Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/IoDHlDbNXO3jlcqfipIcULBON5A.roa
File:                     IoDHlDbNXO3jlcqfipIcULBON5A.roa (raw, json)
Hash identifier:          KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=
Subject key identifier:   22:80:C7:94:36:CD:5C:ED:E3:95:CA:9F:8A:92:1C:50:B0:4E:37:90
Certificate issuer:       /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial:       0194221FDFB6327C641FB61662E6BBA5A3A4
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/IoDHlDbNXO3jlcqfipIcULBON5A.roa
Signing time:             Wed 01 Jan 2025 13:48:21 +0000
ROA not before:           Wed 01 Jan 2025 13:48:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208705
IP address blocks:        193.33.121.0/24 maxlen: 24
                          2a12:6dc0::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:df:b6:32:7c:64:1f:b6:16:62:e6:bb:a5:a3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
        Validity
            Not Before: Jan  1 13:48:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2280c79436cd5cede395ca9f8a921c50b04e3790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:06:ae:e0:c8:16:7b:33:94:57:86:ca:fd:
                    a9:23:ae:3b:9a:87:23:36:7f:49:59:aa:c4:4e:89:
                    8b:47:ae:f8:9a:1d:f6:8b:8a:df:37:09:28:94:71:
                    3d:72:4b:88:14:fc:34:4c:ba:1a:38:9d:b1:d9:10:
                    02:95:d5:0b:3a:bd:0c:00:2f:b6:94:89:4f:2d:37:
                    bc:6d:87:c6:93:da:f9:45:6f:9c:ee:3d:e2:03:4a:
                    3e:07:da:5b:00:6d:70:8e:fc:b1:6c:8d:e1:3d:d4:
                    82:a3:76:22:d7:51:de:8a:16:92:b7:80:e7:ae:3c:
                    b8:cb:c5:b7:81:d9:b8:11:3a:54:a3:34:c9:be:0e:
                    34:2e:bf:48:7e:59:48:87:33:6d:ba:ea:a4:eb:53:
                    79:24:04:72:90:50:5b:73:67:bd:b0:e3:76:ed:57:
                    da:a9:ba:07:ec:df:d4:10:be:b7:4a:2f:a8:00:20:
                    f7:8d:b9:cc:68:e7:88:8b:6e:49:a8:1a:41:ac:fb:
                    97:f1:d9:9b:ff:67:89:0e:30:c1:c2:2c:e3:04:2f:
                    3a:a0:5d:69:3b:67:46:07:0c:c0:94:79:dd:93:5c:
                    bb:da:fb:5e:9b:64:45:05:7e:ff:4c:0b:0c:60:41:
                    ee:3f:50:61:64:75:29:44:fe:15:27:12:32:3c:0b:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:80:C7:94:36:CD:5C:ED:E3:95:CA:9F:8A:92:1C:50:B0:4E:37:90
            X509v3 Authority Key Identifier:
                keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/IoDHlDbNXO3jlcqfipIcULBON5A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.33.121.0/24
                IPv6:
                  2a12:6dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:1d:31:7c:10:56:6b:b0:29:64:f1:cd:57:57:7d:64:bf:65:
         2b:9a:64:f7:ab:77:ab:86:8a:d5:73:ab:f3:1b:98:58:a5:87:
         2a:01:2c:67:8d:c3:95:b5:b5:1e:91:e7:01:cc:af:8f:e7:2a:
         ff:17:60:2f:c0:78:e2:17:3c:10:c3:25:00:35:9f:f2:f9:30:
         1e:54:7b:73:66:7a:d5:37:8f:d6:31:60:a7:c9:c6:08:0c:e9:
         45:a6:d6:b1:dc:89:0c:9e:29:99:fa:55:52:0e:e3:de:ac:27:
         c8:f4:e8:ae:9e:5e:ec:e6:f9:96:f6:cc:cd:7f:23:5c:21:fe:
         e3:e2:e8:4f:3c:6f:d8:21:9d:7d:52:e7:66:8f:2f:91:7d:4f:
         b6:ac:7c:c2:e7:73:3a:57:be:c4:87:21:31:e7:1a:67:2b:4a:
         60:2d:99:04:94:d1:cb:78:36:ce:9c:6d:02:ee:a9:39:1c:28:
         ef:91:bb:0b:2d:b4:e5:92:fd:b9:0b:a8:0a:17:b8:f4:fc:50:
         5a:64:c3:04:0a:80:71:0c:08:d6:ea:bc:9b:6e:bc:73:2a:b8:
         43:7c:83:e1:bc:a1:4e:4b:9a:d4:eb:15:ab:c7:91:77:64:c5:
         a9:0e:b5:ec:b9:67:8f:c4:2d:0a:79:a6:08:06:95:11:51:55:
         7d:8e:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----