Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-8VgH2fi815OlatQomHxy8-dD4E.roa
File:                     1-8VgH2fi815OlatQomHxy8-dD4E.roa (raw, json)
Hash identifier:          8ksSnVST3ZGWixcJvhBw6VcWV4VWqoHJbJKO1llQoHQ=
Subject key identifier:   FB:C5:60:1F:67:E2:F3:5E:4E:95:AB:50:A2:61:F1:CB:CF:9D:0F:81
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       0194221FE51387FB950FD61A4588BA8B2AB1
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-8VgH2fi815OlatQomHxy8-dD4E.roa
Signing time:             Wed 01 Jan 2025 13:48:23 +0000
ROA not before:           Wed 01 Jan 2025 13:48:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8881
IP address blocks:        24.40.128.0/18 maxlen: 18
                          46.142.0.0/16 maxlen: 16
                          46.142.0.0/18 maxlen: 20
                          46.142.64.0/19 maxlen: 20
                          46.142.96.0/19 maxlen: 19
                          46.142.96.0/20 maxlen: 20
                          46.142.128.0/19 maxlen: 19
                          46.142.160.0/19 maxlen: 19
                          46.142.214.0/24 maxlen: 24
                          46.142.224.0/19 maxlen: 19
                          46.189.0.0/17 maxlen: 17
                          61.8.128.0/19 maxlen: 22
                          61.8.156.0/23 maxlen: 24
                          62.72.64.0/19 maxlen: 19
                          62.72.70.0/24 maxlen: 24
                          62.214.0.0/16 maxlen: 16
                          62.214.224.0/19 maxlen: 19
                          62.217.32.0/19 maxlen: 19
                          62.220.0.0/19 maxlen: 19
                          62.220.1.0/24 maxlen: 24
                          80.241.192.0/20 maxlen: 20
                          80.242.160.0/19 maxlen: 19
                          82.119.160.0/19 maxlen: 19
                          82.140.0.0/18 maxlen: 18
                          82.140.48.0/20 maxlen: 20
                          82.144.32.0/19 maxlen: 19
                          82.145.0.0/19 maxlen: 19
                          82.194.96.0/19 maxlen: 19
                          82.207.128.0/17 maxlen: 17
                          82.207.192.0/19 maxlen: 19
                          83.135.0.0/16 maxlen: 16
                          83.135.0.0/20 maxlen: 20
                          83.135.64.0/19 maxlen: 19
                          83.135.96.0/20 maxlen: 20
                          83.135.112.0/20 maxlen: 20
                          83.135.128.0/19 maxlen: 20
                          83.135.160.0/21 maxlen: 21
                          83.135.168.0/21 maxlen: 21
                          83.135.176.0/22 maxlen: 22
                          83.135.184.0/21 maxlen: 21
                          83.135.192.0/20 maxlen: 20
                          83.135.208.0/20 maxlen: 20
                          83.135.224.0/22 maxlen: 22
                          83.135.232.0/21 maxlen: 21
                          83.135.240.0/22 maxlen: 22
                          84.19.192.0/19 maxlen: 19
                          87.122.0.0/15 maxlen: 15
                          87.122.0.0/20 maxlen: 20
                          87.122.16.0/20 maxlen: 20
                          87.122.32.0/19 maxlen: 19
                          87.122.64.0/19 maxlen: 20
                          87.122.96.0/19 maxlen: 19
                          87.122.128.0/21 maxlen: 21
