Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa
File:                     dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (raw, json)
Hash identifier:          5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=
Subject key identifier:   74:9B:E7:3C:36:0F:2E:8E:12:B2:5B:BF:66:69:DF:DA:5C:7F:8E:CE
Certificate issuer:       /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial:       01957D4E53A800A2270ADBE24392EDBF69D3
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa
Signing time:             Sun 09 Mar 2025 23:47:19 +0000
ROA not before:           Sun 09 Mar 2025 23:47:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210414
IP address blocks:        45.93.21.0/24 maxlen: 24
                          2a12:a080::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7d:4e:53:a8:00:a2:27:0a:db:e2:43:92:ed:bf:69:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
        Validity
            Not Before: Mar  9 23:47:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=749be73c360f2e8e12b25bbf6669dfda5c7f8ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a4:9a:8b:ed:99:b3:7f:62:bf:7d:ed:33:6e:
                    ef:2e:f7:82:1d:f4:99:44:3d:a3:9e:78:61:b7:6f:
                    df:05:cd:c7:4e:af:cf:4a:df:18:c2:e5:df:45:6a:
                    55:b3:ee:07:ac:69:c5:00:0f:56:d3:29:a3:98:6e:
                    fe:02:81:20:3b:b6:1f:15:c4:ef:5c:0f:5e:f3:a8:
                    44:35:79:5f:5d:2f:e0:08:e2:36:e1:df:e7:40:9b:
                    8b:32:a5:ee:49:bb:23:f5:77:76:95:fe:11:b3:e3:
                    37:b7:8a:19:60:8e:3c:2b:f0:5e:ee:31:50:7a:a3:
                    43:84:4c:62:bb:36:56:b0:36:0b:e9:49:cf:da:b7:
                    86:08:99:cf:f8:c8:22:22:1c:3d:d0:99:a6:ee:a1:
                    d6:b2:f9:d1:17:24:37:b3:bb:d0:c7:ec:99:40:57:
                    0b:91:4b:4c:e7:f4:f4:08:cd:7f:b1:d2:b5:d8:a0:
                    0f:c1:df:ad:22:41:67:55:31:fd:8b:44:14:f6:45:
                    93:dc:00:e5:09:4f:03:91:e4:2e:eb:9f:f1:87:b0:
                    22:5a:c8:1d:9a:be:1b:b6:b1:2f:3d:ba:86:d0:fd:
                    ed:2e:3b:3a:6d:e8:a4:7c:ce:94:61:0e:0f:50:21:
                    c5:86:ce:0e:25:7a:17:47:03:e0:df:cd:1d:90:1d:
                    e4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:E7:3C:36:0F:2E:8E:12:B2:5B:BF:66:69:DF:DA:5C:7F:8E:CE
            X509v3 Authority Key Identifier:
                keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.21.0/24
                IPv6:
                  2a12:a080::/29

    Signature Algorithm: sha256WithRSAEncryption
         57:be:9d:80:dd:79:49:ff:29:3d:1b:e1:ed:2d:e0:51:62:e4:
         ae:82:65:e3:a8:d0:93:21:8e:e0:b9:e1:6d:3f:dd:9d:12:06:
         00:e7:2d:d0:bb:01:e8:8c:cb:7e:32:2b:ad:6d:f3:c0:4d:05:
         7b:27:b9:34:db:29:41:cb:29:e7:9c:b0:ef:14:da:c7:ac:d8:
         aa:82:b6:0b:3d:ff:4f:60:25:25:f6:17:fb:e0:88:54:cc:d2:
         bb:e8:0d:c7:7d:a3:3e:a0:2d:8c:c6:d8:f9:97:91:7c:f1:36:
         a0:72:5c:e4:3b:0e:f9:88:99:52:c5:5c:20:b0:27:19:30:d4:
         86:79:6a:6f:61:8c:6c:85:db:3a:5a:61:eb:be:b4:59:c1:76:
         f8:96:ca:6d:a7:70:f8:38:c1:14:bc:b8:6e:d0:1f:47:bf:16:
         0e:f2:a7:37:b4:fb:92:61:5c:61:2b:d5:b3:96:72:4c:54:d7:
         db:b9:50:0c:44:f9:e5:ff:ab:a8:da:b0:e1:fc:c5:e8:a3:1d:
         16:7b:04:50:fa:00:1c:25:94:81:84:2d:28:fc:b8:81:d8:19:
         85:f2:3a:80:80:ba:9b:3c:ad:dc:86:86:b7:65:a3:1b:68:99:
         1a:04:1d:5a:e5:dc:2a:24:5f:26:06:84:91:51:0d:89:e8:c4:
         7a:1b:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----