Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/SOxZEcdEe4nMHkNYwsHI6OPYza0.roa
File:                     SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (raw, json)
Hash identifier:          thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=
Subject key identifier:   48:EC:59:11:C7:44:7B:89:CC:1E:43:58:C2:C1:C8:E8:E3:D8:CD:AD
Certificate issuer:       /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial:       019420D5C71A2EF0589946E77557F1092657
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/SOxZEcdEe4nMHkNYwsHI6OPYza0.roa
Signing time:             Wed 01 Jan 2025 07:47:48 +0000
ROA not before:           Wed 01 Jan 2025 07:47:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56423
IP address blocks:        185.15.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:c7:1a:2e:f0:58:99:46:e7:75:57:f1:09:26:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
        Validity
            Not Before: Jan  1 07:47:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=48ec5911c7447b89cc1e4358c2c1c8e8e3d8cdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:3e:fd:6e:6c:48:3f:ff:9f:00:26:80:7b:
                    8c:33:c0:0d:50:84:54:8d:87:2c:64:3e:62:b7:9c:
                    09:b6:ce:f0:4e:7f:78:03:55:29:5a:8a:b3:bb:8c:
                    36:6a:58:59:a2:94:3f:68:14:4a:32:2a:f9:24:9b:
                    58:b4:2c:99:dc:34:3c:a9:13:f6:64:6e:ad:52:aa:
                    01:da:fd:4e:10:84:0f:d2:eb:d0:92:c6:b1:1d:c2:
                    0a:c4:7b:4b:29:bc:e0:90:1f:87:dc:a0:15:2a:dc:
                    5d:ca:74:2a:8f:1c:3b:3b:55:36:de:e1:f6:ad:89:
                    e3:02:a1:c7:ed:c3:62:ee:8f:96:fd:e9:bb:61:ad:
                    4d:7b:0b:68:4f:88:d3:80:c0:8d:55:c1:a7:c3:18:
                    2f:02:36:b9:c1:74:d7:98:c7:cd:78:da:d2:54:a2:
                    15:6b:ab:6d:36:b3:06:5d:28:9d:1c:9e:72:73:ec:
                    64:17:14:a6:30:43:51:d9:cc:80:47:91:d3:9f:20:
                    0b:5a:a6:68:6f:b0:d2:36:c3:7a:27:95:6c:9a:e0:
                    14:3a:4b:68:92:43:84:51:38:99:20:9f:79:6d:51:
                    8a:30:89:b2:a5:54:8f:66:f6:05:7c:c2:8f:9c:a2:
                    c5:ba:dc:69:4d:48:f3:a2:9f:64:18:e1:c8:bd:43:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EC:59:11:C7:44:7B:89:CC:1E:43:58:C2:C1:C8:E8:E3:D8:CD:AD
            X509v3 Authority Key Identifier:
                keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/SOxZEcdEe4nMHkNYwsHI6OPYza0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.15.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:ce:a1:3e:e7:78:4d:65:97:50:e3:db:5e:de:cc:7b:ec:
         c7:62:e5:33:76:e8:0f:97:49:eb:c8:e5:04:0d:cb:1e:08:48:
         b4:fb:88:65:15:0b:5b:6e:5b:3d:da:18:b9:17:00:4c:0f:50:
         91:a0:6d:a7:f3:09:05:e1:0b:3d:db:5b:82:17:42:30:9f:4e:
         b4:49:ba:14:f6:8c:aa:55:67:37:56:2d:b0:78:b7:b6:6f:ac:
         07:54:7b:21:a6:8b:1b:66:18:60:0c:cf:e2:e9:29:6f:92:1a:
         03:02:47:df:7b:5b:8d:39:de:2a:35:cc:1c:6c:50:a0:d4:63:
         95:3a:bb:70:35:d3:95:ab:0c:54:86:2d:c9:90:50:88:36:8a:
         3d:15:ad:d9:b6:15:ee:c5:db:26:46:89:d9:8a:1d:2f:e4:67:
         05:2e:1a:9f:17:49:d4:0a:1d:42:a4:5f:28:6a:d6:57:97:0f:
         53:26:4f:65:4f:49:47:3a:52:f0:0f:27:5c:54:6c:cc:16:8e:
         14:db:ef:77:6c:bf:24:4f:aa:a7:5b:35:7a:87:87:6d:bb:b8:
         52:d8:18:16:e8:f3:1c:8b:73:2c:ea:42:ed:a5:04:11:55:c3:
         37:c5:57:47:49:d0:da:21:95:ee:c0:34:ee:da:ac:37:42:58:
         44:87:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----