Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/qGeya0gXk3lefb1rAtWCYxucLVU.roa
File:                     qGeya0gXk3lefb1rAtWCYxucLVU.roa (raw, json)
Hash identifier:          ZiFD9y1WchAi6R0j+XTv/ZogMIEXrTeY8kphQnBKVUA=
Subject key identifier:   A8:67:B2:6B:48:17:93:79:5E:7D:BD:6B:02:D5:82:63:1B:9C:2D:55
Certificate issuer:       /CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
Certificate serial:       0194258FBE97EDBA71CE4A1C32849C3529A2
Authority key identifier: 3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/qGeya0gXk3lefb1rAtWCYxucLVU.roa
Signing time:             Thu 02 Jan 2025 05:49:24 +0000
ROA not before:           Thu 02 Jan 2025 05:49:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209327
IP address blocks:        85.209.116.0/22 maxlen: 22
                          2a09:94c0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:be:97:ed:ba:71:ce:4a:1c:32:84:9c:35:29:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec14cc607d1f0283848f9a815dbe675e2339a7e
        Validity
            Not Before: Jan  2 05:49:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a867b26b481793795e7dbd6b02d582631b9c2d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:32:35:2d:d0:30:13:31:13:a9:a5:79:c6:fa:
                    4d:eb:a3:7c:2b:a9:f5:bd:fe:8b:d0:5e:72:56:db:
                    c8:db:d9:47:01:71:f7:a0:05:8f:24:2b:a3:17:24:
                    e4:39:1b:93:ac:79:01:90:b5:2f:50:17:87:e2:72:
                    bb:ca:5f:da:f0:df:8a:0d:3a:d7:45:2b:6c:e1:ee:
                    c0:88:da:96:49:8c:a6:0b:c9:19:af:a6:c7:15:cc:
                    86:13:0c:a4:99:3b:56:19:76:f6:cf:c5:7a:28:df:
                    0f:f2:4e:a0:aa:e2:2c:87:e2:b8:d8:ce:ea:a4:25:
                    98:c9:36:37:81:c5:0f:ba:6d:8c:5e:c9:45:f9:46:
                    b6:c9:59:a9:12:d2:85:a1:d2:9e:ca:58:d3:e4:f9:
                    25:49:d5:7a:2b:87:6f:67:a7:e9:88:85:7f:20:db:
                    ad:c1:60:ce:b5:d0:ad:c3:c3:9a:57:e5:4e:e0:c6:
                    64:17:9d:91:c0:cf:39:f2:2f:e1:e3:6c:a7:01:9b:
                    28:72:ee:06:3e:ee:a8:30:4d:f6:e1:97:bd:3e:82:
                    49:71:0a:7e:c2:d8:11:78:90:ca:1a:dc:4f:26:9a:
                    74:96:8b:3a:51:cb:c1:b0:91:29:df:ff:94:15:9e:
                    a8:69:d5:7d:f0:3e:e0:6c:0a:2b:ac:7b:cc:9b:2c:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:67:B2:6B:48:17:93:79:5E:7D:BD:6B:02:D5:82:63:1B:9C:2D:55
            X509v3 Authority Key Identifier:
                keyid:3E:C1:4C:C6:07:D1:F0:28:38:48:F9:A8:15:DB:E6:75:E2:33:9A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/qGeya0gXk3lefb1rAtWCYxucLVU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/754bd6-fd6a-4dc6-a927-769a0c5eea0d/1/PsFMxgfR8Cg4SPmoFdvmdeIzmn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.116.0/22
                IPv6:
                  2a09:94c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:04:72:67:a5:de:d8:81:ac:34:9f:7d:9a:db:32:a3:b5:92:
         86:a6:b9:4e:a2:d4:b3:ee:e2:42:54:de:7e:ad:95:82:f9:f7:
         17:a5:88:7f:e0:38:19:ca:48:01:f8:a4:93:ad:03:71:09:b4:
         15:8a:36:eb:ae:ee:64:05:04:df:de:34:43:78:9e:ec:11:3f:
         1b:89:0c:4f:61:9d:63:77:37:84:1c:61:88:19:b0:73:6a:66:
         67:c5:7e:5a:88:7a:f9:11:02:7f:a5:d2:50:6a:f7:9b:72:4d:
         cd:0d:8a:38:b2:35:31:0d:44:7c:7f:87:5e:69:ce:0c:f6:19:
         10:47:dd:11:63:e6:88:fd:03:c8:e6:b9:a0:f1:54:82:ab:13:
         73:15:29:f8:82:ef:26:57:3e:47:89:60:6d:49:e4:4f:e8:e5:
         ad:d0:9a:4c:ce:cb:6c:50:cb:c1:b1:84:07:52:c0:a7:29:2a:
         f0:8e:c4:10:b3:ec:fd:c2:81:2d:ab:6d:ec:eb:6a:43:bc:a5:
         a8:33:90:9f:33:34:45:d6:a3:ed:91:b2:c0:62:8c:02:8d:7c:
         ab:74:9c:93:96:b6:d2:cc:2c:9e:bf:53:d2:7d:ad:98:c5:03:
         f0:ce:19:fe:ef:cd:89:36:8f:d2:80:c7:8b:45:0d:e2:cb:11:
         fd:86:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----