Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/iNl8zzcvZmRuhD2YQb8-W7H81eQ.roa
File:                     iNl8zzcvZmRuhD2YQb8-W7H81eQ.roa (raw, json)
Hash identifier:          FTzN6CpidpBuW4DXl4df5sOP/k12RBOaqn9tZczA5b0=
Subject key identifier:   88:D9:7C:CF:37:2F:66:64:6E:84:3D:98:41:BF:3E:5B:B1:FC:D5:E4
Certificate issuer:       /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial:       0195ED871D9B1D88629AA4B775BD091DB998
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/iNl8zzcvZmRuhD2YQb8-W7H81eQ.roa
Signing time:             Mon 31 Mar 2025 18:46:49 +0000
ROA not before:           Mon 31 Mar 2025 18:46:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214555
IP address blocks:        212.56.56.0/24 maxlen: 24
                          2a14:7640::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ed:87:1d:9b:1d:88:62:9a:a4:b7:75:bd:09:1d:b9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
        Validity
            Not Before: Mar 31 18:46:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=88d97ccf372f66646e843d9841bf3e5bb1fcd5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:e0:6f:2b:05:4a:70:96:47:56:bd:f8:0b:
                    6e:b5:a6:d4:d3:bc:e5:5d:4a:1f:17:32:af:0d:98:
                    bf:cc:97:27:06:e6:a8:aa:9f:f2:75:0b:69:d2:ef:
                    ef:f4:38:2d:06:23:d4:20:ee:41:17:57:30:8e:31:
                    9a:5b:25:8e:85:23:ed:0e:98:46:1a:59:c9:9b:3d:
                    37:a8:22:e3:30:22:09:c6:e0:06:ee:9e:2f:ec:2a:
                    b3:d1:55:45:0d:14:f4:73:db:08:1a:3b:03:b4:3b:
                    09:a3:94:9c:71:3f:18:fa:97:9e:fa:01:cc:3b:e6:
                    78:97:5b:f1:e0:df:35:4a:35:2e:63:80:b3:12:ec:
                    89:a4:41:3a:84:55:a1:c7:ac:b2:99:5b:e7:74:79:
                    53:29:22:85:13:21:fd:c3:9a:ff:d2:f3:92:5f:aa:
                    32:d9:64:5e:e7:44:31:23:0a:92:99:26:70:6c:0d:
                    a4:13:68:e7:e9:fe:1b:e4:22:05:8f:b7:74:fe:d6:
                    6c:0e:34:dd:72:74:6d:a0:7c:0f:14:ce:04:06:8d:
                    c5:aa:9f:4e:45:c9:05:5a:22:ec:68:9d:38:88:22:
                    7e:86:90:82:c7:15:44:5a:9c:11:23:93:5f:fa:be:
                    15:85:cd:0b:df:58:f2:1c:fa:b4:7a:28:9c:47:2b:
                    71:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D9:7C:CF:37:2F:66:64:6E:84:3D:98:41:BF:3E:5B:B1:FC:D5:E4
            X509v3 Authority Key Identifier:
                keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/iNl8zzcvZmRuhD2YQb8-W7H81eQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.56.56.0/24
                IPv6:
                  2a14:7640::/29

    Signature Algorithm: sha256WithRSAEncryption
         04:c6:b3:cd:34:87:9e:48:b8:dd:3e:82:8f:57:cf:78:f2:43:
         0c:47:27:43:4e:2f:a2:a4:08:6c:41:b5:54:b0:6b:92:21:d4:
         a4:61:5f:39:23:a6:3f:6a:cf:4c:1d:77:09:91:53:46:1d:d0:
         e4:03:81:58:f6:02:2d:29:25:96:e3:5e:e2:c8:62:d8:a0:c8:
         34:d7:91:dd:d7:2d:3e:f9:e2:4b:bd:1f:99:9e:f5:a6:4b:d1:
         38:14:db:51:47:af:61:a2:cd:d7:64:b8:ca:5c:34:27:c6:88:
         8e:e7:14:b2:73:7c:fb:e4:3f:68:4b:41:d5:7b:93:69:b9:3a:
         52:ad:25:74:03:4f:e1:0c:24:86:2e:8d:d4:ad:76:68:e8:27:
         2d:25:4c:d3:7d:a2:91:b9:4f:66:1c:18:dc:47:cf:eb:e4:49:
         37:5b:2e:64:a1:44:44:e3:ae:27:03:6d:49:29:ed:ef:ae:66:
         d3:88:23:b6:47:e2:9f:10:f1:bd:43:e8:01:80:16:5a:a0:6f:
         19:75:f4:10:1d:13:c8:f0:31:48:43:c6:a1:94:d3:ee:a1:5e:
         4b:17:1f:23:bf:2a:4b:bf:0c:3f:3b:7d:89:93:99:e8:d8:92:
         7f:da:c9:12:d7:bd:bd:f1:b7:7d:47:f2:5e:83:ce:e5:2b:15:
         d3:4e:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----