Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/5uh-8NvfQB_oZowhRUdfu_0v2fA.roa
File:                     5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (raw, json)
Hash identifier:          gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=
Subject key identifier:   E6:E8:7E:F0:DB:DF:40:1F:E8:66:8C:21:45:47:5F:BB:FD:2F:D9:F0
Certificate issuer:       /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial:       019425FC90F20B400EAA5DF011D8461BC88F
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/5uh-8NvfQB_oZowhRUdfu_0v2fA.roa
Signing time:             Thu 02 Jan 2025 07:48:16 +0000
ROA not before:           Thu 02 Jan 2025 07:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     56438
IP address blocks:        185.216.9.0/24 maxlen: 24
                          2a00:d700::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fc:90:f2:0b:40:0e:aa:5d:f0:11:d8:46:1b:c8:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
        Validity
            Not Before: Jan  2 07:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e6e87ef0dbdf401fe8668c2145475fbbfd2fd9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:19:ea:4d:0f:e4:19:7c:2d:8c:b0:b5:88:
                    6f:cb:fe:c2:e7:d2:64:0e:3b:d0:54:09:a7:73:ab:
                    dc:83:90:73:89:8c:00:4b:e3:8b:a6:f0:84:c8:f2:
                    ab:21:e5:b2:22:c6:60:e4:05:ed:32:ea:b5:58:ff:
                    36:03:44:15:73:54:58:78:b7:f4:79:e2:d9:7a:bb:
                    62:60:70:50:31:9b:b5:da:bf:ad:16:e0:22:ae:d7:
                    08:4b:26:07:4c:ea:f0:79:20:bc:7f:de:73:a9:48:
                    0b:a1:32:e7:10:b8:51:f1:73:aa:41:0b:d0:d8:e2:
                    13:36:8c:fe:4c:4b:36:0a:78:17:39:bd:16:4e:f9:
                    e4:b8:73:c4:40:8b:e9:1c:cb:54:2b:1d:1e:07:05:
                    a7:dd:bd:40:b5:19:ce:8c:68:94:8c:b2:d8:c4:cf:
                    98:28:89:b3:88:ca:d1:d2:2b:a4:30:a3:b7:e1:f7:
                    73:4d:ba:95:68:60:2b:00:51:ac:c7:c8:4d:07:e7:
                    70:97:cf:28:eb:aa:e7:c0:6a:55:e8:ae:c5:6a:c4:
                    f1:a8:2e:ef:3b:b2:bb:1d:3d:41:d9:60:46:a4:64:
                    77:14:76:b6:ff:c1:d9:ac:dd:26:67:a1:42:21:ff:
                    b6:b1:5c:bf:43:07:bc:61:fe:24:e8:f9:7c:69:1b:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E8:7E:F0:DB:DF:40:1F:E8:66:8C:21:45:47:5F:BB:FD:2F:D9:F0
            X509v3 Authority Key Identifier:
                keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/5uh-8NvfQB_oZowhRUdfu_0v2fA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.9.0/24
                IPv6:
                  2a00:d700::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:88:12:ed:b0:98:32:f5:51:bc:2d:c3:6b:3d:2f:b7:1c:83:
         b7:5f:e0:70:08:39:8e:64:56:32:fd:f2:58:5f:43:d4:81:03:
         41:06:3d:22:57:fc:a0:14:5b:d8:85:96:ad:78:e2:48:5e:8d:
         0f:17:5a:88:a4:73:e1:96:0e:bd:87:07:07:66:e9:31:a7:2f:
         61:d6:65:97:74:2c:de:d0:f6:27:47:ac:3f:6e:b5:bc:93:78:
         14:1b:5f:37:da:c5:1a:8e:fc:08:f3:fc:25:de:2a:08:88:7f:
         17:21:62:ec:91:6c:e0:51:91:3a:0a:54:e5:6c:3b:4b:20:b4:
         46:24:ff:72:7b:54:6f:52:bb:e6:c9:0e:42:cc:f3:5b:97:51:
         c7:f7:56:d9:c7:4c:71:a9:c8:0e:0c:1d:8d:60:26:ce:98:93:
         49:e9:22:ae:27:7f:68:d1:6d:55:fb:ed:a7:c2:47:f6:99:be:
         f1:6f:4b:3f:4d:31:83:5d:b0:28:9b:6e:7d:2a:6d:13:3c:60:
         c4:8a:e1:8c:95:ae:79:fa:83:f5:7a:e2:c5:82:7d:95:4d:4a:
         52:14:ca:9d:aa:ce:a1:86:ae:fb:ea:38:f5:7a:60:d7:59:de:
         f6:9d:b6:67:ff:d2:42:0e:30:42:7a:2b:2f:9c:0a:80:7d:d4:
         e9:f9:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----