Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/EG5pUxGfwAIBOHWhSA_u40Ull48.roa
File:                     EG5pUxGfwAIBOHWhSA_u40Ull48.roa (raw, json)
Hash identifier:          j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=
Subject key identifier:   10:6E:69:53:11:9F:C0:02:01:38:75:A1:48:0F:EE:E3:45:25:97:8F
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019427B616295A4629BC37EF4862F5998822
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/EG5pUxGfwAIBOHWhSA_u40Ull48.roa
Signing time:             Thu 02 Jan 2025 15:50:32 +0000
ROA not before:           Thu 02 Jan 2025 15:50:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8767
IP address blocks:        193.28.242.0/24 maxlen: 24
                          2a10:57c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:16:29:5a:46:29:bc:37:ef:48:62:f5:99:88:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Jan  2 15:50:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=106e6953119fc002013875a1480feee34525978f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:79:3a:93:b8:97:a4:98:41:a1:18:c1:17:56:
                    b3:bc:c1:69:11:08:c6:b6:43:08:0a:92:58:d7:71:
                    f7:57:d3:24:da:1f:59:09:91:a4:bd:4c:16:f6:7c:
                    6f:e5:b8:78:5b:2b:31:8a:43:6f:0e:56:b1:fd:1d:
                    ed:a9:6a:62:11:4b:46:2b:e0:76:e5:3d:2b:c3:6d:
                    d5:77:86:b9:b2:04:0d:ac:5f:c2:63:05:3d:3f:fb:
                    45:85:74:5e:e9:89:de:3d:cf:b7:c0:e2:76:01:91:
                    01:7c:4b:a9:49:20:ad:6d:29:d4:1d:27:90:15:62:
                    04:eb:06:53:90:8c:6a:f7:b9:11:f3:df:59:9f:10:
                    c7:7c:cd:6c:a1:f5:3f:5a:71:13:81:00:6a:99:62:
                    d1:8a:d7:83:0a:bf:ed:49:71:9c:7e:30:50:e5:84:
                    15:e2:8b:6a:40:70:60:9e:f5:d8:80:15:a4:55:f5:
                    85:49:63:cc:e2:9a:d3:20:7c:ad:de:54:a4:31:0b:
                    9e:71:07:b8:52:3d:fe:c3:af:bc:52:52:29:83:29:
                    23:b3:d7:5f:e0:87:7a:41:41:be:ca:2d:57:c4:44:
                    02:2a:91:4e:b1:ca:83:9b:2c:34:15:37:e0:79:89:
                    b0:20:aa:30:c0:af:32:e6:38:29:75:ad:b1:01:cb:
                    c6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6E:69:53:11:9F:C0:02:01:38:75:A1:48:0F:EE:E3:45:25:97:8F
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/EG5pUxGfwAIBOHWhSA_u40Ull48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.28.242.0/24
                IPv6:
                  2a10:57c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:fe:1c:fa:5c:27:77:f7:82:91:88:e5:0b:3b:82:c4:e9:37:
         75:13:71:de:ca:d3:c3:20:16:4e:87:29:77:ae:c9:eb:f3:93:
         97:58:35:6c:ef:f5:ef:d7:a0:99:c6:8f:0a:e1:7d:fd:72:e2:
         35:09:18:ba:30:89:8c:5c:ed:83:b3:08:ee:15:9d:7b:ee:c7:
         70:aa:d1:4d:8f:e6:05:1c:22:c9:59:11:a5:23:4e:f5:55:2c:
         c6:10:c5:82:f3:37:38:8f:f6:f1:bd:08:e1:ad:2e:5f:24:14:
         02:aa:fc:96:e1:c5:eb:41:46:e8:eb:28:61:ba:23:3d:2b:e9:
         8e:73:4f:7a:78:fd:e5:2f:8f:5d:26:ad:84:7d:9b:e6:07:0f:
         42:d9:86:a4:8d:44:cc:10:50:21:a0:16:c6:ee:1a:15:11:68:
         7a:65:d0:a3:44:9a:1b:5e:b3:e2:65:a1:5f:82:d1:79:eb:fd:
         45:71:d4:c0:87:be:41:ed:44:be:39:a7:9e:f0:34:01:20:c1:
         36:f0:fb:08:be:03:d0:91:cf:e6:25:ab:52:c6:d0:d7:40:b9:
         4a:4c:fc:a8:61:13:d7:1b:f3:70:92:f4:5b:09:ff:1e:08:fe:
         6a:46:4f:ba:c0:99:6f:3e:51:e0:68:32:2c:0c:63:34:6d:d6:
         dd:e2:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----