Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/8WMbOpSCq-43yrjp-Gue986sGls.roa
File:                     8WMbOpSCq-43yrjp-Gue986sGls.roa (raw, json)
Hash identifier:          lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=
Subject key identifier:   F1:63:1B:3A:94:82:AB:EE:37:CA:B8:E9:F8:6B:9E:F7:CE:AC:1A:5B
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       019420684B75BB01B96FD13285F0C738E404
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/8WMbOpSCq-43yrjp-Gue986sGls.roa
Signing time:             Wed 01 Jan 2025 05:48:13 +0000
ROA not before:           Wed 01 Jan 2025 05:48:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     201922
IP address blocks:        185.179.35.0/24 maxlen: 24
                          2a02:6c20:3::/48 maxlen: 48
                          2a02:6c20:807::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:4b:75:bb:01:b9:6f:d1:32:85:f0:c7:38:e4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Jan  1 05:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f1631b3a9482abee37cab8e9f86b9ef7ceac1a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e1:6d:d5:7e:a8:de:c6:02:6f:e4:0a:32:24:
                    f7:55:7b:d4:c6:00:38:1d:06:3e:9b:b5:e7:57:42:
                    7e:17:f5:4f:20:b9:6c:9f:99:62:14:75:a2:e4:25:
                    30:85:81:6a:5f:a9:ff:7e:e9:4e:88:45:5e:d2:53:
                    34:90:e2:41:0b:c2:c0:b3:c0:25:93:4e:3b:71:12:
                    7c:d9:8f:11:35:f5:b0:e8:7e:75:3c:52:48:c6:08:
                    79:56:d9:df:5e:78:0a:3b:e7:cc:84:b5:3a:3c:1e:
                    df:7f:57:67:2a:6a:22:a8:4c:f2:d5:3f:60:63:3c:
                    aa:0f:f0:b8:26:3c:cb:2d:70:5b:36:ea:2a:26:35:
                    c8:46:de:dc:10:f4:4c:4c:9c:6a:f2:83:7c:e1:c0:
                    cc:90:21:45:2a:9a:cd:9b:d4:6f:84:5c:ac:d7:eb:
                    b6:8e:6e:89:33:b5:e6:72:2a:35:b8:72:f5:47:72:
                    c0:16:b7:dd:19:ed:64:fe:c9:59:fe:76:93:c5:0b:
                    03:55:c1:9d:41:92:bc:bc:b7:53:d6:8a:2a:be:29:
                    07:6c:47:1a:15:9b:7f:f9:bb:1a:84:87:be:0e:ab:
                    01:b7:fa:42:f8:dd:c6:60:94:1b:a0:25:c0:df:80:
                    55:72:c9:d3:f4:ed:58:c2:16:fa:25:c6:3c:a8:29:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:63:1B:3A:94:82:AB:EE:37:CA:B8:E9:F8:6B:9E:F7:CE:AC:1A:5B
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/8WMbOpSCq-43yrjp-Gue986sGls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.35.0/24
                IPv6:
                  2a02:6c20:3::/48
                  2a02:6c20:807::/48

    Signature Algorithm: sha256WithRSAEncryption
         cf:df:b6:38:68:fe:81:ae:b4:e6:da:6d:de:3b:5a:de:83:05:
         3a:98:f9:1a:06:eb:14:79:62:57:93:a2:a8:d6:a0:88:bd:c9:
         12:0a:07:24:75:92:45:02:1d:7f:74:0d:44:4e:0c:13:85:c9:
         ff:81:cc:6e:50:b3:70:47:ea:9d:4d:bc:cb:b9:10:19:28:93:
         ce:7e:b5:53:45:ca:61:2a:22:db:33:42:f7:c8:6f:98:dc:5c:
         3e:a3:f0:3a:11:bc:66:1b:33:b3:d2:36:a4:42:86:50:d4:1f:
         2a:1f:10:8c:c1:54:c4:07:1e:e2:b4:43:7d:eb:76:d2:8c:18:
         73:c2:2b:24:8c:ec:fd:f4:98:7a:ff:e3:18:8e:71:d5:db:2a:
         69:cf:af:56:d9:e6:24:18:f7:9b:a5:81:57:4f:02:56:76:75:
         18:74:93:59:b2:68:47:39:ef:0e:3d:84:f8:fb:01:24:72:f4:
         07:01:f8:20:d5:99:f9:ee:f2:75:94:73:9b:2b:56:c5:b8:d9:
         95:82:3e:a7:d1:8a:cf:5f:6f:c1:77:28:36:ce:b5:a0:fc:0c:
         de:f4:20:03:00:9f:1f:fa:fc:42:41:e1:33:6a:6d:90:07:53:
         9b:c7:5f:79:69:7a:46:20:e2:32:b9:8e:2a:80:34:13:5c:cc:
         85:01:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----