Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa
File:                     wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa (raw, json)
Hash identifier:          ObHcA7LAdcQDYq1idVsOcejw19rSMMmbaZQaWrP9Dwk=
Subject key identifier:   C0:74:36:9E:F4:F5:2A:FC:59:6E:74:24:1D:4D:84:B0:63:52:3A:35
Certificate issuer:       /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial:       0E740541
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa
Signing time:             Thu 23 Jun 2022 15:22:30 +0000
ROA not before:           Thu 23 Jun 2022 15:22:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48314
IP address blocks:        185.240.242.0/24 maxlen: 24
                          185.240.242.0/23 maxlen: 23
                          185.240.243.0/24 maxlen: 24
                          185.240.241.0/24 maxlen: 24
                          84.252.122.0/24 maxlen: 24
                          84.252.123.0/24 maxlen: 24
                          84.252.120.0/24 maxlen: 24
                          84.252.121.0/24 maxlen: 24
                          185.230.160.0/24 maxlen: 24
                          185.230.163.0/24 maxlen: 24
                          185.230.161.0/24 maxlen: 24
                          185.230.162.0/24 maxlen: 24
                          2a0c:2500::/32 maxlen: 32
                          2a09:6302::/32 maxlen: 32
                          2a09:6301::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242484545 (0xe740541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
        Validity
            Not Before: Jun 23 15:22:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c074369ef4f52afc596e74241d4d84b063523a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9a:b3:88:51:5f:25:6e:c3:86:a1:00:e6:69:
                    d5:bf:37:a2:28:47:07:4b:f8:c0:37:28:3b:0e:44:
                    e6:22:a1:62:70:0f:ed:f5:ef:b2:6f:8f:aa:50:53:
                    b4:8d:d9:a2:3d:6a:4c:6d:51:34:83:04:8a:5e:af:
                    b5:ac:a2:e6:dd:6f:f2:99:58:33:10:d2:ae:64:d4:
                    2b:c2:bf:7e:41:68:eb:99:39:a7:a8:3e:0f:a4:67:
                    30:98:44:33:a8:f4:91:9a:00:68:86:cc:0c:80:8a:
                    9f:87:b7:ea:8c:3b:9d:3f:e8:75:27:ab:79:4f:4e:
                    f2:d1:07:1b:62:37:ca:c6:a6:5c:ee:f2:4c:31:28:
                    ca:7b:e7:88:41:16:96:5e:6e:c1:62:91:d0:6c:af:
                    45:7c:0b:4c:9b:04:3d:f2:2d:9d:78:e2:d7:0d:b1:
                    6e:76:83:5f:fe:9d:f1:ad:49:98:1e:01:e1:88:b0:
                    db:36:68:e6:69:81:80:ec:2a:ee:a1:cb:60:74:c2:
                    be:18:60:75:38:58:9b:37:3a:5f:a3:90:61:33:de:
                    fb:e3:6a:30:c4:8f:13:54:bd:88:69:cf:ce:dc:17:
                    15:bb:71:e6:da:9d:bb:63:bc:0d:fa:ec:66:67:02:
                    3d:c4:89:3d:0d:ab:dd:8f:57:0e:cc:d2:ca:ad:5e:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:74:36:9E:F4:F5:2A:FC:59:6E:74:24:1D:4D:84:B0:63:52:3A:35
            X509v3 Authority Key Identifier:
                keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.252.120.0/22
                  185.230.160.0/22
                  185.240.241.0-185.240.243.255
                IPv6:
                  2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
                  2a0c:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:c4:5e:15:ce:65:dd:df:a7:09:fa:f6:46:68:16:96:89:
         8e:c6:9c:8d:a5:53:7f:dd:73:1c:cc:e7:0e:f0:e8:58:61:25:
         26:89:ac:0e:96:02:c9:0b:c9:8d:fd:2e:7b:38:1e:0b:11:10:
         17:36:dd:65:a6:f9:3d:bf:da:ab:ca:0e:bd:a9:2f:13:76:82:
         92:54:55:c9:7a:63:69:d1:a7:f9:53:a2:ff:89:36:9b:37:f9:
         e8:1c:7c:03:b2:b0:00:3a:28:88:72:b6:2c:70:eb:36:2d:c6:
         b0:a2:10:8d:8e:bd:a3:04:ce:71:76:61:4e:d8:aa:f3:bf:1e:
         51:a8:60:31:22:93:78:ec:71:25:6c:73:68:78:45:bf:9f:47:
         3f:f0:50:ae:c2:d8:6c:ec:52:a8:24:33:4f:e5:bb:dd:89:ee:
         57:80:80:f4:a3:a2:3c:23:89:1b:bf:6c:c0:66:d6:94:4d:8b:
         00:6a:98:91:05:be:16:87:67:78:19:b4:86:c1:71:e9:8b:c9:
         11:d2:05:fd:5a:07:a4:2b:d5:48:a7:fd:22:74:01:0b:f3:a4:
         36:54:40:41:09:d8:36:62:46:01:35:c9:87:1f:00:a0:ef:c4:
         f3:44:9f:2c:b3:70:3f:1d:57:14:67:05:16:98:c9:60:c4:fa:
         a5:a0:bc:82
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEDnQFQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTkyY2IzOWQ0ZjY0NGU0Y2QwYWRmZDI5OTI4MmU1NGMzOTk1MTk1MB4XDTIyMDYy
MzE1MjIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA3NDM2OWVmNGY1
MmFmYzU5NmU3NDI0MWQ0ZDg0YjA2MzUyM2EzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWas4hRXyVuw4ahAOZp1b83oihHB0v4wDcoOw5E5iKhYnAP
7fXvsm+PqlBTtI3Zoj1qTG1RNIMEil6vtayi5t1v8plYMxDSrmTUK8K/fkFo65k5
p6g+D6RnMJhEM6j0kZoAaIbMDICKn4e36ow7nT/odSereU9O8tEHG2I3ysamXO7y
TDEoynvniEEWll5uwWKR0GyvRXwLTJsEPfItnXji1w2xbnaDX/6d8a1JmB4B4Yiw
2zZo5mmBgOwq7qHLYHTCvhhgdThYmzc6X6OQYTPe++NqMMSPE1S9iGnPztwXFbtx
5tqdu2O8DfrsZmcCPcSJPQ2r3Y9XDszSyq1evEcCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBTAdDae9PUq/FludCQdTYSwY1I6NTAfBgNVHSMEGDAWgBTVkss51PZE5M0K
39KZKC5Uw5lRlTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFaTExPZFQyUk9UTkN0X1NtU2d1Vk1PWlVaVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvOTYzMTkyLTliNjAtNGY1Zi04MjFlLTJlNjg2YmM3OWMwZS8x
L3dIUTJudlQxS3Z4WmJuUWtIVTJFc0dOU09qVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
OTYzMTkyLTliNjAtNGY1Zi04MjFlLTJlNjg2YmM3OWMwZS8xLzFaTExPZFQyUk9U
TkN0X1NtU2d1Vk1PWlVaVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwIAQCAAEwGgMEAlT8eAMEArnmoDAMAwQAufDxAwQC
ufDwMB0EAgACMBcwDgMFACoJYwEDBQAqCWMCAwUAKgwlADANBgkqhkiG9w0BAQsF
AAOCAQEAeW/EXhXOZd3fpwn69kZoFpaJjsacjaVTf91zHMznDvDoWGElJomsDpYC
yQvJjf0uezgeCxEQFzbdZab5Pb/aq8oOvakvE3aCklRVyXpjadGn+VOi/4k2mzf5
6Bx8A7KwADooiHK2LHDrNi3GsKIQjY69owTOcXZhTtiq878eUahgMSKTeOxxJWxz
aHhFv59HP/BQrsLYbOxSqCQzT+W73YnuV4CA9KOiPCOJG79swGbWlE2LAGqYkQW+
FodneBm0hsFx6YvJEdIF/VoHpCvVSKf9InQBC/OkNlRAQQnYNmJGATXJhx8AoO/E
80SfLLNwPx1XFGcFFpjJYMT6paC8gg==
-----END CERTIFICATE-----