Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/glEOdXhVW21eI1WzkfhB7HXgdWk.roa
File:                     glEOdXhVW21eI1WzkfhB7HXgdWk.roa (raw, json)
Hash identifier:          NB7punoyXRSMYamA4JNNL+eHLxMEHb1wLp8lwyoauNo=
Subject key identifier:   82:51:0E:75:78:55:5B:6D:5E:23:55:B3:91:F8:41:EC:75:E0:75:69
Certificate issuer:       /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial:       019576239B7764407C8FB2C5189D4345BD1F
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/glEOdXhVW21eI1WzkfhB7HXgdWk.roa
Signing time:             Sat 08 Mar 2025 14:23:19 +0000
ROA not before:           Sat 08 Mar 2025 14:23:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49972
IP address blocks:        185.44.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:76:23:9b:77:64:40:7c:8f:b2:c5:18:9d:43:45:bd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
        Validity
            Not Before: Mar  8 14:23:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=82510e7578555b6d5e2355b391f841ec75e07569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:d6:7d:1e:ae:12:cc:f9:be:b1:22:75:ab:
                    8e:29:f4:71:db:eb:3b:07:c0:d1:5b:f8:c9:a0:d7:
                    d9:ad:3e:13:a1:f6:cc:b8:c4:79:75:d7:ca:81:24:
                    a9:18:9f:5b:a2:0e:c5:ca:70:74:2e:ed:e9:91:cb:
                    f1:e0:a4:d4:66:66:ef:81:e3:91:c7:32:ce:39:b1:
                    a4:b1:10:3b:c9:61:35:c7:dd:5b:1e:17:84:94:a3:
                    03:e5:2a:22:11:24:16:67:3d:66:e5:85:22:b2:96:
                    99:5d:1e:7c:0e:d0:fc:19:59:d3:4b:d8:9e:05:7f:
                    84:ab:c0:d1:c7:03:5f:d8:22:d9:30:20:47:21:17:
                    ec:05:18:26:43:14:0e:90:71:02:20:39:a5:3e:24:
                    b3:36:5e:f5:91:f7:18:a3:7c:31:56:c6:a3:1a:ab:
                    92:03:74:7c:9b:b1:aa:bc:1b:a6:ff:28:9b:1a:16:
                    76:19:15:f7:ff:b3:ef:a5:b3:0e:32:d3:d3:c3:c4:
                    fc:7e:dd:65:c6:94:11:c9:4c:dc:27:e5:00:76:95:
                    0b:40:35:d8:d8:29:12:ff:b5:0a:d6:b3:62:f1:7b:
                    b1:c1:38:e7:4d:46:6e:30:97:1a:db:f7:9f:ae:d2:
                    7e:2a:1a:2a:9a:66:00:3b:a6:fe:35:e5:1c:87:2c:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:0E:75:78:55:5B:6D:5E:23:55:B3:91:F8:41:EC:75:E0:75:69
            X509v3 Authority Key Identifier:
                keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/glEOdXhVW21eI1WzkfhB7HXgdWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:ca:a3:7e:98:0a:83:fb:00:d9:89:c2:b3:fc:5c:85:9a:f5:
         ac:07:b0:72:0f:71:a0:d2:4c:20:39:68:56:e7:ec:2f:66:82:
         b0:ab:fa:c6:a0:dd:c5:52:13:7d:73:96:28:58:aa:fb:68:f7:
         aa:9b:03:0a:cc:1f:f3:44:eb:24:e1:77:b4:61:70:e4:9f:6c:
         fb:1b:1b:6d:54:0a:1e:2e:8e:b2:99:37:69:6e:c2:d6:7e:63:
         db:f3:27:11:b9:db:54:89:dc:b7:7b:1b:fb:fa:bd:ae:14:ea:
         5e:69:c8:8f:5c:47:54:58:df:41:32:ae:20:aa:d7:5c:b6:e1:
         8b:eb:74:e3:18:d1:3b:c7:05:2b:be:97:9e:c3:f3:f9:a2:75:
         82:73:3f:74:18:78:2e:1f:f5:56:15:95:d6:e8:00:68:e1:38:
         50:44:2a:cd:57:d2:6f:19:3f:37:61:2e:e6:9c:a6:94:62:fe:
         41:c2:49:5a:3a:a3:1b:ba:36:7e:56:c6:76:69:55:b3:d3:4e:
         81:0e:97:bc:30:15:49:fc:3b:fb:ff:80:57:5d:a1:ba:c2:d6:
         97:1c:2f:89:1e:a6:8a:4a:6b:4a:81:39:3e:06:fe:06:fa:00:
         f7:72:d6:5e:d8:ee:94:ce:69:d5:4b:dc:48:82:22:3d:a2:25:
         5c:b1:c8:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZV2I5t3ZEB8j7LFGJ1DRb0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NDc4NTc5MWUwNzY0NmY1Y2M1OGIxNWU4NjQzNGNiOWMy
NDE0OWQwHhcNMjUwMzA4MTQyMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjUxMGU3NTc4NTU1YjZkNWUyMzU1YjM5MWY4NDFlYzc1ZTA3NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3anWfR6uEsz5vrEidauOKfRx2+s7
B8DRW/jJoNfZrT4TofbMuMR5ddfKgSSpGJ9bog7FynB0Lu3pkcvx4KTUZmbvgeOR
xzLOObGksRA7yWE1x91bHheElKMD5SoiESQWZz1m5YUispaZXR58DtD8GVnTS9ie
BX+Eq8DRxwNf2CLZMCBHIRfsBRgmQxQOkHECIDmlPiSzNl71kfcYo3wxVsajGquS
A3R8m7GqvBum/yibGhZ2GRX3/7PvpbMOMtPTw8T8ft1lxpQRyUzcJ+UAdpULQDXY
2CkS/7UK1rNi8XuxwTjnTUZuMJca2/efrtJ+KhoqmmYAO6b+NeUchyxnFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJRDnV4VVttXiNVs5H4Qex14HVpMB8GA1UdIwQY
MBaAFLhHhXkeB2RvXMWLFehkNMucJBSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmIt
MGRjMzNhY2MxZGJhLzEvZ2xFT2RYaFZXMjFlSTFXemtmaEI3SFhnZFdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kZjgxMDUtMThlZS00MTcyLWI2YmItMGRjMzNhY2MxZGJh
LzEvdUVlRmVSNEhaRzljeFlzVjZHUTB5NXdrRkowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSwkMA0G
CSqGSIb3DQEBCwUAA4IBAQCByqN+mAqD+wDZicKz/FyFmvWsB7ByD3Gg0kwgOWhW
5+wvZoKwq/rGoN3FUhN9c5YoWKr7aPeqmwMKzB/zROsk4Xe0YXDkn2z7GxttVAoe
Lo6ymTdpbsLWfmPb8ycRudtUidy3exv7+r2uFOpeaciPXEdUWN9BMq4gqtdctuGL
63TjGNE7xwUrvpeew/P5onWCcz90GHguH/VWFZXW6ABo4ThQRCrNV9JvGT83YS7m
nKaUYv5BwklaOqMbujZ+VsZ2aVWz006BDpe8MBVJ/Dv7/4BXXaG6wtaXHC+JHqaK
SmtKgTk+Bv4G+gD3ctZe2O6UzmnVS9xIgiI9oiVcsciV
-----END CERTIFICATE-----