Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/aOoYflX7uJIRHS-Vxicl6-foq_k.roa
File:                     aOoYflX7uJIRHS-Vxicl6-foq_k.roa (raw, json)
Hash identifier:          3rCaBnosnTmAkm/S8jXALmR1BCxmxwNBGtyTjUO3JB4=
Subject key identifier:   68:EA:18:7E:55:FB:B8:92:11:1D:2F:95:C6:27:25:EB:E7:E8:AB:F9
Certificate issuer:       /CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
Certificate serial:       01942521CB7916692AE22217DC53DAAA33B6
Authority key identifier: EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/aOoYflX7uJIRHS-Vxicl6-foq_k.roa
Signing time:             Thu 02 Jan 2025 03:49:19 +0000
ROA not before:           Thu 02 Jan 2025 03:49:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     196901
IP address blocks:        193.106.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:cb:79:16:69:2a:e2:22:17:dc:53:da:aa:33:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a580a4cf64a884190a5b0fb227f309e9040eb
        Validity
            Not Before: Jan  2 03:49:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68ea187e55fbb892111d2f95c62725ebe7e8abf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:18:de:78:50:aa:37:a2:ac:bc:08:cd:a4:
                    cc:51:fe:fa:ce:65:29:2a:8c:42:ec:0a:b7:3b:03:
                    da:9f:1a:a3:6a:27:60:53:5a:e3:b0:ad:a1:6f:5f:
                    5c:31:77:2e:b0:88:a7:bb:8e:42:42:c8:a5:65:2d:
                    d5:94:c9:79:be:35:e5:08:d7:c5:db:7d:4f:d1:5f:
                    ee:f0:93:e1:91:21:4a:99:1d:30:ef:d2:79:4d:54:
                    a2:80:34:a2:d2:f6:cb:02:1a:ce:f1:0e:23:32:3d:
                    91:0c:78:f7:54:b3:4c:c9:4f:e2:c0:c8:d6:e4:b6:
                    be:e6:a1:1e:ed:c1:a4:ff:53:14:1a:e5:f9:3c:bd:
                    e9:be:2b:d2:52:d7:d9:1f:06:00:e1:05:9c:ee:24:
                    0c:b4:66:20:fb:78:97:c2:42:24:3f:08:4e:28:29:
                    f3:50:ae:7d:8b:d4:93:64:16:f2:8f:93:d1:46:a3:
                    01:a1:cb:0f:55:bf:8e:35:b4:cf:6b:a2:7b:65:5a:
                    a3:06:65:94:47:b5:33:1b:6a:00:1a:e2:1f:6b:fe:
                    3a:c1:54:4b:7f:86:b3:04:a5:ef:9a:92:72:50:96:
                    d1:5b:b7:cb:75:41:fa:e4:e1:d5:a9:07:64:e1:9b:
                    29:64:99:73:1a:48:15:dd:16:f8:46:62:0e:94:6f:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EA:18:7E:55:FB:B8:92:11:1D:2F:95:C6:27:25:EB:E7:E8:AB:F9
            X509v3 Authority Key Identifier:
                keyid:EA:9A:58:0A:4C:F6:4A:88:41:90:A5:B0:FB:22:7F:30:9E:90:40:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/aOoYflX7uJIRHS-Vxicl6-foq_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/73d3b2-9bd1-410f-91ec-8074a55250ea/1/6ppYCkz2SohBkKWw-yJ_MJ6QQOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.106.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:05:25:ea:c5:cb:bc:f5:7f:c9:38:b6:ed:a5:97:83:3e:69:
