Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/PweeKQ13rUGHJC_k0tEblCu-L1Y.roa
File:                     PweeKQ13rUGHJC_k0tEblCu-L1Y.roa (raw, json)
Hash identifier:          zztt4zPJkl+NH2hKKS9RN49WTNDOVklAQ3aZkKqs4SI=
Subject key identifier:   3F:07:9E:29:0D:77:AD:41:87:24:2F:E4:D2:D1:1B:94:2B:BE:2F:56
Certificate issuer:       /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial:       01956228CB12D1F8F466034C3AB3BC66B9B2
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/PweeKQ13rUGHJC_k0tEblCu-L1Y.roa
Signing time:             Tue 04 Mar 2025 17:16:35 +0000
ROA not before:           Tue 04 Mar 2025 17:16:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20912
IP address blocks:        46.102.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:62:28:cb:12:d1:f8:f4:66:03:4c:3a:b3:bc:66:b9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
        Validity
            Not Before: Mar  4 17:16:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=3f079e290d77ad4187242fe4d2d11b942bbe2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:75:07:fe:79:54:0f:13:68:d2:db:35:3f:
                    d7:4a:0d:30:08:77:7b:90:79:0c:84:e4:11:8f:d8:
                    6a:5a:cb:2f:9d:15:40:65:93:dc:b9:10:8a:50:49:
                    30:8d:d3:5d:5d:35:7e:8a:12:a3:06:6c:18:02:dd:
                    2a:3d:c3:fc:dc:38:48:2e:e5:39:af:31:f9:7c:2a:
                    c6:d7:56:11:20:2b:50:d6:35:40:51:73:f1:67:61:
                    d0:f3:23:13:1e:47:a1:8d:39:f5:e7:8d:be:ff:e2:
                    ce:74:91:50:e8:3b:32:7a:eb:98:8a:28:bc:7f:8b:
                    b1:93:d6:62:f4:90:ff:86:50:1f:40:d1:e1:e8:03:
                    70:47:7b:eb:32:a0:3f:75:28:30:ff:66:89:1e:b4:
                    6d:98:0b:2f:36:20:5b:0c:74:fc:62:c2:6e:f3:bd:
                    e5:e1:e9:b7:91:76:36:9a:ea:e4:88:5a:cf:31:43:
                    03:cc:e0:33:db:9e:99:43:63:31:f2:b7:7a:16:3e:
                    a7:e6:23:f2:bb:94:2c:4f:5a:de:97:d1:96:ab:37:
                    fd:6f:f5:ee:6b:e6:2b:9e:6a:f1:d0:a1:15:b9:f1:
                    39:c9:0c:26:1f:da:18:75:a6:3d:27:69:5b:36:0a:
                    5c:9d:30:e6:8a:7c:59:98:cd:9a:b0:08:d2:51:5d:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:07:9E:29:0D:77:AD:41:87:24:2F:E4:D2:D1:1B:94:2B:BE:2F:56
            X509v3 Authority Key Identifier:
                keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/PweeKQ13rUGHJC_k0tEblCu-L1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:de:42:df:8f:b5:07:45:28:39:ba:1c:6f:f6:bc:01:c3:f9:
         7a:ac:41:62:df:67:c1:cc:81:b9:a5:8f:17:80:6b:4a:aa:b2:
         80:89:71:38:8d:74:b5:28:bf:e1:21:31:03:63:fc:94:2a:ac:
         e2:61:06:f4:c5:3f:ee:56:2d:2b:56:2a:81:6a:da:28:c6:65:
         2e:2d:7a:74:eb:3c:98:57:ef:89:a2:ca:83:8d:7d:ec:b0:b7:
         2c:b1:93:16:49:ec:05:33:b9:36:02:98:95:75:3d:41:c4:7f:
         fd:0e:f7:73:45:fb:81:07:62:e8:18:6e:19:62:29:6f:6f:44:
         54:c1:cc:f9:c2:42:01:12:c2:b4:62:63:a4:d8:92:bb:11:21:
         94:92:0e:7a:38:63:3a:ce:ce:a7:22:95:a0:c3:e3:a0:56:03:
         1e:bf:6b:4e:38:ae:e5:d5:9e:6b:40:11:91:a7:fc:3c:9b:ef:
         8c:80:e8:e0:5d:98:01:86:7e:7a:e5:19:68:ff:bb:85:c7:ac:
         a7:d0:42:5f:44:e9:a2:7b:90:5e:96:a4:1a:28:c4:6a:08:c8:
         ec:c9:cf:6c:ce:7b:f0:3e:cf:30:d8:3c:e0:fd:d6:c7:20:08:
         32:35:72:a7:ca:0d:63:b9:81:20:4c:76:c3:22:42:72:7d:ea:
         68:82:f4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----