Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/W5ixjo4d4_VqPLLjckRxmssp8ls.roa
File:                     W5ixjo4d4_VqPLLjckRxmssp8ls.roa (raw, json)
Hash identifier:          vvdU3N/VJUCyqihrDbaGa0+oyLCXZ3ORuH3hFw6MLuA=
Subject key identifier:   5B:98:B1:8E:8E:1D:E3:F5:6A:3C:B2:E3:72:44:71:9A:CB:29:F2:5B
Certificate issuer:       /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial:       0194236985A6E988501FF137654E7D1ED082
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/W5ixjo4d4_VqPLLjckRxmssp8ls.roa
Signing time:             Wed 01 Jan 2025 19:48:25 +0000
ROA not before:           Wed 01 Jan 2025 19:48:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215877
IP address blocks:        2a10:e300:fff0::/48 maxlen: 48
                          2a10:e300:fff1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:85:a6:e9:88:50:1f:f1:37:65:4e:7d:1e:d0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
        Validity
            Not Before: Jan  1 19:48:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b98b18e8e1de3f56a3cb2e37244719acb29f25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:41:44:f8:de:3a:68:87:89:fa:29:86:3a:
                    06:3c:87:02:31:13:5f:f4:b0:f6:e0:ef:cd:9f:4f:
                    d9:b2:4e:44:f8:2f:2d:07:5e:8a:83:ce:4b:c3:ec:
                    8f:2a:dc:a4:97:38:c8:60:f0:4b:d3:37:94:f9:da:
                    71:38:fc:56:36:bb:ad:6b:02:61:d0:05:98:09:33:
                    28:f6:c2:10:a6:69:c1:a4:68:c1:1f:95:60:ad:23:
                    39:ab:3a:0b:da:8f:8e:51:b4:ff:c0:5b:ea:02:2a:
                    57:09:1a:20:85:fa:7d:6a:19:3f:78:9a:ed:b9:bb:
                    4c:a2:f4:62:fc:4a:8e:0e:c7:43:aa:80:58:a7:18:
                    b3:79:84:5a:3b:55:95:aa:09:1c:e0:f0:d8:3f:6d:
                    f9:90:30:a8:3d:35:ca:1b:80:6a:8e:5e:bb:38:a9:
                    80:40:6a:49:0f:9d:e7:17:b3:32:c9:6a:8e:91:78:
                    ab:0e:d7:ab:e1:96:d1:ad:48:56:a5:57:0d:8b:91:
                    36:06:93:a5:b4:20:14:11:0c:94:84:36:b8:a2:6d:
                    f7:eb:12:0a:ec:1e:de:65:c4:e4:c7:b9:b0:bc:3d:
                    93:c2:8d:43:99:15:dc:08:c8:0f:92:b8:e8:7d:09:
                    59:fa:d0:48:f6:fe:ac:87:76:49:e2:05:67:c1:29:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:B1:8E:8E:1D:E3:F5:6A:3C:B2:E3:72:44:71:9A:CB:29:F2:5B
            X509v3 Authority Key Identifier:
                keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/W5ixjo4d4_VqPLLjckRxmssp8ls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:e300:fff0::/47

    Signature Algorithm: sha256WithRSAEncryption
         2c:d1:5c:fc:7e:77:cb:85:03:ff:60:ff:88:0d:12:a2:be:15:
         2e:4b:06:b5:b6:82:72:f4:19:6e:86:00:4f:8f:a3:7d:6e:86:
         80:72:c5:7f:46:d9:fe:0b:ca:f2:af:40:bb:7c:4a:bf:26:94:
         4c:cb:25:1b:33:bb:79:e4:52:76:1f:d5:b0:ef:87:79:54:be:
         2a:eb:2f:b2:e3:62:8a:ee:1a:ca:54:9f:e6:80:ef:72:9b:45:
         84:39:66:01:7a:ac:30:5a:da:ac:c6:fb:3e:2b:0c:ba:c1:91:
         09:d2:1e:3c:2b:74:01:6f:99:d5:6d:f1:08:d8:4d:84:cf:38:
         dc:db:d1:14:4c:aa:13:29:2b:ed:d7:3b:78:1e:e4:3f:64:17:
         84:7f:b2:20:83:ab:2f:e1:d1:4e:df:24:a6:84:c2:3d:85:4d:
         0c:84:60:a8:44:eb:44:a4:de:77:25:19:df:0c:9d:6d:84:d1:
         8b:57:f8:4e:5e:c3:18:3f:5c:ff:d9:2d:68:19:e5:2d:af:1e:
         3e:fc:0d:dc:3f:a9:da:2d:7c:54:ab:29:c0:f7:0f:e7:ef:c3:
         7e:09:1a:81:36:2d:a4:92:78:e3:3f:e2:ab:89:2d:34:b9:82:
         62:db:52:f8:27:ff:6f:75:3c:f7:1e:9e:5f:a3:56:fb:42:c7:
         c9:ee:01:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjaYWm6YhQH/E3ZU59HtCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjUwMTAxMTk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjk4YjE4ZThlMWRlM2Y1NmEzY2IyZTM3MjQ0NzE5YWNiMjlmMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPtBRPjeOmiHifophjoGPIcCMRNf
9LD24O/Nn0/Zsk5E+C8tB16Kg85Lw+yPKtyklzjIYPBL0zeU+dpxOPxWNrutawJh
0AWYCTMo9sIQpmnBpGjBH5VgrSM5qzoL2o+OUbT/wFvqAipXCRoghfp9ahk/eJrt
ubtMovRi/EqODsdDqoBYpxizeYRaO1WVqgkc4PDYP235kDCoPTXKG4Bqjl67OKmA
QGpJD53nF7MyyWqOkXirDter4ZbRrUhWpVcNi5E2BpOltCAUEQyUhDa4om336xIK
7B7eZcTkx7mwvD2Two1DmRXcCMgPkrjofQlZ+tBI9v6sh3ZJ4gVnwSmpTQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFuYsY6OHeP1ajyy43JEcZrLKfJbMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvVzVpeGpvNGQ0X1ZxUExMamNrUnhtc3NwOGxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhDjAP/w
MA0GCSqGSIb3DQEBCwUAA4IBAQAs0Vz8fnfLhQP/YP+IDRKivhUuSwa1toJy9Blu
hgBPj6N9boaAcsV/Rtn+C8ryr0C7fEq/JpRMyyUbM7t55FJ2H9Ww74d5VL4q6y+y
42KK7hrKVJ/mgO9ym0WEOWYBeqwwWtqsxvs+Kwy6wZEJ0h48K3QBb5nVbfEI2E2E
zzjc29EUTKoTKSvt1zt4HuQ/ZBeEf7Igg6sv4dFO3ySmhMI9hU0MhGCoROtEpN53
JRnfDJ1thNGLV/hOXsMYP1z/2S1oGeUtrx4+/A3cP6naLXxUqynA9w/n78N+CRqB
Ni2kknjjP+KriS00uYJi21L4J/9vdTz3Hp5fo1b7QsfJ7gG5
-----END CERTIFICATE-----