Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/AuI1_5gu81vs3cIDXIzNbaWND-I.roa
File:                     AuI1_5gu81vs3cIDXIzNbaWND-I.roa (raw, json)
Hash identifier:          lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=
Subject key identifier:   02:E2:35:FF:98:2E:F3:5B:EC:DD:C2:03:5C:8C:CD:6D:A5:8D:0F:E2
Certificate issuer:       /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial:       019425216F9470F865AD82754E1FF907ED82
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/AuI1_5gu81vs3cIDXIzNbaWND-I.roa
Signing time:             Thu 02 Jan 2025 03:48:55 +0000
ROA not before:           Thu 02 Jan 2025 03:48:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207822
IP address blocks:        94.142.128.0/24 maxlen: 24
                          2001:678:b98::/48 maxlen: 48
                          2a0a:f00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:21:6f:94:70:f8:65:ad:82:75:4e:1f:f9:07:ed:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
        Validity
            Not Before: Jan  2 03:48:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=02e235ff982ef35becddc2035c8ccd6da58d0fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:b3:c2:d4:68:93:ad:ce:7b:59:fc:fd:07:
                    e0:88:9c:09:cf:58:9d:21:31:f3:1a:a1:08:d8:42:
                    58:cb:64:5f:6f:f9:a8:27:0c:26:5e:65:df:df:81:
                    4a:f0:a8:52:4b:87:8c:d3:1e:39:58:d6:6b:b2:4b:
                    5b:d2:1f:71:de:9a:42:ab:2a:ad:f3:d4:ed:00:50:
                    b1:8f:c6:2d:7e:fe:c2:0b:aa:7f:e8:0c:5c:1f:28:
                    08:25:5b:d8:93:a2:d5:65:4e:76:2c:72:43:38:07:
                    30:2a:38:f9:a4:11:ee:2b:e9:d8:84:da:ba:90:a3:
                    e2:07:c2:2e:c0:d0:24:be:b6:5a:d7:49:7d:e3:ca:
                    72:3e:9b:21:e2:4c:db:1b:3e:de:f8:01:bf:d6:46:
                    1e:7e:21:57:ed:ce:08:54:ce:d2:48:f0:0d:af:2e:
                    cd:d0:6e:46:f3:9a:b2:27:aa:4e:c1:f3:bd:df:e8:
                    03:b4:e3:24:d7:d0:2c:db:b1:a3:7c:81:9d:69:02:
                    5b:b3:f0:7f:10:55:20:5d:5b:00:93:84:67:d4:6f:
                    dc:4e:5a:20:cf:e8:1f:e5:6a:60:89:51:1e:a3:85:
                    ee:e5:17:18:d4:b0:bb:ad:e7:43:05:3b:21:15:65:
                    95:ae:70:97:14:13:af:01:cb:59:9a:fa:a2:b9:25:
                    0a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E2:35:FF:98:2E:F3:5B:EC:DD:C2:03:5C:8C:CD:6D:A5:8D:0F:E2
            X509v3 Authority Key Identifier:
                keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/AuI1_5gu81vs3cIDXIzNbaWND-I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.128.0/24
                IPv6:
                  2001:678:b98::/48
                  2a0a:f00::/29

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:17:a1:b4:35:38:2b:58:7f:3d:53:0b:22:b6:44:54:a4:
         79:35:88:4e:ad:b8:0d:c2:8d:8e:ce:35:c5:21:7e:25:48:82:
         65:fe:ea:4b:70:89:1c:9a:66:01:cc:7e:b9:5f:17:b2:e1:ef:
         15:39:84:3f:96:71:9e:10:6a:33:b9:91:3d:30:bc:60:d9:86:
         22:b7:a6:3a:b5:11:c5:b9:c9:32:96:48:7d:84:60:15:58:19:
         7a:b2:ef:3f:02:34:18:09:80:f8:0d:14:05:29:8f:2c:0b:5e:
         8b:5c:fd:4a:6d:32:83:db:aa:ca:53:1b:21:56:74:03:66:e0:
         9c:d5:6e:81:3c:73:9d:d6:89:8f:49:9b:59:b6:aa:81:96:4a:
         e1:ab:af:a2:04:1a:66:5a:4f:6d:da:66:25:a5:c5:8e:9a:44:
         29:d5:95:6b:ef:44:46:91:b5:b7:ee:e9:2f:ce:4f:e2:0e:04:
         1f:ef:ac:06:37:0b:f4:fe:c1:ac:90:a4:6b:b2:68:2f:67:ee:
         e8:1c:81:f8:f1:a0:6e:b1:96:3e:ce:d0:b7:90:eb:13:e1:9f:
         35:35:1b:fc:29:39:24:b5:4e:c5:a9:37:1b:48:98:08:d7:be:
         bd:57:94:68:0f:ce:08:67:74:79:85:e7:42:47:1e:96:14:e4:
         80:42:f9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----