Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/oPzqlVtclIS1SF4yLt-sGEys0Rc.roa
File:                     oPzqlVtclIS1SF4yLt-sGEys0Rc.roa (raw, json)
Hash identifier:          e1YYcOS89IG2X1r/k2fMS0Qlsda+NH4z6UJ1+i2AY+4=
Subject key identifier:   A0:FC:EA:95:5B:5C:94:84:B5:48:5E:32:2E:DF:AC:18:4C:AC:D1:17
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019426D999B705A466CC44590C57DC5CDCC4
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/oPzqlVtclIS1SF4yLt-sGEys0Rc.roa
Signing time:             Thu 02 Jan 2025 11:49:42 +0000
ROA not before:           Thu 02 Jan 2025 11:49:42 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     216371
IP address blocks:        94.101.106.0/24 maxlen: 24
                          2a14:7cc0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:99:b7:05:a4:66:cc:44:59:0c:57:dc:5c:dc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Jan  2 11:49:42 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a0fcea955b5c9484b5485e322edfac184cacd117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:af:43:38:6c:85:2b:b6:ec:58:38:c2:02:
                    5c:28:27:bb:6f:c4:16:db:fc:97:59:eb:01:4d:9f:
                    a9:f5:ea:72:cb:75:56:b5:ac:11:e9:a6:3e:c7:25:
                    a6:ee:b6:82:1c:73:f1:86:b9:cd:11:63:7a:8e:13:
                    89:69:4c:d0:cf:84:52:36:86:13:3a:d1:1f:82:4b:
                    66:df:1a:b9:7c:c7:d1:78:5a:48:3f:d1:23:8e:fd:
                    7b:ab:63:c6:76:a4:de:b2:a7:d4:cb:ef:dc:1c:88:
                    32:b8:4d:69:af:39:fb:fb:3b:f3:b3:8f:02:e8:40:
                    9e:09:44:a1:4e:c5:83:85:92:28:43:a8:b0:95:89:
                    8e:d2:9c:89:e9:1b:4a:08:d6:cf:ae:cd:10:70:63:
                    ca:67:16:e3:c8:f8:c8:13:19:a8:20:87:7d:75:0b:
                    ef:a4:15:f5:5a:05:d6:af:94:d6:e9:43:f0:e6:f3:
                    34:a9:c2:42:cd:27:b1:6b:12:1d:2c:dd:72:d1:a2:
                    ab:3e:52:f0:99:43:4f:fa:69:d0:47:aa:fe:22:41:
                    c3:e0:df:05:69:9e:88:8c:93:18:78:c7:37:81:e3:
                    e9:5f:90:a0:45:14:3e:2d:9d:e9:d1:c2:81:2c:d5:
                    96:ac:3e:e8:54:51:ee:66:68:45:24:c5:bd:33:4d:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FC:EA:95:5B:5C:94:84:B5:48:5E:32:2E:DF:AC:18:4C:AC:D1:17
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/oPzqlVtclIS1SF4yLt-sGEys0Rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.101.106.0/24
                IPv6:
                  2a14:7cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:8b:fd:2b:61:a0:59:af:36:fc:47:19:d4:a5:25:9c:f6:0f:
         aa:1b:5c:1c:d3:8d:49:88:b0:b8:fe:58:dd:07:f8:2b:78:6b:
         59:ba:c7:7f:c4:95:63:81:4b:36:c4:69:ee:75:e3:a2:52:a1:
         d8:4e:b5:0c:73:40:1c:58:54:66:f3:cf:ea:11:fc:2e:24:64:
         f0:5a:7a:a0:cd:32:05:02:81:e3:b9:34:df:34:e7:54:2d:c2:
         2d:3d:26:9d:9b:64:a9:73:4d:40:91:e1:4d:16:86:56:8a:a4:
         1a:14:29:1d:fd:a5:74:ca:cd:60:8b:3b:81:d0:a0:d2:7e:c6:
         06:38:db:4e:f5:b9:e2:a5:73:51:58:ce:58:01:00:aa:ac:50:
         2a:eb:9d:82:0f:9b:27:41:b1:dd:84:ff:7e:27:93:70:47:ec:
         df:3e:61:b0:51:9a:78:47:25:f9:96:66:93:99:da:d3:c1:1e:
         30:dc:4c:91:95:d2:86:9c:a6:6e:60:19:71:61:28:36:a3:56:
         9d:56:dc:57:d3:ea:05:fb:c8:70:e0:37:63:d6:97:6a:8b:cc:
         93:e2:e2:7f:ce:40:63:11:8b:ba:88:72:ce:b6:72:44:94:57:
         b9:5c:f3:dd:7b:a1:ab:28:ae:a4:bd:5d:10:2f:9b:ca:db:f4:
         43:9a:61:9b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2Zm3BaRmzERZDFfcXNzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1
YTViMWUwHhcNMjUwMTAyMTE0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGZjZWE5NTViNWM5NDg0YjU0ODVlMzIyZWRmYWMxODRjYWNkMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP2vQzhshSu27Fg4wgJcKCe7b8QW
2/yXWesBTZ+p9epyy3VWtawR6aY+xyWm7raCHHPxhrnNEWN6jhOJaUzQz4RSNoYT
OtEfgktm3xq5fMfReFpIP9Ejjv17q2PGdqTesqfUy+/cHIgyuE1przn7+zvzs48C
6ECeCUShTsWDhZIoQ6iwlYmO0pyJ6RtKCNbPrs0QcGPKZxbjyPjIExmoIId9dQvv
pBX1WgXWr5TW6UPw5vM0qcJCzSexaxIdLN1y0aKrPlLwmUNP+mnQR6r+IkHD4N8F
aZ6IjJMYeMc3gePpX5CgRRQ+LZ3p0cKBLNWWrD7oVFHuZmhFJMW9M00WYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKD86pVbXJSEtUheMi7frBhMrNEXMB8GA1UdIwQY
MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt
ZjllYzU2NjY4NmI5LzEvb1B6cWxWdGNsSVMxU0Y0eUx0LXNHRXlzMFJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5
LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXmVqMA0E
AgACMAcDBQMqFHzAMA0GCSqGSIb3DQEBCwUAA4IBAQA2i/0rYaBZrzb8RxnUpSWc
9g+qG1wc041JiLC4/ljdB/greGtZusd/xJVjgUs2xGnudeOiUqHYTrUMc0AcWFRm
88/qEfwuJGTwWnqgzTIFAoHjuTTfNOdULcItPSadm2Spc01AkeFNFoZWiqQaFCkd
/aV0ys1gizuB0KDSfsYGONtO9bnipXNRWM5YAQCqrFAq652CD5snQbHdhP9+J5Nw
R+zfPmGwUZp4RyX5lmaTmdrTwR4w3EyRldKGnKZuYBlxYSg2o1adVtxX0+oF+8hw
4Ddj1pdqi8yT4uJ/zkBjEYu6iHLOtnJElFe5XPPde6GrKK6kvV0QL5vK2/RDmmGb
-----END CERTIFICATE-----