Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa
File:                     cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (raw, json)
Hash identifier:          pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=
Subject key identifier:   71:78:90:6F:4C:DC:03:40:8B:BF:0D:EA:8E:BD:D9:D7:8B:EF:A9:5C
Certificate issuer:       /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial:       019422FC2405A2C61DBAEFC93EBDBD4D94DA
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa
Signing time:             Wed 01 Jan 2025 17:48:57 +0000
ROA not before:           Wed 01 Jan 2025 17:48:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     29691
IP address blocks:        203.56.112.0/23 maxlen: 23
                          2a14:3e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:fc:24:05:a2:c6:1d:ba:ef:c9:3e:bd:bd:4d:94:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
        Validity
            Not Before: Jan  1 17:48:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7178906f4cdc03408bbf0dea8ebdd9d78befa95c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:bf:c3:ab:ec:29:97:ad:ba:3e:97:da:ed:
                    8a:64:6d:73:1a:cd:e0:10:6f:1d:79:7f:0d:10:f3:
                    69:76:f4:cd:09:78:54:34:19:68:a0:7e:f5:78:0d:
                    1c:7b:02:f0:98:7a:89:c4:59:3d:76:de:d8:68:24:
                    b7:f0:fb:59:01:be:33:5b:05:75:2d:54:79:e2:b6:
                    a7:b6:0b:ef:35:f2:c6:18:86:b3:16:82:bb:f2:f5:
                    d0:c7:55:bc:a3:33:bf:04:75:90:9e:d0:82:d6:e5:
                    06:34:9f:ac:33:7f:4c:b1:ee:46:2d:60:1d:02:2a:
                    72:2c:19:1c:67:23:a1:ab:76:c8:4d:47:e3:2e:2d:
                    74:6a:2c:72:3d:72:b1:a8:5d:f9:09:5d:ab:05:cf:
                    55:64:73:7e:08:81:0c:6a:47:4d:ee:ec:16:23:52:
                    a9:b2:d4:95:61:6e:c7:58:8a:e0:33:15:9b:55:46:
                    b3:a6:e8:14:7a:c2:a4:c2:c4:cd:b1:ab:7b:48:23:
                    6d:30:b2:c5:6e:87:2c:ff:6c:e2:58:65:7c:4b:d9:
                    5f:c6:c5:e8:62:72:60:ad:e4:55:fa:7e:0f:96:c7:
                    20:66:c0:6c:9f:ad:6e:c8:d4:3f:cc:9d:2e:a6:26:
                    4a:91:ec:ed:30:25:ac:f4:88:c4:1e:b4:c2:51:7d:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:90:6F:4C:DC:03:40:8B:BF:0D:EA:8E:BD:D9:D7:8B:EF:A9:5C
            X509v3 Authority Key Identifier:
                keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.112.0/23
                IPv6:
                  2a14:3e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:dc:ce:d4:cc:3d:47:c2:d9:61:32:0b:b5:1f:14:e0:99:
         fe:47:82:6e:ce:2d:08:77:2e:3d:f4:9d:48:47:4f:08:86:a7:
         02:42:d1:49:b6:dd:a6:e3:0d:19:da:f6:54:fd:a0:a0:aa:fb:
         33:e0:f1:f2:f2:97:93:15:ff:ab:e4:75:2b:e2:b9:c1:c6:92:
         cd:3e:fd:01:1e:41:cb:69:ad:73:92:51:02:70:64:9d:a9:ec:
         eb:d7:f2:3c:58:8b:43:18:66:ee:39:1c:bf:3d:7f:d8:d6:c9:
         93:c0:4e:95:53:c2:b5:62:3c:20:73:10:7c:9e:1d:c4:59:38:
         c8:18:57:2b:3a:dd:6a:b6:ef:5e:97:bb:ee:08:8a:ae:b0:d4:
         b2:3c:36:de:3a:93:46:0a:c6:16:7e:a1:a3:a5:b1:0b:53:93:
         4d:75:40:60:6b:b8:d3:3f:4f:89:94:86:18:21:6d:e3:a3:44:
         71:09:1d:39:fa:e1:12:6a:41:c3:6d:92:4e:14:51:07:8b:e0:
         0a:0e:ed:f3:23:19:ec:f4:e9:9d:a8:6c:dc:38:0c:08:ff:4c:
         85:1f:ac:6f:d5:cb:e1:b5:1b:22:8c:e1:70:fb:fb:90:f0:a3:
         d8:a0:b0:ed:0b:5a:b7:1c:c0:43:15:a6:b8:80:5f:16:27:0b:
         a3:e8:fe:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----