Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa
File:                     ix48MvDGuyMGC7SsCyq5CBbj9_U.roa (raw, json)
Hash identifier:          TdU/FjmcGDmmVtUcG0hSM2P6GM5lo+c3VUYtonFIPUY=
Subject key identifier:   8B:1E:3C:32:F0:C6:BB:23:06:0B:B4:AC:0B:2A:B9:08:16:E3:F7:F5
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       019424B3C51FA6CF74730F1FF71B73C48AAE
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa
Signing time:             Thu 02 Jan 2025 01:49:08 +0000
ROA not before:           Thu 02 Jan 2025 01:49:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204668
IP address blocks:        185.175.8.0/23 maxlen: 23
                          2a0d:180::/31 maxlen: 31

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:c5:1f:a6:cf:74:73:0f:1f:f7:1b:73:c4:8a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jan  2 01:49:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8b1e3c32f0c6bb23060bb4ac0b2ab90816e3f7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:33:64:c4:ba:1d:b8:64:a2:48:e3:f2:d5:
                    da:12:d9:c4:3c:16:c8:1b:62:79:e9:10:82:ed:77:
                    c9:6a:14:36:c9:4c:55:8b:8c:eb:b3:77:44:3c:c5:
                    4e:e8:53:ea:1f:a1:e9:6a:b5:c2:69:a2:58:71:f4:
                    77:c8:14:62:81:40:81:38:6d:2b:f0:47:69:1c:d1:
                    93:b9:77:2b:26:88:a3:fe:b2:61:cc:1f:bd:0d:68:
                    dc:54:4f:14:55:bf:6d:89:f8:e0:27:8c:28:c1:e6:
                    69:9b:45:fd:7f:07:3f:f7:1f:cf:57:f9:cd:50:b8:
                    81:5a:aa:6d:b5:54:be:9b:4c:5e:72:3e:51:ee:4d:
                    7b:1f:68:9a:23:a7:ca:b6:67:a7:6b:c1:bf:0e:53:
                    4f:14:d5:4f:8a:9c:49:f8:98:42:e4:f2:92:1b:fd:
                    e6:72:06:ed:01:0a:c3:49:ea:66:56:ba:5c:a6:93:
                    00:ba:f1:5d:c5:83:d7:aa:c7:81:2b:a9:c9:88:9c:
                    21:a7:b3:84:47:38:1b:78:a5:af:2b:5e:1f:40:56:
                    19:22:7e:7c:53:4d:21:ca:1b:2b:8b:27:6d:31:cd:
                    5c:df:eb:b9:35:ac:60:d9:ab:1c:a1:cb:25:26:f1:
                    84:0b:4b:9c:6d:7f:0b:16:89:da:60:18:b3:55:5c:
                    ee:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1E:3C:32:F0:C6:BB:23:06:0B:B4:AC:0B:2A:B9:08:16:E3:F7:F5
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/ix48MvDGuyMGC7SsCyq5CBbj9_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.8.0/23
                IPv6:
                  2a0d:180::/31

    Signature Algorithm: sha256WithRSAEncryption
         30:67:99:02:98:a8:84:7b:b4:07:b8:17:4d:44:df:d8:69:69:
         d1:c3:36:0b:0c:87:e4:21:1b:24:b7:fc:1d:42:75:96:6a:a1:
         54:07:38:cc:76:86:27:a2:87:98:06:e4:62:85:d1:20:97:31:
         a3:29:86:d9:6c:77:51:4d:4c:08:b7:96:09:82:64:4f:7f:19:
         38:1f:70:d2:ed:a1:86:29:36:04:e2:60:65:2a:9a:56:ec:5d:
         58:0c:58:ee:19:d8:b9:38:89:d4:5e:c0:0e:56:18:f5:2c:47:
         e8:f1:b3:30:4b:c5:44:77:f2:23:bc:49:ca:66:bd:6a:ef:6a:
         f0:2b:9f:6b:a2:ab:09:81:ea:28:8f:cf:86:8a:c4:2b:a4:10:
         3a:07:48:c8:2d:52:11:1f:47:78:97:3a:6b:c1:87:84:33:5f:
         00:43:92:74:7f:6a:45:d8:e9:0e:52:de:ff:1f:c6:91:20:6c:
         0e:cf:41:e7:43:dd:25:0c:84:c3:20:7c:9a:00:4c:de:d5:e5:
         5b:ff:5f:0c:de:f7:06:75:bb:c5:9d:01:69:7e:07:f9:44:b5:
         33:0a:36:44:71:ea:53:bd:cb:49:76:eb:0c:79:4e:a0:d6:06:
         6c:9e:44:5c:20:44:0b:3b:95:82:be:04:94:f1:ef:3d:93:65:
         df:f5:25:0d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks8Ufps90cw8f9xtzxIquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWQ4YjE2MDk5ZDZjZGY4YzNhODExY2E1ODYwZGYwZjZi
YWY2ZGUwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjFlM2MzMmYwYzZiYjIzMDYwYmI0YWMwYjJhYjkwODE2ZTNmN2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbUzZMS6Hbhkokjj8tXaEtnEPBbI
G2J56RCC7XfJahQ2yUxVi4zrs3dEPMVO6FPqH6HparXCaaJYcfR3yBRigUCBOG0r
8EdpHNGTuXcrJoij/rJhzB+9DWjcVE8UVb9tifjgJ4woweZpm0X9fwc/9x/PV/nN
ULiBWqpttVS+m0xecj5R7k17H2iaI6fKtmena8G/DlNPFNVPipxJ+JhC5PKSG/3m
cgbtAQrDSepmVrpcppMAuvFdxYPXqseBK6nJiJwhp7OERzgbeKWvK14fQFYZIn58
U00hyhsriydtMc1c3+u5Naxg2ascocslJvGEC0ucbX8LFonaYBizVVzuYQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIsePDLwxrsjBgu0rAsquQgW4/f1MB8GA1UdIwQY
MBaAFN+tixYJnWzfjDqBHKWGDfD2uvbeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEt
OGJjYTI3Y2IzMGMwLzEvaXg0OE12REd1eU1HQzdTc0N5cTVDQmJqOV9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2Y1NDMtNzRjYi00Mjk4LTgyZTEtOGJjYTI3Y2IzMGMw
LzEvMzYyTEZnbWRiTi1NT29FY3BZWU44UGE2OXQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBua8IMA0E
AgACMAcDBQEqDQGAMA0GCSqGSIb3DQEBCwUAA4IBAQAwZ5kCmKiEe7QHuBdNRN/Y
aWnRwzYLDIfkIRskt/wdQnWWaqFUBzjMdoYnooeYBuRihdEglzGjKYbZbHdRTUwI
t5YJgmRPfxk4H3DS7aGGKTYE4mBlKppW7F1YDFjuGdi5OInUXsAOVhj1LEfo8bMw
S8VEd/IjvEnKZr1q72rwK59roqsJgeooj8+GisQrpBA6B0jILVIRH0d4lzprwYeE
M18AQ5J0f2pF2OkOUt7/H8aRIGwOz0HnQ90lDITDIHyaAEze1eVb/18M3vcGdbvF
nQFpfgf5RLUzCjZEcepTvctJdusMeU6g1gZsnkRcIEQLO5WCvgSU8e89k2Xf9SUN
-----END CERTIFICATE-----