Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/S9qbtdAUS5OfaU_B2u1UbCSFiZ0.roa
File:                     S9qbtdAUS5OfaU_B2u1UbCSFiZ0.roa (raw, json)
Hash identifier:          eEmdVb3l7MEK5WeIVJmjbqGOvgEDqVHX6+L4ltux4Vc=
Subject key identifier:   4B:DA:9B:B5:D0:14:4B:93:9F:69:4F:C1:DA:ED:54:6C:24:85:89:9D
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       019B7835345A6A5C8327BF89B574EB02B994
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/S9qbtdAUS5OfaU_B2u1UbCSFiZ0.roa
Signing time:             Thu 01 Jan 2026 06:18:31 +0000
ROA not before:           Thu 01 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57854
IP address blocks:        91.235.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:34:5a:6a:5c:83:27:bf:89:b5:74:eb:02:b9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: Jan  1 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4bda9bb5d0144b939f694fc1daed546c2485899d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6e:6e:66:be:73:38:c1:1a:82:68:c0:35:6b:
                    58:84:ed:6f:dd:ee:b6:af:27:98:7b:6a:60:d6:7e:
                    4e:fe:05:50:ea:12:f1:4e:e1:a3:50:bd:7c:2e:2e:
                    32:98:91:8b:1c:79:24:b3:7b:9e:fc:28:91:ee:5a:
                    78:5c:29:c0:e9:08:45:5d:89:a6:8f:89:74:c7:a2:
                    45:ac:7d:1f:4d:45:86:bb:2e:9e:d7:1d:01:0c:04:
                    68:72:9b:02:49:cc:bb:7f:c5:6c:62:be:85:a7:24:
                    77:42:8d:26:a7:60:28:88:f1:fd:a9:45:37:08:fe:
                    f0:26:12:ab:30:ea:af:3e:2f:e1:eb:e5:3f:d1:ed:
                    3c:fb:f1:9c:59:bd:d6:dd:30:5f:85:a4:b1:b9:02:
                    9f:84:84:33:cb:23:39:0a:0a:ef:6e:66:86:05:cf:
                    53:d6:8f:18:ec:6c:64:8d:8a:7f:64:f7:78:19:50:
                    75:cd:8d:b9:6d:9e:94:b1:81:bc:d1:cb:70:a0:1e:
                    d0:b3:17:3d:d5:3a:fd:0f:eb:19:4a:dd:80:7f:45:
                    1e:80:dc:ff:a6:c8:7d:99:08:9a:b6:2f:85:88:d0:
                    22:57:ea:74:0a:41:29:a0:c1:fc:fb:ef:87:04:55:
                    47:c2:57:98:9e:61:76:46:f0:ea:bd:33:11:08:83:
                    bc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DA:9B:B5:D0:14:4B:93:9F:69:4F:C1:DA:ED:54:6C:24:85:89:9D
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/S9qbtdAUS5OfaU_B2u1UbCSFiZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.235.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2e:d7:6e:1f:d1:d1:72:96:d1:92:ad:6f:c8:33:9c:1e:d4:
         b1:fd:dc:ea:ca:c1:dd:6c:be:fb:48:28:21:c0:c4:12:b9:e5:
         ed:74:f6:0b:ba:9f:ed:07:5a:8d:88:b4:cc:30:0f:a6:c4:75:
         ba:db:2a:db:f9:48:bc:40:0f:63:8f:a2:48:b2:af:e0:e1:1c:
         f7:95:2d:94:4c:07:b9:bc:4f:08:01:7d:c3:c3:e6:f4:b8:90:
         96:b3:d0:ee:df:fa:63:93:9a:51:a4:46:71:69:8c:8f:e6:b5:
         4a:b9:70:b0:1e:b6:fb:b7:ad:f5:b7:af:43:8d:91:1c:80:ce:
         31:c8:d6:bf:94:3b:ed:5e:b7:fe:53:8a:10:c3:dd:a0:ee:94:
         88:70:c1:50:1b:86:91:c7:78:9a:41:c5:81:b3:15:30:38:da:
         b4:e1:70:b6:17:f5:84:66:75:97:1f:b7:21:dc:5c:c0:36:c5:
         db:92:cc:ce:2a:c2:8a:20:a1:96:0d:52:3b:5a:85:3d:a2:6f:
         33:1f:60:cb:bc:4b:82:1d:60:c8:79:e7:c6:79:3f:a5:6d:92:
         3c:b8:3e:c9:ab:6b:29:82:08:16:2d:43:a8:46:3f:9f:95:f3:
         80:33:93:8e:ea:ca:e1:c0:8b:7a:4b:71:e1:6b:40:19:4b:ed:
         61:af:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----