VpJHB27gTkRDRPp9z8Lv
pZFoCyqKqDj9NOE8gpfP1PGHpB24BKfsjsTXihuh8lyPdTC7mB4d9ElI8ikIA4BC
k1omNdPsYEGVzdzSN0uNvf5lWRbuRJ8w5WdunW4W1yEpqYY77yrq2p0156iqFk/4
/vyeJq0o1rD/unv4C9ZdzfCdmMWRgupsrqO7DaEg1JyETbWXlYKLLCA3pzYXMHVX
ZFWJlDEDCPLXFZeu9A7ZwTQxDQfU53Bt2EAYtcD67EAXiAPNEnf5oQibBwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNaQ72Yrkli4cfvdjuig798bDEzkMB8GA1UdIwQY
MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt
YmM1MTdlMTIxZDU0LzEvMXBEdlppdVNXTGh4LTkyTzZLRHYzeHNNVE9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0
LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgMVwDAN
BgkqhkiG9w0BAQsFAAOCAQEAWx+FGpBezlt51zovduoeuo4SsKy8kcNym6KUFjDC
akaNmjQqePQXQqIYsy1147wVATLaj3xVnypY52rqKtUsLfRGHWdGeST//HXly1r+
ImLHLeHc5oN4icjOwZApmYzc0FN1D6FjDc9ACjD4E5XRj3E0QsmAU6RaspnlxjJk
URpI/eXMp8Wv7ci+cCWgufXh97Y+1poSTy7QiE7mHpOYvxm0kqnkFlz1RWkdT1dO
gIcgaC29hxFBbi43jdQr1jKdIuPl9J369zsprdbnBPrWSo1JbyCd667nOHv824HD
nwPtEcu1AlY5QmBHQj0nJEZBu5c+u9EGAQbDatBdJKRAqQ==
-----END CERTIFICATE-----