                          87.122.144.0/20 maxlen: 20
                          87.122.160.0/20 maxlen: 20
                          87.122.176.0/21 maxlen: 21
                          87.122.192.0/19 maxlen: 19
                          87.122.224.0/19 maxlen: 20
                          87.123.0.0/19 maxlen: 20
                          87.123.32.0/19 maxlen: 19
                          87.123.64.0/20 maxlen: 20
                          87.123.80.0/20 maxlen: 20
                          87.123.96.0/19 maxlen: 19
                          87.123.128.0/19 maxlen: 19
                          87.123.160.0/20 maxlen: 20
                          87.123.176.0/20 maxlen: 20
                          87.123.194.0/24 maxlen: 24
                          87.123.196.0/24 maxlen: 24
                          87.123.203.0/24 maxlen: 24
                          87.123.216.0/21 maxlen: 21
                          87.123.224.0/20 maxlen: 20
                          87.123.240.0/21 maxlen: 21
                          88.130.0.0/16 maxlen: 16
                          88.130.48.0/20 maxlen: 24
                          88.130.64.0/19 maxlen: 19
                          88.130.96.0/19 maxlen: 19
                          88.130.136.0/21 maxlen: 21
                          88.130.144.0/20 maxlen: 20
                          88.130.172.0/22 maxlen: 22
                          88.130.176.0/21 maxlen: 21
                          88.130.192.0/23 maxlen: 23
                          88.130.194.0/23 maxlen: 23
                          88.130.216.0/21 maxlen: 21
                          89.27.128.0/17 maxlen: 17
                          89.207.200.0/21 maxlen: 21
                          89.244.0.0/14 maxlen: 14
                          89.244.76.0/22 maxlen: 22
                          89.244.78.0/23 maxlen: 23
                          89.244.80.0/20 maxlen: 20
                          89.244.96.0/22 maxlen: 22
                          89.244.120.0/21 maxlen: 21
                          89.244.160.0/21 maxlen: 21
                          89.244.176.0/20 maxlen: 20
                          89.244.192.0/19 maxlen: 20
                          89.244.224.0/19 maxlen: 19
                          89.245.0.0/20 maxlen: 20
                          89.245.16.0/20 maxlen: 20
                          89.245.32.0/19 maxlen: 19
                          89.245.64.0/19 maxlen: 19
                          89.245.96.0/20 maxlen: 20
                          89.245.112.0/20 maxlen: 20
                          89.245.158.0/24 maxlen: 24
                          89.245.159.0/24 maxlen: 24
                          89.245.160.0/20 maxlen: 20
                          89.245.176.0/21 maxlen: 21
                          89.245.192.0/19 maxlen: 19
                          89.245.224.0/19 maxlen: 20
                          89.246.0.0/19 maxlen: 20
                          89.246.32.0/19 maxlen: 19
                          89.246.96.0/21 maxlen: 21
                          89.246.122.0/24 maxlen: 24
                          89.246.124.0/22 maxlen: 22
                          89.246.160.0/21 maxlen: 21
                          89.246.184.0/21 maxlen: 21
                          89.246.192.0/19 maxlen: 19
                          89.247.0.0/19 maxlen: 19
                          89.247.32.0/19 maxlen: 19
                          89.247.32.0/20 maxlen: 20
                          89.247.64.0/20 maxlen: 20
