Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_gIofeHggTwVz8nHrMZVUVEbqXM.roa
File:                     _gIofeHggTwVz8nHrMZVUVEbqXM.roa (raw, json)
Hash identifier:          /L1kJ6GYiPAjjHqV9yahW6l5CpP1Neg0ocukSbHy76o=
Subject key identifier:   FE:02:28:7D:E1:E0:81:3C:15:CF:C9:C7:AC:C6:55:51:51:1B:A9:73
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       01A0D3BAAF871E6C38E02A840C2FE63F97EC
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_gIofeHggTwVz8nHrMZVUVEbqXM.roa
Signing time:             Thu 24 Sep 2026 14:03:42 +0000
ROA not before:           Thu 24 Sep 2026 14:03:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57043
IP address blocks:        109.66.233.0/24 maxlen: 24
                          109.66.236.0/24 maxlen: 24
                          109.66.238.0/24 maxlen: 24
                          109.66.239.0/24 maxlen: 24
                          109.66.240.0/24 maxlen: 24
                          109.66.241.0/24 maxlen: 24
                          109.66.243.0/24 maxlen: 24
                          109.66.244.0/24 maxlen: 24
                          109.66.245.0/24 maxlen: 24
                          109.66.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:ba:af:87:1e:6c:38:e0:2a:84:0c:2f:e6:3f:97:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Sep 24 14:03:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe02287de1e0813c15cfc9c7acc65551511ba973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:70:46:83:64:3a:b3:07:41:a3:0b:ab:cf:
                    99:ae:5f:3d:0a:06:2c:35:bb:69:d8:1d:91:39:f2:
                    a3:2a:cb:b9:7d:e3:a1:7c:79:ed:62:16:d4:25:4e:
                    f8:e2:df:cb:14:3d:34:1c:a1:f4:25:1c:ec:97:88:
                    57:0b:04:ba:d1:f0:05:0e:0a:ee:86:05:47:34:3c:
                    6b:df:22:d8:2a:e4:7b:1c:1f:95:be:ce:a8:89:18:
                    cc:87:8c:f2:55:94:a0:0d:ab:74:d0:5d:c3:53:68:
                    6b:af:34:03:d6:15:ae:ec:9a:2a:6b:e2:f7:b7:c4:
                    d2:30:8c:0e:e1:b8:33:86:60:9d:8c:cc:22:4a:41:
                    49:64:75:2c:d7:9d:e4:d3:b1:8d:6e:ec:34:c2:fe:
                    f9:80:82:ab:58:9a:ff:15:5b:fa:a4:c0:ea:1e:d6:
                    4f:6f:ac:5b:c0:d1:72:db:07:4e:7b:86:eb:4e:33:
                    14:db:cd:49:90:af:e0:37:de:b4:fc:4e:f0:b6:27:
                    f8:58:62:ce:e1:3f:58:07:ef:7a:87:6f:62:07:88:
                    f2:69:0c:c3:01:62:04:63:a6:34:44:fa:ef:a8:52:
                    fa:57:57:aa:aa:a9:25:84:90:22:b8:65:eb:13:9b:
                    20:4a:5d:f0:74:79:26:4c:61:11:5c:4a:f4:94:52:
                    4e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:28:7D:E1:E0:81:3C:15:CF:C9:C7:AC:C6:55:51:51:1B:A9:73
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/_gIofeHggTwVz8nHrMZVUVEbqXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.66.233.0/24
                  109.66.236.0/24
                  109.66.238.0-109.66.241.255
                  109.66.243.0-109.66.245.255
                  109.66.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:01:0f:69:6f:c5:97:69:a4:52:d9:cc:37:22:fb:b4:f0:72:
         b8:7a:42:6e:3f:14:a7:bb:61:e4:73:62:03:37:60:e4:7b:bc:
         35:86:90:b7:1e:97:45:fa:77:13:7d:08:5d:e9:01:14:5e:c4:
         df:28:24:23:1d:2b:cb:1f:6c:ed:46:c9:73:3c:f7:b6:52:76:
         18:aa:b8:b3:cc:24:b0:63:8e:24:1a:78:60:17:92:bf:03:fe:
         47:89:68:84:f0:80:96:67:d2:5c:d1:0e:b2:c3:e9:84:df:53:
         e1:ab:eb:43:9c:19:50:0a:3c:f4:5c:f5:81:83:4d:39:ee:9f:
         cd:e0:ae:42:25:28:3b:39:a3:ae:30:e3:b6:33:f6:89:8e:8c:
         f1:34:08:6e:c2:16:a0:88:20:47:b5:ed:bc:c7:88:68:33:f1:
         06:bb:82:57:14:6a:52:2c:26:6a:3e:e1:54:25:8a:18:d9:cd:
         3c:1b:f5:63:cb:09:77:b3:27:1f:e7:9f:42:d0:93:e1:70:24:
         20:0c:13:cc:cc:22:51:30:b2:d7:35:aa:be:9c:b2:fe:3d:0f:
         e5:87:b7:9c:3c:b9:a9:85:ca:03:a8:21:f6:b1:55:8a:d8:dc:
         b1:d0:9d:87:a5:ed:b4:b8:1f:a9:77:aa:80:b7:e9:96:01:a6:
         3f:90:f2:ed
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAaDTuq+HHmw44CqEDC/mP5fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTI0MTQwMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTAyMjg3ZGUxZTA4MTNjMTVjZmM5YzdhY2M2NTU1MTUxMWJhOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0VwRoNkOrMHQaMLq8+Zrl89CgYs
Nbtp2B2ROfKjKsu5feOhfHntYhbUJU744t/LFD00HKH0JRzsl4hXCwS60fAFDgru
hgVHNDxr3yLYKuR7HB+Vvs6oiRjMh4zyVZSgDat00F3DU2hrrzQD1hWu7Joqa+L3
t8TSMIwO4bgzhmCdjMwiSkFJZHUs153k07GNbuw0wv75gIKrWJr/FVv6pMDqHtZP
b6xbwNFy2wdOe4brTjMU281JkK/gN960/E7wtif4WGLO4T9YB+96h29iB4jyaQzD
AWIEY6Y0RPrvqFL6V1eqqqklhJAiuGXrE5sgSl3wdHkmTGERXEr0lFJOjQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFP4CKH3h4IE8Fc/Jx6zGVVFRG6lzMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvX2dJb2ZlSGdnVHdWejhuSHJNWlZVVkVicVhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAbULpAwQA
bULsMAwDBAFtQu4DBAFtQvAwDAMEAG1C8wMEAW1C9AMEAG1C+DANBgkqhkiG9w0B
AQsFAAOCAQEAhgEPaW/Fl2mkUtnMNyL7tPByuHpCbj8Up7th5HNiAzdg5Hu8NYaQ
tx6XRfp3E30IXekBFF7E3ygkIx0ryx9s7UbJczz3tlJ2GKq4s8wksGOOJBp4YBeS
vwP+R4lohPCAlmfSXNEOssPphN9T4avrQ5wZUAo89Fz1gYNNOe6fzeCuQiUoOzmj
rjDjtjP2iY6M8TQIbsIWoIggR7XtvMeIaDPxBruCVxRqUiwmaj7hVCWKGNnNPBv1
Y8sJd7MnH+efQtCT4XAkIAwTzMwiUTCy1zWqvpyy/j0P5Ye3nDy5qYXKA6gh9rFV
itjcsdCdh6XttLgfqXeqgLfplgGmP5Dy7Q==
-----END CERTIFICATE-----