Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa
File:                     1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (raw, json)
Hash identifier:          WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=
Subject key identifier:   F9:62:8A:81:90:51:66:C2:12:8C:CF:A9:3C:02:AA:F5:93:93:7C:76
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       0194244502C13A4644382A6AE77A388E5DA5
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa
Signing time:             Wed 01 Jan 2025 23:48:10 +0000
ROA not before:           Wed 01 Jan 2025 23:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15995
IP address blocks:        185.97.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:02:c1:3a:46:44:38:2a:6a:e7:7a:38:8e:5d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Jan  1 23:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f9628a81905166c2128ccfa93c02aaf593937c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:ec:e3:85:fa:c8:80:b8:bb:a0:f0:ac:0e:
                    c2:52:f0:5f:ac:39:a9:9a:f4:71:33:02:fe:74:81:
                    a0:85:bc:59:2f:76:6f:a6:af:fe:ca:93:96:75:5c:
                    8f:c5:d0:7d:1e:d2:f9:4e:81:c1:49:b3:19:43:ea:
                    48:dc:2e:cf:f8:34:c9:75:45:49:40:42:7a:bc:c7:
                    32:16:b5:c2:7e:91:aa:9b:d9:db:93:b9:23:83:74:
                    24:1d:20:14:00:59:b0:b2:1a:14:68:78:19:02:3b:
                    ad:cc:bd:da:a6:c3:73:38:72:bc:4d:f4:01:ad:77:
                    64:97:53:0a:2d:04:f4:58:56:68:2c:12:82:9f:74:
                    54:71:c3:5f:5d:ab:9a:8b:2f:09:56:94:d5:69:d9:
                    b6:45:12:2f:0e:0e:5f:9e:f2:68:09:1f:e8:bc:c5:
                    ac:52:8c:7e:e1:93:38:cf:75:b5:2e:75:bd:33:51:
                    b4:46:f9:45:25:54:a3:f4:76:3e:05:7c:49:23:56:
                    d8:64:1f:cd:a4:b6:57:65:d5:fe:5c:c2:37:bf:18:
                    86:05:f0:5e:26:1d:7c:c4:fe:c0:02:0c:7e:8c:78:
                    74:0f:a6:3d:d6:26:5d:2b:24:46:3b:da:ed:88:1a:
                    3e:3f:80:ec:f8:19:dc:df:6d:bb:ff:7e:7e:91:a5:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:8A:81:90:51:66:C2:12:8C:CF:A9:3C:02:AA:F5:93:93:7C:76
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:59:52:1e:44:39:a7:97:a0:d8:f5:9a:e4:c1:67:26:b6:2c:
         af:14:b8:c8:e8:c7:35:d3:31:77:f1:6f:5a:53:34:18:72:b5:
         7c:99:ee:21:41:87:8a:8f:f8:27:8a:38:d9:6a:f9:79:e6:36:
         70:29:b7:6b:91:9e:59:5d:23:03:2e:de:eb:6b:b6:1b:a5:70:
         0a:42:fd:58:2f:fe:31:25:19:35:47:f8:19:1b:0b:40:6a:91:
         3a:90:93:75:1b:53:51:9f:02:7a:5d:c1:e6:b3:2a:21:84:39:
         b0:e6:3b:9d:c6:5a:72:e2:07:b5:d2:7f:f7:0a:20:fb:28:49:
         27:51:24:8f:d2:3a:fe:92:f6:72:ea:b3:56:23:3a:8c:58:0a:
         b6:b8:69:63:96:dc:fc:55:64:89:4e:16:1b:93:53:6b:f3:39:
         7c:22:f7:22:3b:1b:a0:10:a8:4e:e0:af:63:eb:cf:8e:05:51:
         dc:07:4c:7a:45:da:f1:10:a3:62:01:e4:b5:5f:1f:75:8d:4a:
         c9:76:44:a7:c4:02:5f:45:38:0c:fb:0a:75:f0:96:75:ed:14:
         c6:01:f9:55:2e:6f:d0:c6:89:e0:ba:42:ac:3c:1b:1d:46:72:
         4c:18:24:4f:4a:dc:37:12:de:8d:b1:4d:3e:c3:73:72:96:a4:
         1c:4d:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----