Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa
File:                     AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (raw, json)
Hash identifier:          jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=
Subject key identifier:   01:75:1D:79:A2:A3:59:1E:9A:3B:68:66:3A:9D:50:A4:06:40:4F:52
Certificate issuer:       /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial:       0194221F6FB5C406FFC91B83C868E6008FB5
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa
Signing time:             Wed 01 Jan 2025 13:47:53 +0000
ROA not before:           Wed 01 Jan 2025 13:47:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35597
IP address blocks:        194.117.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:1f:6f:b5:c4:06:ff:c9:1b:83:c8:68:e6:00:8f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
        Validity
            Not Before: Jan  1 13:47:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=01751d79a2a3591e9a3b68663a9d50a406404f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:c4:3d:6c:58:df:22:0d:07:b4:4f:f8:2b:
                    6b:46:c4:06:af:53:47:a6:40:c5:dc:1c:8c:fc:d4:
                    64:ba:ba:d9:8b:23:b1:8f:d0:05:59:a3:c0:88:3f:
                    f8:d6:05:e9:a8:f5:33:66:7e:99:d7:cf:62:50:c5:
                    30:39:be:00:1e:b4:70:d5:f2:e5:6d:bb:ee:dc:c8:
                    78:40:a0:fa:a5:06:e2:23:53:f6:c2:5c:3e:bb:8c:
                    ed:c8:64:40:16:c9:d2:64:46:f4:eb:8f:56:d0:d8:
                    02:8c:80:a5:d8:d6:a7:77:d9:41:0f:e8:5c:62:b8:
                    95:10:cc:7e:fc:9b:69:d1:10:05:a5:8e:06:66:7e:
                    96:3c:8a:c5:a9:ed:62:32:80:1c:6c:14:18:63:d7:
                    73:c4:fe:a0:c5:db:c5:e6:37:6d:f2:74:7f:38:e5:
                    0b:3d:de:f6:6e:a8:1d:ed:ab:38:f6:1a:d5:29:29:
                    88:50:6e:3f:28:ab:03:99:60:b5:21:ac:ab:9c:a9:
                    2d:ab:40:8b:7f:9d:00:ae:0b:88:e2:93:99:0b:bc:
                    ae:d5:de:98:09:5b:e4:6e:da:60:ed:af:b8:6a:1c:
                    6c:56:9a:d1:e3:56:7a:a9:75:5b:84:d7:d8:0b:2d:
                    df:d8:2a:60:f2:01:ff:e3:60:dc:03:1d:79:79:f1:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:75:1D:79:A2:A3:59:1E:9A:3B:68:66:3A:9D:50:A4:06:40:4F:52
            X509v3 Authority Key Identifier:
                keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.117.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ca:2c:43:b7:02:79:43:6b:81:82:e3:91:ae:4b:fa:84:5c:
         1d:0b:17:b9:6b:4a:b8:fa:9f:d5:29:65:b2:e3:96:45:3d:83:
         34:f8:d9:37:81:43:f5:42:6d:e0:0f:db:c5:63:4d:79:17:2f:
         65:6b:63:0b:82:db:b2:20:8f:63:c7:e2:41:4e:8b:40:ff:5b:
         1e:b9:a4:e3:77:87:c5:42:e1:cd:16:fa:d5:03:5d:0a:0f:7c:
         62:63:ae:29:79:4c:cd:56:d0:8b:86:59:20:49:f2:0a:cc:89:
         f1:6e:6a:6b:e7:34:dc:25:0f:ac:c8:f0:d5:5f:3b:0f:52:84:
         bb:b1:57:31:fe:94:82:1c:a0:b0:1e:a0:ad:1b:14:74:54:48:
         f0:10:bb:91:c8:c4:72:43:f3:4d:f2:16:5f:c8:5b:2f:00:8a:
         0e:cb:14:79:29:a6:3e:04:12:48:24:d7:d7:3e:6e:3e:6f:80:
         c0:7e:a7:95:b6:e3:33:97:9d:55:80:80:eb:4f:51:a3:3e:08:
         d7:99:d0:0c:86:ed:3a:83:b6:81:16:f3:39:78:de:9c:4b:63:
         8d:a5:31:ad:60:9c:74:0f:77:fb:d0:4d:96:18:24:9f:f5:f5:
         32:80:20:65:4f:0a:41:bb:9c:b2:aa:2f:ea:95:16:bc:6b:dd:
         e9:7a:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----