Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa
File:                     1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (raw, json)
Hash identifier:          jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=
Subject key identifier:   F8:6A:7E:02:3E:AB:5D:49:77:AC:27:1F:4C:45:7F:CC:A5:FC:D4:63
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       019425FD7D5376E3BF5C0D68F052C92BC3F1
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa
Signing time:             Thu 02 Jan 2025 07:49:17 +0000
ROA not before:           Thu 02 Jan 2025 07:49:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204731
IP address blocks:        185.241.224.0/22 maxlen: 23
                          2a0c:b380::/29 maxlen: 29
                          2a0c:b381::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:fd:7d:53:76:e3:bf:5c:0d:68:f0:52:c9:2b:c3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Jan  2 07:49:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f86a7e023eab5d4977ac271f4c457fcca5fcd463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:22:0b:3a:54:78:0f:fe:36:8c:60:95:37:
                    a5:ea:81:06:7a:5e:26:c2:39:88:d2:3f:8c:d1:6b:
                    e2:da:8a:bb:8a:4a:62:c7:94:64:a7:79:99:38:ec:
                    17:f6:83:5d:ea:9a:53:fb:3b:27:8f:65:a7:2d:63:
                    28:5a:8c:a0:74:9c:e5:54:cc:ec:cc:d3:13:16:1c:
                    d1:14:c0:f9:4f:6c:3c:0f:0f:5d:0b:92:44:56:4d:
                    21:59:2d:c6:27:2c:05:26:52:f9:07:c6:e3:eb:f0:
                    48:a9:95:c8:c8:6f:79:f3:75:c0:f9:15:fa:3d:e7:
                    08:a4:84:27:bb:ad:a4:57:7b:99:36:73:5b:fe:af:
                    66:81:f3:0c:f4:f4:5f:c9:50:00:08:a4:98:2f:c6:
                    90:99:2f:a2:55:17:7e:f0:fc:89:31:cb:93:13:08:
                    c6:27:4f:9d:2d:6d:51:1c:7e:8b:1d:f5:d8:58:c7:
                    8f:b6:e9:f0:42:3b:1b:dc:a9:84:7c:d9:28:8c:42:
                    10:30:96:c2:8c:4f:d4:97:e5:41:2a:f8:94:30:93:
                    d9:dc:95:9b:12:1e:2f:f3:07:38:ba:68:5f:8c:6d:
                    a8:49:4b:68:26:fa:23:50:4f:8e:6c:fb:06:f7:00:
                    2c:a8:35:98:6f:f6:9c:2b:74:67:b9:c2:88:ea:da:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6A:7E:02:3E:AB:5D:49:77:AC:27:1F:4C:45:7F:CC:A5:FC:D4:63
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.224.0/22
                IPv6:
                  2a0c:b380::/29

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:02:6a:c6:51:cb:fb:f5:b6:8d:b9:9c:1f:55:65:0a:af:
         3e:40:f6:8a:46:71:7d:a6:d0:a5:63:50:1b:27:50:31:ca:94:
         2b:46:db:7d:21:0f:a6:8d:de:a8:63:41:e6:50:98:31:bf:a3:
         9e:50:0a:a6:6e:e7:c2:ea:40:b0:ac:0f:ea:6d:41:d4:56:27:
         c6:2b:68:59:c6:c9:81:a5:f9:f8:f5:cb:96:42:df:24:45:17:
         d1:50:b1:8a:7d:78:18:91:a4:80:66:36:d4:05:d6:12:5c:14:
         c3:ef:3c:fb:2a:fa:8f:83:d2:60:2e:e0:18:d6:da:f5:fc:56:
         d5:b5:83:1d:de:c7:9f:f9:c5:a5:c0:b6:25:09:36:f0:c1:d4:
         a4:07:69:14:eb:65:15:2c:c8:65:42:47:9d:b9:ab:e2:90:b2:
         7f:bc:ab:6c:5e:20:26:be:8f:5b:4e:03:e5:08:9c:10:d2:58:
         61:91:33:27:56:8f:c6:48:39:7d:6d:d7:54:55:c6:59:ca:7e:
         6f:fb:ef:4e:7e:1e:49:a8:e8:92:ee:07:dc:7b:58:ff:51:36:
         cc:d7:5c:8a:bc:d8:bb:59:80:6c:66:4a:98:b6:82:03:e5:64:
         8f:1d:4c:fb:2c:6a:24:17:55:ae:85:d2:c5:1e:8c:d3:14:4d:
         fc:fc:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----