Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/7Kmoa0mTT-hmQesiS2Vd310k5jw.roa
File:                     7Kmoa0mTT-hmQesiS2Vd310k5jw.roa (raw, json)
Hash identifier:          USbTJdTp4AkhAgtWaDPdpVWCdumqCodGAPlzgsbWpqI=
Subject key identifier:   EC:A9:A8:6B:49:93:4F:E8:66:41:EB:22:4B:65:5D:DF:5D:24:E6:3C
Certificate issuer:       /CN=f16090c5f6233cbaeaf319dcfae692a956eea102
Certificate serial:       0194221F7EA39308783B16E119EFCAF28B8F
Authority key identifier: F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/7Kmoa0mTT-hmQesiS2Vd310k5jw.roa
Signing time:             Wed 01 Jan 2025 13:47:56 +0000
ROA not before:           Wed 01 Jan 2025 13:47:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210206
IP address blocks:        194.5.4.0/22 maxlen: 24
                          2a0d:7ac0::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:7e:a3:93:08:78:3b:16:e1:19:ef:ca:f2:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16090c5f6233cbaeaf319dcfae692a956eea102
        Validity
            Not Before: Jan  1 13:47:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eca9a86b49934fe86641eb224b655ddf5d24e63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:83:f4:3c:d5:74:a2:03:80:df:24:9e:3c:
                    85:d1:5c:25:c0:4e:eb:52:7a:1c:bd:ce:e8:16:85:
                    38:0a:80:6a:a8:28:82:dc:13:af:6d:9e:1f:31:de:
                    ac:66:66:e8:27:e5:f7:e9:86:fb:55:a5:c0:70:29:
                    54:9a:1c:37:3f:f3:73:da:b1:8c:7e:49:44:3c:e3:
                    49:f4:14:69:6d:00:5f:52:64:10:42:a9:8e:52:db:
                    b0:5c:07:3f:4e:b0:05:b5:77:5b:a6:37:5e:1b:5b:
                    41:cf:9e:8e:6a:bf:4b:fd:0c:9c:ab:77:59:a0:a3:
                    e0:79:98:67:5f:3f:fb:69:ed:de:a0:98:1e:8e:c2:
                    9a:d1:25:a6:07:be:6a:32:cd:e7:81:c0:80:fa:2b:
                    7d:79:60:15:2f:89:c2:8e:86:4f:5c:22:8d:11:79:
                    49:08:2b:99:fd:26:d2:2e:d4:25:5d:c1:d6:77:74:
                    e4:47:c7:a6:81:54:8f:bb:49:e1:4b:b9:c0:84:37:
                    d7:bc:63:51:39:33:88:1d:3a:bd:02:ef:1d:4b:07:
                    bd:72:b7:77:e7:e5:ca:50:bb:d0:87:0d:a6:bf:19:
                    64:ef:17:08:a5:93:68:33:95:29:fb:d7:ae:08:eb:
                    c5:99:ef:fe:de:f2:27:14:50:8a:0b:48:df:4f:aa:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:A8:6B:49:93:4F:E8:66:41:EB:22:4B:65:5D:DF:5D:24:E6:3C
            X509v3 Authority Key Identifier:
                keyid:F1:60:90:C5:F6:23:3C:BA:EA:F3:19:DC:FA:E6:92:A9:56:EE:A1:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WCQxfYjPLrq8xnc-uaSqVbuoQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/7Kmoa0mTT-hmQesiS2Vd310k5jw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cbac08-c11e-4806-a2fd-7c88c4e04f91/1/8WCQxfYjPLrq8xnc-uaSqVbuoQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.5.4.0/22