                          89.247.80.0/20 maxlen: 20
                          89.247.112.0/21 maxlen: 21
                          89.247.112.0/22 maxlen: 22
                          89.247.120.0/22 maxlen: 22
                          89.247.144.0/20 maxlen: 20
                          89.247.160.0/20 maxlen: 20
                          89.247.179.0/24 maxlen: 24
                          89.247.192.0/20 maxlen: 20
                          89.247.216.0/22 maxlen: 22
                          89.247.228.0/22 maxlen: 22
                          89.247.232.0/21 maxlen: 21
                          89.247.236.0/22 maxlen: 22
                          89.247.252.0/22 maxlen: 22
                          94.134.0.0/15 maxlen: 15
                          94.134.0.0/18 maxlen: 18
                          94.134.64.0/19 maxlen: 23
                          94.134.64.0/22 maxlen: 22
                          94.134.64.0/23 maxlen: 23
                          94.134.68.0/22 maxlen: 22
                          94.134.68.0/23 maxlen: 23
                          94.134.88.0/22 maxlen: 22
                          94.134.89.0/24 maxlen: 24
                          94.134.94.0/23 maxlen: 23
                          94.134.96.0/20 maxlen: 21
                          94.134.112.0/22 maxlen: 22
                          94.134.160.0/21 maxlen: 21
                          94.134.168.0/22 maxlen: 22
                          94.134.172.0/22 maxlen: 23
                          94.134.176.0/21 maxlen: 21
                          94.134.192.0/22 maxlen: 22
                          94.134.216.0/21 maxlen: 21
                          104.151.0.0/17 maxlen: 17
                          143.58.64.0/18 maxlen: 18
                          185.108.228.0/23 maxlen: 23
                          185.128.68.0/22 maxlen: 22
                          193.219.15.0/24 maxlen: 24
                          195.167.208.0/20 maxlen: 20
                          195.202.32.0/19 maxlen: 19
                          195.226.96.0/19 maxlen: 19
                          195.226.160.0/19 maxlen: 19
                          202.71.128.0/20 maxlen: 20
                          202.71.141.0/24 maxlen: 24
                          212.7.128.0/19 maxlen: 19
                          212.80.224.0/19 maxlen: 19
                          212.93.0.0/19 maxlen: 19
                          212.204.0.0/19 maxlen: 19
                          213.30.192.0/18 maxlen: 18
                          213.138.32.0/19 maxlen: 19
                          213.138.35.0/24 maxlen: 24
                          213.139.128.0/19 maxlen: 19
                          213.182.128.0/19 maxlen: 19
                          217.9.32.0/19 maxlen: 19
                          217.9.96.0/19 maxlen: 19
                          217.27.192.0/20 maxlen: 20
                          217.65.16.0/20 maxlen: 20
                          217.78.128.0/20 maxlen: 20
                          217.199.64.0/20 maxlen: 20
                          2001:7b0::/32 maxlen: 32
                          2001:9e8::/32 maxlen: 32
                          2001:9e8::/35 maxlen: 35
                          2001:9e8:2000::/35 maxlen: 35
                          2001:9e8:4000::/35 maxlen: 35
                          2001:9e8:6000::/35 maxlen: 35
                          2001:9e8:8000::/35 maxlen: 35
                          2001:9e8:a000::/35 maxlen: 35
