Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa
File:                     JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (raw, json)
Hash identifier:          K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=
Subject key identifier:   24:DE:05:EA:0A:C5:94:1D:C3:8F:CF:A1:83:5B:85:0D:C3:97:08:41
Certificate issuer:       /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial:       01941FFA5F69D4F928C2B7E437588070BE55
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa
Signing time:             Wed 01 Jan 2025 03:48:09 +0000
ROA not before:           Wed 01 Jan 2025 03:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25166
IP address blocks:        193.201.172.0/24 maxlen: 24
                          2001:67c:16b8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:5f:69:d4:f9:28:c2:b7:e4:37:58:80:70:be:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
        Validity
            Not Before: Jan  1 03:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=24de05ea0ac5941dc38fcfa1835b850dc3970841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:46:6a:ed:53:e5:8b:84:45:ff:79:90:85:bf:
                    79:04:f9:4f:10:96:49:46:14:37:46:b8:94:9e:84:
                    95:5d:87:3a:42:df:a3:42:c3:b0:60:e4:a4:52:2d:
                    99:79:d3:c9:02:62:1e:00:2f:2d:cd:ae:35:3b:f7:
                    54:3c:9f:8c:12:93:26:a8:48:db:82:73:97:af:70:
                    e2:d9:f8:de:99:c2:7e:db:b5:d2:76:04:b7:63:32:
                    b7:22:b0:09:5e:f7:6d:35:c8:93:cf:5b:6e:20:46:
                    e5:88:3f:06:70:1b:c6:a9:ba:85:3d:19:46:86:53:
                    e0:85:25:79:ef:a2:4f:fd:21:3c:bf:7e:25:2e:b8:
                    55:c8:df:82:ed:f0:bd:f3:1f:4f:dd:74:0c:46:28:
                    a1:43:7a:99:94:f3:a5:57:17:3a:ce:79:bf:f8:fb:
                    72:33:4b:05:28:ad:b9:24:20:4b:57:ea:0d:54:92:
                    8d:07:ca:a4:b8:2b:f4:26:9f:19:ad:71:cd:da:d8:
                    29:d1:d9:0c:d5:27:da:9b:8a:ef:3b:aa:df:cf:f5:
                    ff:08:cd:06:cf:a9:ce:c5:4c:f7:a6:78:46:0e:be:
                    ca:a5:6a:61:28:fc:be:97:19:ac:6c:5c:2d:13:d8:
                    b9:7d:47:c4:bb:90:4e:0b:ca:31:68:93:86:6b:93:
                    44:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:05:EA:0A:C5:94:1D:C3:8F:CF:A1:83:5B:85:0D:C3:97:08:41
            X509v3 Authority Key Identifier:
                keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.172.0/24
                IPv6:
                  2001:67c:16b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:67:7a:5d:ab:be:3d:e3:2d:c2:a5:9e:71:db:7f:fb:86:70:
         6c:51:fe:69:ee:66:7d:c1:11:89:a8:0c:54:13:cd:41:cb:0d:
         dd:b0:cd:58:f9:09:cf:4d:22:6e:c7:9b:c3:2c:55:95:a5:7e:
         4e:b2:ae:22:4e:76:57:02:eb:25:d6:c5:d3:6c:35:55:d9:80:
         7c:f1:7e:01:34:15:a8:56:27:ea:32:dd:42:48:19:75:1c:a0:
         1e:0b:78:45:6f:a0:7f:16:bf:2e:69:1e:0f:80:4b:bf:26:85:
         04:de:ef:1e:ee:e6:45:d3:9d:24:d7:f6:5d:fd:b7:68:1f:21:
         a0:bf:38:1c:35:3d:77:bc:54:57:b9:78:43:c5:b7:7e:0c:00:
         7f:bf:df:ac:93:c8:14:bb:85:6d:f1:27:e6:6e:f5:17:6b:52:
         29:da:73:01:cc:fb:31:64:60:5e:b2:cc:cc:5a:95:86:0f:b5:
         a0:0c:0f:d6:b2:ac:26:7f:98:97:10:77:ac:0c:b3:d0:a5:45:
         fd:d0:82:87:5d:23:5a:62:47:bd:e8:cc:c5:cb:2c:bb:88:92:
         4c:9d:02:95:f6:ce:7d:29:bd:92:5f:a7:6c:74:ef:1b:59:4d:
         09:d9:c8:3f:a1:2e:b8:7f:3e:e4:a0:fc:89:e1:1c:9a:98:2a:
         34:de:f7:fa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQf+l9p1PkowrfkN1iAcL5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYTI2YzQwOGZjNjdiNzUyNzM0Y2M5OTdmMzYzMGRiYWY2
ZjYwNmYwHhcNMjUwMTAxMDM0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGRlMDVlYTBhYzU5NDFkYzM4ZmNmYTE4MzViODUwZGMzOTcwODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kZq7VPli4RF/3mQhb95BPlPEJZJ
RhQ3RriUnoSVXYc6Qt+jQsOwYOSkUi2ZedPJAmIeAC8tza41O/dUPJ+MEpMmqEjb
gnOXr3Di2fjemcJ+27XSdgS3YzK3IrAJXvdtNciTz1tuIEbliD8GcBvGqbqFPRlG
hlPghSV576JP/SE8v34lLrhVyN+C7fC98x9P3XQMRiihQ3qZlPOlVxc6znm/+Pty
M0sFKK25JCBLV+oNVJKNB8qkuCv0Jp8ZrXHN2tgp0dkM1Sfam4rvO6rfz/X/CM0G
z6nOxUz3pnhGDr7KpWphKPy+lxmsbFwtE9i5fUfEu5BOC8oxaJOGa5NEGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFCTeBeoKxZQdw4/PoYNbhQ3DlwhBMB8GA1UdIwQY
MBaAFO2ibECPxnt1JzTMmX82MNuvb2BvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTIt
OWQ0YTY2YWIzZmYyLzEvSk40RjZnckZsQjNEajgtaGcxdUZEY09YQ0VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82OTE5YWQtMzNhNS00M2MwLThjYTItOWQ0YTY2YWIzZmYy
LzEvN2FKc1FJX0dlM1VuTk15WmZ6WXcyNjl2WUc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwcmsMA8E
AgACMAkDBwAgAQZ8FrgwDQYJKoZIhvcNAQELBQADggEBAEdnel2rvj3jLcKlnnHb
f/uGcGxR/mnuZn3BEYmoDFQTzUHLDd2wzVj5Cc9NIm7Hm8MsVZWlfk6yriJOdlcC
6yXWxdNsNVXZgHzxfgE0FahWJ+oy3UJIGXUcoB4LeEVvoH8Wvy5pHg+AS78mhQTe
7x7u5kXTnSTX9l39t2gfIaC/OBw1PXe8VFe5eEPFt34MAH+/36yTyBS7hW3xJ+Zu
9RdrUinacwHM+zFkYF6yzMxalYYPtaAMD9ayrCZ/mJcQd6wMs9ClRf3QgoddI1pi
R73ozMXLLLuIkkydApX2zn0pvZJfp2x07xtZTQnZyD+hLrh/PuSg/InhHJqYKjTe
9/o=
-----END CERTIFICATE-----