                IPv6:
                  2a0d:7ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:94:f2:00:40:f1:2d:49:db:8e:da:41:7b:6c:8e:38:14:7d:
         c9:31:b5:94:76:c3:9b:d6:40:24:71:35:15:a1:92:a7:a0:06:
         14:89:68:f1:19:27:de:cd:5a:af:2b:db:46:c5:2e:87:25:8a:
         49:48:e3:e6:55:8d:d2:cb:88:71:70:ff:57:f1:a3:91:72:71:
         b8:c0:46:df:89:8b:e3:7c:00:75:24:71:6c:16:32:5b:c3:03:
         00:4b:92:09:a4:35:a0:36:48:92:30:b2:75:92:63:d8:11:cf:
         05:e9:07:67:6a:e1:5f:f3:79:b4:fe:63:50:4a:4b:b7:58:b5:
         0e:b8:7c:78:6b:ea:71:24:87:a5:e3:4c:f3:3b:3b:1f:16:68:
         ac:57:cc:fe:22:44:e7:02:94:e0:6f:62:de:e2:9f:d6:e8:b4:
         b7:bc:84:5f:23:08:14:9b:bd:c3:43:d7:3c:31:74:fb:cc:2e:
         35:ce:3a:e1:2a:3e:7e:bd:da:f3:fb:c2:df:66:8c:55:b6:2c:
         09:b7:3b:c5:59:d2:9e:23:6a:76:21:b9:00:ab:42:e7:25:58:
         41:ec:a5:30:dd:ee:e6:c2:ed:57:7a:df:53:10:73:ac:e5:9b:
         63:cf:b1:51:c0:ee:80:20:e4:da:67:44:68:3a:da:0f:f3:45:
         06:60:ba:19
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH36jkwh4OxbhGe/K8ouPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNjA5MGM1ZjYyMzNjYmFlYWYzMTlkY2ZhZTY5MmE5NTZl
ZWExMDIwHhcNMjUwMTAxMTM0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E5YTg2YjQ5OTM0ZmU4NjY0MWViMjI0YjY1NWRkZjVkMjRlNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7KD9DzVdKIDgN8knjyF0VwlwE7r
Unocvc7oFoU4CoBqqCiC3BOvbZ4fMd6sZmboJ+X36Yb7VaXAcClUmhw3P/Nz2rGM
fklEPONJ9BRpbQBfUmQQQqmOUtuwXAc/TrAFtXdbpjdeG1tBz56Oar9L/Qycq3dZ
oKPgeZhnXz/7ae3eoJgejsKa0SWmB75qMs3ngcCA+it9eWAVL4nCjoZPXCKNEXlJ
CCuZ/SbSLtQlXcHWd3TkR8emgVSPu0nhS7nAhDfXvGNROTOIHTq9Au8dSwe9crd3
5+XKULvQhw2mvxlk7xcIpZNoM5Up+9euCOvFme/+3vInFFCKC0jfT6ojEQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOypqGtJk0/oZkHrIktlXd9dJOY8MB8GA1UdIwQY
MBaAFPFgkMX2Izy66vMZ3PrmkqlW7qECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQt
N2M4OGM0ZTA0ZjkxLzEvN0ttb2EwbVRULWhtUWVzaVMyVmQzMTBrNWp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jYmFjMDgtYzExZS00ODA2LWEyZmQtN2M4OGM0ZTA0Zjkx
LzEvOFdDUXhmWWpQTHJxOHhuYy11YVNxVmJ1b1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwgUEMA0E
AgACMAcDBQMqDXrAMA0GCSqGSIb3DQEBCwUAA4IBAQATlPIAQPEtSduO2kF7bI44
FH3JMbWUdsOb1kAkcTUVoZKnoAYUiWjxGSfezVqvK9tGxS6HJYpJSOPmVY3Sy4hx
cP9X8aORcnG4wEbfiYvjfAB1JHFsFjJbwwMAS5IJpDWgNkiSMLJ1kmPYEc8F6Qdn
auFf83m0/mNQSku3WLUOuHx4a+pxJIel40zzOzsfFmisV8z+IkTnApTgb2Le4p/W
6LS3vIRfIwgUm73DQ9c8MXT7zC41zjrhKj5+vdrz+8LfZoxVtiwJtzvFWdKeI2p2
IbkAq0LnJVhB7KUw3e7mwu1Xet9TEHOs5Ztjz7FRwO6AIOTaZ0RoOtoP80UGYLoZ
-----END CERTIFICATE-----