Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/79gW3YAt2XuqijR7nl5mfFtOLk8.roa
File:                     79gW3YAt2XuqijR7nl5mfFtOLk8.roa (raw, json)
Hash identifier:          4986fTnHGnlxMjpLE7ZRIeQ2cNZOfNLwZxbij5ru624=
Subject key identifier:   EF:D8:16:DD:80:2D:D9:7B:AA:8A:34:7B:9E:5E:66:7C:5B:4E:2E:4F
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019515A4978A73564B615682FAC95C213DFC
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/79gW3YAt2XuqijR7nl5mfFtOLk8.roa
Signing time:             Mon 17 Feb 2025 20:41:03 +0000
ROA not before:           Mon 17 Feb 2025 20:41:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197068
IP address blocks:        195.43.92.0/23 maxlen: 24
                          2a03:70c1::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:15:a4:97:8a:73:56:4b:61:56:82:fa:c9:5c:21:3d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Feb 17 20:41:03 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=efd816dd802dd97baa8a347b9e5e667c5b4e2e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:17:26:d5:5f:4e:c4:1b:36:3f:6b:81:f7:
                    bd:07:67:63:ee:e2:7f:c7:0e:8c:19:da:0e:73:e7:
                    0b:7d:9b:2c:32:8f:ad:e2:e6:c3:8f:f1:95:c3:1f:
                    25:e0:1b:09:cf:69:1c:ec:eb:a9:f9:39:31:23:99:
                    5d:0a:c5:f8:3d:e4:a9:9f:32:d1:9f:91:5d:a1:9c:
                    7b:37:b2:8e:ea:1e:d5:be:f4:73:57:33:f6:bb:e4:
                    8f:b5:8d:51:a0:46:5f:61:30:97:f8:f1:7d:c2:12:
                    88:f3:32:d8:37:03:11:aa:a1:f2:29:11:5d:b1:ae:
                    4a:28:63:ba:87:e1:41:9a:41:36:bd:dc:91:82:a9:
                    98:c3:27:da:63:2d:e9:b6:04:c3:02:82:80:ee:b8:
                    65:ea:b7:e0:3d:e4:00:ac:b7:f7:54:20:a2:eb:9b:
                    f2:93:98:d4:27:c5:a8:a2:99:1e:ee:d1:0a:b9:24:
                    3d:05:cb:dd:d2:18:a5:dc:8d:ed:57:b2:81:f6:02:
                    97:8d:c9:7b:d3:ad:75:49:10:ae:9e:a1:a5:82:62:
                    f8:9c:ce:23:69:44:77:ac:7e:60:cf:88:3b:d5:9d:
                    98:a1:88:ee:99:3c:b0:d2:20:1f:1f:f6:72:89:7c:
                    3a:da:f0:b0:fd:0b:3d:71:49:8c:fe:d7:64:a9:a9:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:16:DD:80:2D:D9:7B:AA:8A:34:7B:9E:5E:66:7C:5B:4E:2E:4F
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/79gW3YAt2XuqijR7nl5mfFtOLk8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.43.92.0/23
                IPv6:
                  2a03:70c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:11:8c:8e:82:66:34:d7:66:2d:9a:57:1d:5c:3c:c9:d9:38:
         1d:d1:f8:86:d3:3f:df:1a:b8:4c:86:55:83:fb:a1:1a:3d:e1:
         10:63:d0:4f:ae:79:00:06:16:e8:cb:7f:b9:65:5c:0e:1c:4b:
         de:60:4f:34:58:ce:91:50:28:df:d0:bd:54:52:6e:52:1e:8c:
         b5:d7:71:5d:bb:07:62:d4:f7:a7:51:36:43:2d:a5:2b:3a:9a:
         84:4d:55:01:c1:68:2f:e5:a9:57:e8:da:90:4e:88:2c:a7:31:
         32:a2:8e:49:d5:0e:8f:b8:89:55:55:2a:08:a9:6d:b3:0c:03:
         3a:36:e5:24:04:6a:1b:40:f3:b6:9d:a9:0b:be:15:2a:17:78:
         0e:f4:61:8e:9a:52:36:c3:3b:1e:50:aa:04:1e:39:26:f3:46:
         90:1b:e9:58:b8:4d:93:2a:fd:a5:88:44:bc:68:35:4a:26:d7:
         a4:fb:bc:91:69:ba:de:e9:10:cc:c6:3a:93:3b:14:a2:11:77:
         d1:81:01:37:05:e5:e3:18:c9:a7:0d:bd:a5:c5:e9:99:2c:10:
         7a:d5:90:52:95:1b:98:a1:d4:ce:1f:e3:60:f1:da:af:d1:75:
         b1:d8:5c:6e:cd:d3:ee:51:88:9b:c5:27:57:95:4c:76:31:5a:
         e9:ee:6d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----