                          2001:9e8:c000::/35 maxlen: 35
                          2001:9e8:e000::/35 maxlen: 36
                          2001:1438::/32 maxlen: 36
                          2001:1438:1::/48 maxlen: 56
                          2001:1438:300::/56 maxlen: 56
                          2001:16b8::/32 maxlen: 40
                          2a00:fb8::/29 maxlen: 48
                          2a00:fb8::/35 maxlen: 35
                          2a00:fb8:2000::/35 maxlen: 35
                          2a00:fb8:4000::/35 maxlen: 35
                          2a00:fb8:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:e5:13:87:fb:95:0f:d6:1a:45:88:ba:8b:2a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Jan  1 13:48:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fbc5601f67e2f35e4e95ab50a261f1cbcf9d0f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:bc:f1:11:51:72:95:5c:a4:85:d7:e5:1c:fe:
                    35:ac:9b:85:62:fd:db:10:d6:63:3c:c3:77:53:87:
                    77:a5:b6:0b:6a:02:c1:eb:0a:63:dc:f9:98:1b:7d:
                    6a:2e:e6:6a:f8:cc:aa:03:f8:0b:15:5b:df:3f:56:
                    1d:62:58:c9:91:10:e7:25:dc:81:e9:61:12:2c:30:
                    a2:9e:ef:a9:ae:52:5a:25:1d:31:2d:6c:bc:1f:b2:
                    59:58:64:70:80:f8:e5:93:4c:17:2a:65:23:d6:99:
                    27:05:f2:f2:84:ad:6a:a7:61:96:e8:2d:7a:04:f3:
                    04:89:0e:d1:14:da:b6:2b:96:58:3b:2c:1c:6b:5a:
                    3e:e8:98:67:40:9f:80:e0:5b:79:7f:9e:41:8d:9a:
                    04:f3:95:cf:9f:e2:d1:bb:48:a6:7f:16:af:9f:d8:
                    32:de:d9:4d:ee:82:ef:b6:d7:c1:62:79:db:e6:84:
                    08:7a:ce:1b:31:af:47:03:f5:4e:ce:80:ef:67:6b:
                    bf:62:99:ed:10:9d:a2:d7:97:95:3a:16:8d:0e:7e:
                    38:9e:28:c6:8a:57:5d:b6:ce:0d:96:37:c4:f7:60:
                    78:3d:2e:e0:e4:28:c3:e0:ae:aa:2a:b8:be:a5:66:
                    79:37:5b:22:33:6e:60:a2:73:c8:d2:ab:d7:0e:b1:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:60:1F:67:E2:F3:5E:4E:95:AB:50:A2:61:F1:CB:CF:9D:0F:81
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/1-8VgH2fi815OlatQomHxy8-dD4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.40.128.0/18
                  46.142.0.0/16
                  46.189.0.0/17
                  61.8.128.0/19
                  62.72.64.0/19
                  62.214.0.0/16
                  62.217.32.0/19
                  62.220.0.0/19
                  80.241.192.0/20
                  80.242.160.0/19
                  82.119.160.0/19
                  82.140.0.0/18
                  82.144.32.0/19
                  82.145.0.0/19
                  82.194.96.0/19
                  82.207.128.0/17
                  83.135.0.0/16
                  84.19.192.0/19
                  87.122.0.0/15
                  88.130.0.0/16
                  89.27.128.0/17
                  89.207.200.0/21
                  89.244.0.0/14
                  94.134.0.0/15
                  104.151.0.0/17
                  143.58.64.0/18
                  185.108.228.0/23
                  185.128.68.0/22
                  193.219.15.0/24
                  195.167.208.0/20
                  195.202.32.0/19
                  195.226.96.0/19
                  195.226.160.0/19
                  202.71.128.0/20
                  212.7.128.0/19
                  212.80.224.0/19
                  212.93.0.0/19
