Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/AIlfpG57oaa0IcaTUnoTGn0e-MU.roa
File:                     AIlfpG57oaa0IcaTUnoTGn0e-MU.roa (raw, json)
Hash identifier:          doNG5v78wDg1ZSRUc5huAPyd+QjLPudy5eWVSUSR05g=
Subject key identifier:   00:89:5F:A4:6E:7B:A1:A6:B4:21:C6:93:52:7A:13:1A:7D:1E:F8:C5
Certificate issuer:       /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial:       019421B249807930ED9B696E8544C9733391
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/AIlfpG57oaa0IcaTUnoTGn0e-MU.roa
Signing time:             Wed 01 Jan 2025 11:48:39 +0000
ROA not before:           Wed 01 Jan 2025 11:48:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     15669
IP address blocks:        91.237.102.0/23 maxlen: 23
                          2a03:4ba0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b2:49:80:79:30:ed:9b:69:6e:85:44:c9:73:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
        Validity
            Not Before: Jan  1 11:48:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=00895fa46e7ba1a6b421c693527a131a7d1ef8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:5d:1d:37:c3:ea:44:79:f5:48:a7:41:db:
                    30:00:ee:02:5c:24:a9:ac:ba:c4:21:89:c6:aa:50:
                    23:81:f3:9b:a4:87:18:9d:28:15:ba:75:66:d3:6b:
                    f0:1e:3b:7b:47:00:bb:07:a9:84:e8:c0:27:d1:df:
                    37:c7:05:fa:9a:17:c4:26:ad:39:5e:17:cb:19:13:
                    3e:a7:1c:b4:b6:fc:78:84:ae:6f:89:e0:e1:b9:05:
                    65:24:dd:1a:1f:9f:bc:da:4d:8b:9f:64:7e:51:27:
                    08:f5:17:7d:39:03:33:7a:f7:5b:16:3a:ba:2f:4d:
                    4d:25:47:8d:aa:e2:fe:8b:7c:bf:af:8a:85:c7:70:
                    51:3e:fd:bc:56:00:b7:16:4f:22:99:d6:1f:15:8b:
                    1b:88:56:88:20:ed:8e:6c:6b:5f:fd:aa:38:1f:24:
                    4f:2d:86:8a:a6:fd:40:f6:92:90:f8:ff:75:ee:35:
                    0d:a0:a1:0f:52:7b:72:03:70:f0:31:85:be:cc:c2:
                    e0:9d:1c:41:3d:db:e0:1d:c6:95:a0:84:ed:70:3f:
                    a7:54:32:fb:d1:17:f8:1b:99:fc:81:04:55:b6:6e:
                    a0:af:3e:3e:e2:c6:b7:ca:3e:87:dd:75:00:80:67:
                    f0:13:a2:d3:d3:7d:01:d5:7f:ef:31:be:81:ab:99:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:89:5F:A4:6E:7B:A1:A6:B4:21:C6:93:52:7A:13:1A:7D:1E:F8:C5
            X509v3 Authority Key Identifier:
                keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/AIlfpG57oaa0IcaTUnoTGn0e-MU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.102.0/23
                IPv6:
                  2a03:4ba0::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:25:6a:8f:1d:d9:b7:88:54:7d:1a:24:a7:08:78:81:cb:
         8e:62:99:cf:1d:2c:c8:88:80:39:bf:02:7f:68:b6:15:94:d8:
         cb:69:36:e4:43:57:39:c9:ed:a9:a7:04:b2:e6:62:3e:17:69:
         a6:c9:89:77:5f:b8:19:0f:de:fe:66:ce:88:29:34:7d:40:54:
         2c:b2:0e:57:27:26:e1:a8:4c:1f:e3:34:32:3d:c4:90:d3:eb:
         1a:60:81:e0:a9:54:ad:9f:0f:92:4c:0c:f6:5f:c1:43:e5:31:
         d6:c8:30:c0:90:67:d7:7a:d8:07:8c:fc:3e:7b:ae:7e:b4:2c:
         00:88:2d:1c:3b:71:6c:dc:a3:b3:ec:da:ed:25:8f:3c:93:d0:
         ec:1f:2e:4b:f2:29:4f:16:81:a4:c4:32:e6:b7:11:01:c1:3e:
         8a:a7:cf:b6:ab:82:ae:db:19:a2:c1:1b:b2:4e:b0:3d:bc:35:
         3d:c2:6f:07:ad:50:58:23:37:73:46:ef:6f:7d:d4:ca:1b:90:
         33:51:95:4b:15:e8:04:3a:5d:0a:d9:51:9a:58:ec:6d:e1:ae:
         93:23:cd:b6:33:27:e4:d0:36:a1:b4:13:0b:42:44:ce:7c:f5:
         e0:7b:26:04:41:ca:94:5b:c8:7b:08:80:b2:42:03:05:25:ac:
         a3:84:61:eb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhskmAeTDtm2luhUTJczORMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGE3OTE5YTNlZDdiMTNiNWRhYjM5Yzg2ZTA0YTdhOTcy
MzE0NzMwHhcNMjUwMTAxMTE0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDg5NWZhNDZlN2JhMWE2YjQyMWM2OTM1MjdhMTMxYTdkMWVmOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdZdHTfD6kR59UinQdswAO4CXCSp
rLrEIYnGqlAjgfObpIcYnSgVunVm02vwHjt7RwC7B6mE6MAn0d83xwX6mhfEJq05
XhfLGRM+pxy0tvx4hK5vieDhuQVlJN0aH5+82k2Ln2R+UScI9Rd9OQMzevdbFjq6
L01NJUeNquL+i3y/r4qFx3BRPv28VgC3Fk8imdYfFYsbiFaIIO2ObGtf/ao4HyRP
LYaKpv1A9pKQ+P917jUNoKEPUntyA3DwMYW+zMLgnRxBPdvgHcaVoITtcD+nVDL7
0Rf4G5n8gQRVtm6grz4+4sa3yj6H3XUAgGfwE6LT030B1X/vMb6Bq5maXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFACJX6Rue6GmtCHGk1J6Exp9HvjFMB8GA1UdIwQY
MBaAFP4KeRmj7XsTtdqznIbgSnqXIxRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMt
YmRlMjRhMmE5ZmY1LzEvQUlsZnBHNTdvYWEwSWNhVFVub1RHbjBlLU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMtYmRlMjRhMmE5ZmY1
LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+1mMA8E
AgACMAkDBwAqA0ugAAAwDQYJKoZIhvcNAQELBQADggEBAJi/JWqPHdm3iFR9GiSn
CHiBy45imc8dLMiIgDm/An9othWU2MtpNuRDVznJ7amnBLLmYj4XaabJiXdfuBkP
3v5mzogpNH1AVCyyDlcnJuGoTB/jNDI9xJDT6xpggeCpVK2fD5JMDPZfwUPlMdbI
MMCQZ9d62AeM/D57rn60LACILRw7cWzco7Ps2u0ljzyT0OwfLkvyKU8WgaTEMua3
EQHBPoqnz7argq7bGaLBG7JOsD28NT3CbwetUFgjN3NG72991MobkDNRlUsV6AQ6
XQrZUZpY7G3hrpMjzbYzJ+TQNqG0EwtCRM589eB7JgRBypRbyHsIgLJCAwUlrKOE
Yes=
-----END CERTIFICATE-----