         f1:c7:c4:0a:75:1e:f6:f0:3e:a6:0d:ad:0f:80:aa:57:09:83:
         96:92:02:5a:b7:ae:b8:be:a7:a3:ae:41:86:7a:9a:1c:58:ca:
         6c:81:bc:37:72:43:f1:01:5e:28:84:86:a1:32:3b:75:33:98:
         6e:48:97:0f:be:29:d3:65:04:c9:7a:fc:15:52:1f:f4:a1:fe:
         88:c0:57:d9:4b:13:54:e4:07:8f:02:67:0a:8c:d8:4a:45:f5:
         78:7a:89:1e:3b:52:c5:91:d3:66:ca:3e:ab:f9:10:27:da:3d:
         a2:52:92:6b:56:0c:b8:9e:3b:d5:15:07:ca:ca:17:f4:4d:e9:
         5a:54:0c:bd:ab:9c:f7:a3:61:fa:18:10:3a:a8:73:1b:08:45:
         a2:5e:b1:dd:89:2e:f4:10:b6:c5:82:0c:1c:f3:e1:f4:75:f5:
         ec:43:58:b8:23:88:75:2d:72:da:13:57:f9:bb:49:2b:fb:ce:
         77:4c:4f:99:e5:39:52:bc:82:d6:9e:1f:08:ac:0e:d7:95:43:
         46:a2:8e:08:30:b4:30:55:f6:e3:07:2c:97:02:21:18:8e:67:
         16:8f:63:43:c2:ce:a5:94:e4:9f:6e:39:2a:23:bd:9d:75:b1:
         c3:3b:46:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIct5Fmkq4iIX3FPaqjO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWE1ODBhNGNmNjRhODg0MTkwYTViMGZiMjI3ZjMwOWU5
MDQwZWIwHhcNMjUwMTAyMDM0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OGVhMTg3ZTU1ZmJiODkyMTExZDJmOTVjNjI3MjVlYmU3ZThhYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2sY3nhQqjeirLwIzaTMUf76zmUp
KoxC7Aq3OwPanxqjaidgU1rjsK2hb19cMXcusIinu45CQsilZS3VlMl5vjXlCNfF
231P0V/u8JPhkSFKmR0w79J5TVSigDSi0vbLAhrO8Q4jMj2RDHj3VLNMyU/iwMjW
5La+5qEe7cGk/1MUGuX5PL3pvivSUtfZHwYA4QWc7iQMtGYg+3iXwkIkPwhOKCnz
UK59i9STZBbyj5PRRqMBocsPVb+ONbTPa6J7ZVqjBmWUR7UzG2oAGuIfa/46wVRL
f4azBKXvmpJyUJbRW7fLdUH65OHVqQdk4ZspZJlzGkgV3Rb4RmIOlG9dWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGjqGH5V+7iSER0vlcYnJevn6Kv5MB8GA1UdIwQY
MBaAFOqaWApM9kqIQZClsPsifzCekEDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBwWUNrejJTb2hCa0tXdy15Sl9NSjZRUU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83M2QzYjItOWJkMS00MTBmLTkxZWMt
ODA3NGE1NTI1MGVhLzEvYU9vWWZsWDd1SklSSFMtVnhpY2w2LWZvcV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83M2QzYjItOWJkMS00MTBmLTkxZWMtODA3NGE1NTI1MGVh
LzEvNnBwWUNrejJTb2hCa0tXdy15Sl9NSjZRUU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWrAMA0G
CSqGSIb3DQEBCwUAA4IBAQBMBSXqxcu89X/JOLbtpZeDPmnxx8QKdR728D6mDa0P
gKpXCYOWkgJat664vqejrkGGepocWMpsgbw3ckPxAV4ohIahMjt1M5huSJcPvinT
ZQTJevwVUh/0of6IwFfZSxNU5AePAmcKjNhKRfV4eokeO1LFkdNmyj6r+RAn2j2i
UpJrVgy4njvVFQfKyhf0TelaVAy9q5z3o2H6GBA6qHMbCEWiXrHdiS70ELbFggwc
8+H0dfXsQ1i4I4h1LXLaE1f5u0kr+853TE+Z5TlSvILWnh8IrA7XlUNGoo4IMLQw
VfbjByyXAiEYjmcWj2NDws6llOSfbjkqI72ddbHDO0Zd
-----END CERTIFICATE-----