                  212.204.0.0/19
                  213.30.192.0/18
                  213.138.32.0/19
                  213.139.128.0/19
                  213.182.128.0/19
                  217.9.32.0/19
                  217.9.96.0/19
                  217.27.192.0/20
                  217.65.16.0/20
                  217.78.128.0/20
                  217.199.64.0/20
                IPv6:
                  2001:7b0::/32
                  2001:9e8::/32
                  2001:1438::/32
                  2001:16b8::/32
                  2a00:fb8::/29

    Signature Algorithm: sha256WithRSAEncryption
         58:92:c4:8c:ce:1f:37:78:01:d4:7d:cb:d4:9f:67:b2:16:6f:
         63:55:87:f4:3f:04:db:74:4d:8e:7b:bb:32:fb:20:ff:8b:c2:
         c0:28:89:f3:f9:77:d0:e0:f4:30:7e:36:04:f6:89:4d:aa:67:
         c0:94:ee:71:57:78:80:d9:d1:5d:e2:2a:e1:a1:c5:ad:b4:ca:
         98:dd:86:7e:45:89:0a:9a:46:c6:a5:ab:fd:05:68:03:41:fd:
         68:54:4f:6a:95:5a:4f:94:f3:1b:71:27:be:2c:d9:f3:00:32:
         4b:a7:a0:26:28:8b:a7:bc:2a:87:da:39:43:9a:f7:93:78:b0:
         9e:49:67:c0:95:0b:5a:9f:ce:33:32:dd:4c:4c:7a:16:26:26:
         3a:6d:5d:77:5e:e6:42:43:ad:c0:cf:eb:e3:98:65:23:23:6e:
         02:bc:ec:b6:82:60:7f:f3:b5:80:1d:cf:d7:73:da:51:10:08:
         62:a9:4b:70:72:a1:2a:9d:c3:ec:0d:3f:40:69:cc:04:92:c6:
         7c:43:8e:c3:12:5f:bf:e1:d8:bc:38:f7:7d:80:5f:cc:4e:23:
         c7:72:ed:56:72:c0:1d:6c:3a:43:0f:a8:fc:f5:7a:78:67:25:
         80:e4:e0:7c:06:44:1f:55:2d:78:64:51:9a:98:6f:24:7c:66:
         69:c7:21:c1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgISAZQiH+UTh/uVD9YaRYi6iyqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjUwMTAxMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmM1NjAxZjY3ZTJmMzVlNGU5NWFiNTBhMjYxZjFjYmNmOWQwZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rzxEVFylVykhdflHP41rJuFYv3b
ENZjPMN3U4d3pbYLagLB6wpj3PmYG31qLuZq+MyqA/gLFVvfP1YdYljJkRDnJdyB
6WESLDCinu+prlJaJR0xLWy8H7JZWGRwgPjlk0wXKmUj1pknBfLyhK1qp2GW6C16
BPMEiQ7RFNq2K5ZYOywca1o+6JhnQJ+A4Ft5f55BjZoE85XPn+LRu0imfxavn9gy
3tlN7oLvttfBYnnb5oQIes4bMa9HA/VOzoDvZ2u/YpntEJ2i15eVOhaNDn44nijG
ilddts4NljfE92B4PS7g5CjD4K6qKri+pWZ5N1siM25gonPI0qvXDrFdxwIDAQAB
o4IDUjCCA04wHQYDVR0OBBYEFPvFYB9n4vNeTpWrUKJh8cvPnQ+BMB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvMS04VmdIMmZpODE1T2xhdFFvbUh4eTgtZEQ0RS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWIvYjEzOTNkLWNjYTgtNGE5Ny04MWFhLTY0M2E0MTU5YWI0
Ni8xL0FkR2hOVDlfaTFCZnlZZFE2R2VIOU9CR1F5NC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAWUGCCsGAQUFBwEHAQH/BIIBVDCCAVAwggEhBAIAATCC
ARkDBAYYKIADAwAujgMEBy69AAMEBT0IgAMEBT5IQAMDAD7WAwQFPtkgAwQFPtwA
AwQEUPHAAwQFUPKgAwQFUnegAwQGUowAAwQFUpAgAwQFUpEAAwQFUsJgAwQHUs+A
AwMAU4cDBAVUE8ADAwFXegMDAFiCAwQHWRuAAwQDWc/IAwMCWfQDAwFehgMEB2iX
AAMEBo86QAMEAbls5AMEArmARAMEAMHbDwMEBMOn0AMEBcPKIAMEBcPiYAMEBcPi
oAMEBMpHgAMEBdQHgAMEBdRQ4AMEBdRdAAMEBdTMAAMEBtUewAMEBdWKIAMEBdWL
gAMEBdW2gAMEBdkJIAMEBdkJYAMEBNkbwAMEBNlBEAMEBNlOgAMEBNnHQDApBAIA
AjAjAwUAIAEHsAMFACABCegDBQAgARQ4AwUAIAEWuAMFAyoAD7gwDQYJKoZIhvcN
AQELBQADggEBAFiSxIzOHzd4AdR9y9SfZ7IWb2NVh/Q/BNt0TY57uzL7IP+LwsAo
ifP5d9Dg9DB+NgT2iU2qZ8CU7nFXeIDZ0V3iKuGhxa20ypjdhn5FiQqaRsalq/0F
aANB/WhUT2qVWk+U8xtxJ74s2fMAMkunoCYoi6e8KofaOUOa95N4sJ5JZ8CVC1qf
zjMy3UxMehYmJjptXXde5kJDrcDP6+OYZSMjbgK87LaCYH/ztYAdz9dz2lEQCGKp
S3ByoSqdw+wNP0BpzASSxnxDjsMSX7/h2Lw4932AX8xOI8dy7VZywB1sOkMPqPz1
enhnJYDk4HwGRB9VLXhkUZqYbyR8ZmnHIcE=
-----END CERTIFICATE-----
Generated at Thu Feb 20 15:07:06 2025 by rpki-client