Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa
File:                     j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (raw, json)
Hash identifier:          N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=
Subject key identifier:   8F:6E:99:69:70:C9:E6:EE:7F:B1:76:7D:0D:26:24:3C:41:83:74:18
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       019426D8D4360F077E19D635B00AA5A3B103
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa
Signing time:             Thu 02 Jan 2025 11:48:51 +0000
ROA not before:           Thu 02 Jan 2025 11:48:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60086
IP address blocks:        185.59.0.0/22 maxlen: 22
                          2a02:66a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d8:d4:36:0f:07:7e:19:d6:35:b0:0a:a5:a3:b1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Jan  2 11:48:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8f6e996970c9e6ee7fb1767d0d26243c41837418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:6f:4a:fb:9c:ba:10:df:4c:7f:4a:e0:dc:
                    34:0b:59:51:82:c1:32:68:cd:c0:a7:12:e7:b2:74:
                    d2:ab:f0:f6:bc:9f:b3:f2:d6:44:6b:b2:6c:a8:17:
                    2b:0f:de:b5:ae:38:05:b0:43:e1:2c:a9:61:27:ee:
                    ed:3a:fc:29:fc:c8:ce:4d:a3:a2:0b:48:55:e4:bf:
                    52:6d:4b:29:fa:33:39:0b:57:99:bd:c1:ef:c7:17:
                    49:71:8d:d9:09:21:3f:4f:55:35:74:ba:bc:80:67:
                    3d:24:9e:c6:d9:ed:8e:0f:19:e2:a3:02:a0:2b:46:
                    a4:8a:6c:75:a4:29:d1:00:e3:68:3e:ef:45:d9:89:
                    ca:d3:eb:54:5f:b9:f7:15:3f:9c:f9:d3:da:c0:f2:
                    c3:57:3a:17:64:b0:13:b3:03:dc:20:b9:2b:9c:e6:
                    a7:63:ba:42:02:45:db:7b:fe:bb:e9:37:58:1a:2f:
                    40:0e:f6:41:e5:e9:aa:03:c0:c0:4a:66:d9:c3:d5:
                    70:39:cf:4e:88:cf:73:44:c2:22:aa:0e:2b:12:b5:
                    ed:1f:ed:01:8a:8e:27:23:2d:2f:4b:05:18:a1:99:
                    57:ef:b5:e0:b4:06:52:35:30:da:a1:c1:4b:d7:3f:
                    66:22:1a:29:44:18:19:1e:75:51:7e:8c:63:3e:3e:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6E:99:69:70:C9:E6:EE:7F:B1:76:7D:0D:26:24:3C:41:83:74:18
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.59.0.0/22
                IPv6:
                  2a02:66a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:7c:fa:47:77:e9:4f:b5:b2:34:92:b8:25:f4:eb:6e:ab:
         50:2d:49:cb:f3:5c:32:c0:cc:4f:d4:24:63:93:c0:7c:1e:91:
         86:fd:7a:8a:8b:6f:27:1d:0b:ea:c5:05:e7:7f:25:2c:c3:68:
         9f:a0:13:f2:2e:c0:5b:2f:7e:04:65:7f:c8:eb:6e:0f:0f:34:
         c6:d8:5c:be:24:e3:27:65:8f:22:9e:ad:5f:85:64:c2:f0:89:
         cb:06:24:30:99:07:05:1e:39:45:12:d1:a9:bd:58:4a:ee:3e:
         50:5f:bb:9d:ad:2b:b0:85:0d:02:95:d0:67:82:b1:df:24:2e:
         c2:d7:a7:fc:36:70:52:fc:75:0b:dd:c6:28:7d:86:38:25:01:
         82:91:b6:24:34:2a:a4:10:31:db:7d:e1:ac:fd:32:d3:94:fa:
         05:40:06:11:d5:fa:e7:19:62:4d:83:cc:93:8a:81:96:db:7c:
         50:8b:82:35:ea:d4:d0:6c:2d:b2:da:fc:b6:95:8f:a5:52:ea:
         9c:a6:ab:54:c8:ba:70:6b:4b:f2:f3:ef:86:7d:02:55:84:cd:
         bc:85:17:52:3b:3c:91:68:91:2d:aa:af:3c:80:60:12:82:c1:
         8c:01:a0:77:31:4f:e3:3e:00:69:34:79:cf:c5:1e:01:92:32:
         e9:16:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----