Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/QmIQiPDmsbsoo1g3K2tkhAHlK48.roa
File:                     QmIQiPDmsbsoo1g3K2tkhAHlK48.roa (raw, json)
Hash identifier:          K/tNCSsdZLxujOY3Gzu8SSjB4kjNRFAYHP+cCyA0MeM=
Subject key identifier:   42:62:10:88:F0:E6:B1:BB:28:A3:58:37:2B:6B:64:84:01:E5:2B:8F
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       019EDD3CC77913130179B1ADD0191DBD0070
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/QmIQiPDmsbsoo1g3K2tkhAHlK48.roa
Signing time:             Fri 19 Jun 2026 00:16:48 +0000
ROA not before:           Fri 19 Jun 2026 00:16:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135392
IP address blocks:        185.215.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:dd:3c:c7:79:13:13:01:79:b1:ad:d0:19:1d:bd:00:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jun 19 00:16:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=42621088f0e6b1bb28a358372b6b648401e52b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:df:88:53:72:41:5d:53:7c:2b:35:09:bc:d9:
                    43:08:ed:eb:46:29:75:4b:33:61:33:1a:fa:f5:3f:
                    bc:79:77:36:b7:18:3e:73:d7:cc:f1:57:c3:a3:f1:
                    ee:9a:38:08:e0:64:9c:bb:e6:8e:a1:73:30:7c:0e:
                    9d:e2:e1:ab:79:a4:a2:c6:02:83:d8:ab:d5:02:35:
                    ad:35:69:96:2a:53:76:0b:06:79:66:64:ba:72:64:
                    1c:37:16:2c:c8:53:98:7b:34:19:79:a5:42:0d:13:
                    b0:3e:0e:4b:fe:94:61:2f:42:a4:a3:47:7a:9b:38:
                    7c:24:9c:6c:4b:6a:16:b6:57:14:1a:ee:9d:d0:f2:
                    37:af:ee:f1:bc:9e:f2:c5:00:b1:73:ad:78:83:ad:
                    1b:41:19:c5:7f:fb:aa:4c:03:ca:26:a1:93:54:cc:
                    b8:61:24:2d:a9:e1:27:59:9f:61:2e:67:d7:bc:0e:
                    57:1d:d5:72:11:f3:3d:88:72:f1:4b:22:f5:1c:b3:
                    10:63:a0:bf:0d:ab:a4:e2:a7:d2:0c:6b:de:6f:ab:
                    b7:5f:7b:87:21:f0:96:74:6e:7c:f9:6f:b7:b5:15:
                    b3:9e:b3:44:68:9e:b8:96:39:89:53:ca:53:f9:37:
                    ec:cb:be:72:12:ec:5f:b5:9f:9c:c6:48:55:48:e6:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:62:10:88:F0:E6:B1:BB:28:A3:58:37:2B:6B:64:84:01:E5:2B:8F
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/QmIQiPDmsbsoo1g3K2tkhAHlK48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:37:43:d8:32:e4:fb:15:f3:7c:b8:3e:2e:42:9c:ae:0c:9a:
         20:cd:fb:50:42:f2:fb:08:3b:c2:95:7c:71:29:77:d6:34:cf:
         70:f4:c2:e3:d4:f2:01:55:85:18:28:b4:24:3a:16:7b:ca:28:
         87:a2:fc:00:77:53:f0:54:19:d6:b5:10:8a:3a:a3:69:a9:42:
         8b:7f:0f:8c:5a:cc:03:a6:bb:d2:d0:fe:68:b8:1b:cc:38:4d:
         59:d8:c0:43:fa:1c:d5:49:fd:9d:01:a2:fc:e2:8b:7b:30:c6:
         80:58:70:3c:6b:05:58:66:21:6c:7a:f3:aa:f6:71:a9:99:44:
         40:21:90:29:6e:a1:ec:59:14:4c:47:76:0a:22:6d:27:f6:c2:
         02:81:62:a0:ed:dd:22:35:00:51:d5:03:40:fb:9c:61:0d:86:
         6a:3e:a4:31:3b:55:3c:cc:c9:13:ad:d1:12:bb:e6:07:c4:ba:
         1b:75:44:ec:18:e9:60:a5:03:5e:08:37:c4:3c:83:40:8c:27:
         48:76:94:08:f4:15:9c:64:b9:3b:7e:c0:07:1a:2d:14:39:04:
         e3:f3:23:60:c8:3d:9c:36:ea:8b:10:9f:4c:2f:f6:24:c8:90:
         af:67:8b:d8:fb:fa:25:8a:43:9d:6e:73:6d:6c:98:e7:4b:71:
         df:4c:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----