Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/RJUXqZbym2ishJcHOLCYIF0YjN0.roa
File:                     RJUXqZbym2ishJcHOLCYIF0YjN0.roa (raw, json)
Hash identifier:          mDH4mu8jxseWgzZZaCZaysAEEMBUpOt419o1jwjwG7Q=
Subject key identifier:   44:95:17:A9:96:F2:9B:68:AC:84:97:07:38:B0:98:20:5D:18:8C:DD
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       01941FFA6E1765941B51CEFF20C49F609B6A
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/RJUXqZbym2ishJcHOLCYIF0YjN0.roa
Signing time:             Wed 01 Jan 2025 03:48:13 +0000
ROA not before:           Wed 01 Jan 2025 03:48:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     209240
IP address blocks:        92.119.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:6e:17:65:94:1b:51:ce:ff:20:c4:9f:60:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: Jan  1 03:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=449517a996f29b68ac84970738b098205d188cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:02:b3:ab:b5:1d:b1:74:23:c9:51:9a:a9:19:
                    4e:2e:cb:2f:b8:64:83:8d:d8:29:61:b5:b4:0b:da:
                    31:1b:f6:62:7b:04:ca:05:e6:50:f9:bf:fb:2c:29:
                    82:51:f0:e5:33:49:85:85:3a:11:77:47:df:b9:9f:
                    3c:13:c7:9f:ea:80:04:e7:12:fe:12:8b:74:83:25:
                    24:f4:5f:d3:d8:12:f1:16:fb:c2:3f:8f:67:ff:f6:
                    7c:92:ab:9d:c7:99:47:d9:d3:83:74:85:9f:31:20:
                    55:f1:30:6b:00:76:a1:c8:d1:d7:36:4e:2c:0f:65:
                    98:a6:53:81:f1:86:e4:94:f8:a0:23:c6:51:11:77:
                    5f:55:7d:28:22:fa:02:2c:9d:6d:99:4d:74:d3:c6:
                    5a:f0:dd:b9:28:de:18:06:62:c7:1a:36:e5:87:c4:
                    76:b5:e2:47:79:67:1b:4f:ee:f6:72:f5:81:4c:3d:
                    07:d7:ae:77:a4:14:06:bf:48:29:ec:cd:77:43:13:
                    ac:87:a1:12:b6:b6:21:d1:b3:ef:d6:96:1d:44:ed:
                    44:65:cf:d2:f9:22:e7:f4:28:68:08:a0:f2:84:a3:
                    34:3d:0b:e1:d8:4a:60:76:e9:f1:e8:02:00:70:05:
                    22:eb:63:cc:3a:8d:3b:f4:7c:0e:98:f8:f7:16:40:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:95:17:A9:96:F2:9B:68:AC:84:97:07:38:B0:98:20:5D:18:8C:DD
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/RJUXqZbym2ishJcHOLCYIF0YjN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:3f:65:1e:97:0b:76:9c:da:91:f9:1d:98:bc:d1:3c:62:50:
         7f:6d:bf:38:e2:57:e8:1c:74:7f:be:b6:05:9b:f4:9c:6e:96:
         74:31:69:b1:b4:ae:c0:f4:72:4b:8c:bc:be:73:87:66:2d:32:
         da:7d:0c:92:b5:ad:18:77:75:a0:6a:dc:63:c1:c2:9e:cb:21:
         79:b6:87:a5:bb:48:30:82:d3:6c:cd:f0:6f:91:e8:35:b7:34:
         b6:72:95:db:15:0a:ab:82:bc:7c:22:b0:c4:d6:55:ad:94:61:
         ac:30:f3:11:08:f5:a2:0b:9e:29:13:45:e1:4f:c7:da:2f:29:
         c0:43:c4:95:47:e1:46:7d:6c:fc:48:df:bc:b0:a1:ca:b5:fe:
         ca:a4:87:7e:f4:a8:71:08:36:f9:b6:b7:c2:b3:d3:7c:4b:1e:
         18:77:53:66:12:e5:34:e3:e2:e6:c8:fb:22:73:79:59:c1:c2:
         bb:30:15:83:4b:2d:82:7b:5b:97:9e:f8:f8:3d:5d:99:15:0a:
         13:a8:95:a1:54:87:6a:8c:47:fb:9c:5b:d5:b6:a9:58:ed:3d:
         3e:12:3b:db:56:77:ca:60:ed:51:95:c1:38:a5:f9:ff:c4:61:
         ab:10:72:4c:2e:85:28:49:1d:0a:76:76:ec:06:40:1a:bd:0e:
         08:0d:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----