Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/gYXXaClMotLbmJoUOleGHhnd0Lw.roa
File:                     gYXXaClMotLbmJoUOleGHhnd0Lw.roa (raw, json)
Hash identifier:          FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=
Subject key identifier:   81:85:D7:68:29:4C:A2:D2:DB:98:9A:14:3A:57:86:1E:19:DD:D0:BC
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       019422FBD9A0B6EE5D85C4B48BC316EA864C
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/gYXXaClMotLbmJoUOleGHhnd0Lw.roa
Signing time:             Wed 01 Jan 2025 17:48:38 +0000
ROA not before:           Wed 01 Jan 2025 17:48:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     44684
IP address blocks:        91.244.180.0/24 maxlen: 24
                          2001:67c:7a4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fb:d9:a0:b6:ee:5d:85:c4:b4:8b:c3:16:ea:86:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Jan  1 17:48:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8185d768294ca2d2db989a143a57861e19ddd0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:d3:6f:f1:14:04:83:c4:75:72:f1:4f:24:
                    ba:17:82:5a:21:cf:16:a3:1b:f8:8d:d4:65:61:41:
                    53:ba:2f:27:f2:bf:f5:eb:f4:a1:c6:4c:f0:2d:55:
                    67:7a:1d:61:19:4d:2c:a2:71:f3:9d:91:e8:b8:52:
                    74:ad:13:d5:38:fc:5d:c7:ab:75:bf:b6:04:fd:dc:
                    db:65:73:cb:4e:de:2d:0d:ad:96:0e:6f:9a:4f:c5:
                    f2:2f:05:71:4b:64:5b:96:ae:05:94:c9:72:18:65:
                    38:53:00:8a:a3:43:58:51:28:7c:11:c6:15:e8:bf:
                    94:ea:5d:cc:20:86:4b:d6:04:3f:ff:fc:65:25:1c:
                    77:4a:9b:23:f7:ea:7b:02:19:a2:4e:97:02:db:d1:
                    b5:da:16:7b:09:dc:33:9b:6d:c9:97:5a:50:7a:c1:
                    78:9b:72:af:83:f8:62:4f:f9:bd:cb:46:6b:1c:48:
                    e7:db:00:b0:ff:15:65:c6:36:34:f7:76:77:2f:02:
                    ca:ca:9a:6f:54:be:c2:3c:ac:5c:bc:28:f5:00:8e:
                    64:42:19:1d:0d:46:5a:79:02:51:95:f1:f2:96:2a:
                    9f:e7:32:19:08:f0:f8:9d:6c:f2:20:18:dd:7c:eb:
                    34:f9:e4:b4:c7:f4:15:2b:b7:40:00:c8:cf:34:a1:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:85:D7:68:29:4C:A2:D2:DB:98:9A:14:3A:57:86:1E:19:DD:D0:BC
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/gYXXaClMotLbmJoUOleGHhnd0Lw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.244.180.0/24
                IPv6:
                  2001:67c:7a4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:cd:26:9e:56:69:0f:39:7d:8c:89:cf:c7:78:33:ee:84:7f:
         0d:83:95:43:b9:3c:64:8c:4f:18:bc:c1:68:09:54:56:57:03:
         dc:9f:d1:80:ca:f4:3b:d4:f5:28:ef:f8:84:c5:97:ee:42:e9:
         a4:57:d3:72:5e:c0:85:bf:57:1f:02:01:d6:9b:f1:36:ec:30:
         e0:f5:d4:c2:37:b1:85:6f:84:2c:28:2d:b5:cf:2b:e6:9f:99:
         94:0b:0a:2a:8a:e6:fc:f9:8d:a5:19:fd:e7:e9:b6:ab:25:cc:
         2d:92:10:cc:bd:99:46:0c:fb:49:77:48:a2:1e:ed:8a:e1:41:
         f2:51:a9:82:e6:5f:14:08:16:44:ef:b0:cf:17:5d:7c:8a:58:
         77:92:bc:14:10:e3:d4:54:a4:f9:d8:17:24:ce:4d:07:7c:9b:
         69:70:fa:73:21:75:9b:93:e6:88:a5:6e:a2:10:6a:9b:b4:6e:
         68:19:37:98:81:66:c1:f6:d4:a7:60:da:6f:03:14:fd:30:17:
         8f:d7:52:26:0c:74:07:ca:06:c4:b7:28:b2:59:ea:e4:55:cd:
         57:1e:78:d9:4e:a2:6f:60:f9:4e:ae:52:a3:cc:39:37:14:2b:
         87:3e:23:61:51:b8:f9:fc:3d:6e:16:7a:f4:36:3a:e9:1e:f5:
         13:69:aa:e4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQi+9mgtu5dhcS0i8MW6oZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl
YmQ2MWMwHhcNMjUwMTAxMTc0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTg1ZDc2ODI5NGNhMmQyZGI5ODlhMTQzYTU3ODYxZTE5ZGRkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KHTb/EUBIPEdXLxTyS6F4JaIc8W
oxv4jdRlYUFTui8n8r/16/ShxkzwLVVneh1hGU0sonHznZHouFJ0rRPVOPxdx6t1
v7YE/dzbZXPLTt4tDa2WDm+aT8XyLwVxS2Rblq4FlMlyGGU4UwCKo0NYUSh8EcYV
6L+U6l3MIIZL1gQ///xlJRx3Spsj9+p7AhmiTpcC29G12hZ7Cdwzm23Jl1pQesF4
m3Kvg/hiT/m9y0ZrHEjn2wCw/xVlxjY093Z3LwLKyppvVL7CPKxcvCj1AI5kQhkd
DUZaeQJRlfHyliqf5zIZCPD4nWzyIBjdfOs0+eS0x/QVK7dAAMjPNKGjsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIGF12gpTKLS25iaFDpXhh4Z3dC8MB8GA1UdIwQY
MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt
MGJkOWRkZjM5NzBlLzEvZ1lYWGFDbE1vdExibUpvVU9sZUdIaG5kMEx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl
LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/S0MA8E
AgACMAkDBwAgAQZ8B6QwDQYJKoZIhvcNAQELBQADggEBAA/NJp5WaQ85fYyJz8d4
M+6Efw2DlUO5PGSMTxi8wWgJVFZXA9yf0YDK9DvU9Sjv+ITFl+5C6aRX03JewIW/
Vx8CAdab8TbsMOD11MI3sYVvhCwoLbXPK+afmZQLCiqK5vz5jaUZ/efptqslzC2S
EMy9mUYM+0l3SKIe7YrhQfJRqYLmXxQIFkTvsM8XXXyKWHeSvBQQ49RUpPnYFyTO
TQd8m2lw+nMhdZuT5oilbqIQapu0bmgZN5iBZsH21Kdg2m8DFP0wF4/XUiYMdAfK
BsS3KLJZ6uRVzVceeNlOom9g+U6uUqPMOTcUK4c+I2FRuPn8PW4WevQ2Ouke9RNp
quQ=
-----END CERTIFICATE-----