Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa
File:                     QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (raw, json)
Hash identifier:          MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=
Subject key identifier:   40:4D:0D:A2:9E:A1:1F:E4:5E:64:CD:A8:50:9A:FA:75:64:F1:87:EA
Certificate issuer:       /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial:       019421440756EDC3D4D9CDD3950B11E1EF7C
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa
Signing time:             Wed 01 Jan 2025 09:48:13 +0000
ROA not before:           Wed 01 Jan 2025 09:48:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35775
IP address blocks:        194.88.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:44:07:56:ed:c3:d4:d9:cd:d3:95:0b:11:e1:ef:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
        Validity
            Not Before: Jan  1 09:48:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=404d0da29ea11fe45e64cda8509afa7564f187ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:83:61:63:86:86:1d:38:9f:08:40:17:ef:ff:
                    b8:d3:62:9b:3c:c3:6e:3d:e4:77:44:cb:3b:86:bf:
                    48:fa:c5:3f:10:d1:33:dd:ae:f9:1f:80:d9:9b:cf:
                    95:64:1a:8d:00:c3:ae:e3:17:0c:27:1a:1c:72:ed:
                    c5:50:d6:2d:09:49:19:11:1d:2c:9e:3b:de:bd:bb:
                    ce:11:03:cc:45:d3:cb:b3:52:4e:d1:fb:3d:4c:b0:
                    74:0b:fe:48:53:3f:1d:8d:7a:89:49:9d:24:5a:6e:
                    2e:8a:44:f4:41:6f:b4:37:77:5b:41:a0:76:fd:56:
                    98:a9:a9:7a:fa:8a:7f:73:0d:56:18:e9:f3:e3:fd:
                    e5:e7:27:5c:b9:ee:3a:d6:56:af:fb:0d:9f:20:3a:
                    1f:65:f2:cb:12:96:cd:6f:85:6e:cb:e5:9d:b2:a7:
                    c2:a0:9b:d3:57:a1:0b:d6:71:5e:0d:ca:80:81:de:
                    c9:27:33:8c:62:bc:92:ba:4c:e8:53:14:c2:72:be:
                    7c:ec:df:af:52:24:5e:9b:5e:c3:73:08:cf:8d:ea:
                    55:b7:3d:3f:d6:c0:13:15:65:b4:29:a2:e3:c4:b4:
                    d0:1d:b9:a3:17:07:fa:fc:7d:c7:0f:42:89:d0:f9:
                    8c:f9:2b:da:eb:3a:f7:25:ed:bd:da:6e:00:37:75:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4D:0D:A2:9E:A1:1F:E4:5E:64:CD:A8:50:9A:FA:75:64:F1:87:EA
            X509v3 Authority Key Identifier:
                keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.88.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:56:e0:5c:e2:23:5d:c0:ab:53:76:2c:d8:6c:0e:c5:42:
         16:f1:0a:c6:af:95:b9:9d:3a:61:e9:4e:e7:44:17:ef:f9:5e:
         a9:9c:63:7b:89:4f:57:ac:32:6c:fd:13:32:b0:1c:c1:05:7f:
         b3:05:ab:b9:d7:2b:c5:39:59:26:d1:1c:cd:bd:74:02:c4:94:
         48:71:4d:7e:25:96:78:89:d6:58:16:b4:a8:b5:c2:0a:e1:e7:
         1a:48:31:15:02:eb:2a:07:d3:66:a7:da:d8:6c:02:fe:69:6e:
         64:88:0d:de:11:c3:da:df:df:73:d5:9d:ae:b1:6e:d4:81:51:
         c8:9e:98:52:12:bd:46:d3:ba:3c:b4:ec:e8:1c:51:9e:c7:6d:
         53:a1:aa:e0:99:b3:09:2f:a8:a7:64:c5:51:24:66:4a:b8:5c:
         77:76:43:53:d9:19:69:ad:42:4c:2c:ed:67:1b:bd:e8:4c:0f:
         a2:e6:6b:18:f9:f5:db:a6:c1:3e:76:05:f4:b5:b8:7b:94:af:
         85:80:12:00:11:71:af:10:22:4c:6d:bc:fc:f8:a4:18:60:fd:
         92:d4:0a:be:c5:8d:53:62:bb:dd:3f:b4:a7:f1:72:e4:a8:46:
         fe:93:db:d0:bc:d3:bd:c6:0c:fb:91:c0:c2:fc:50:10:f0:65:
         e1:8e:be:75
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQhRAdW7cPU2c3TlQsR4e98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTIwZjdkM2EyY2M5NWQ5ZGU2ZjRlMzM0Y2I0YjY3OTIy
ZTcwZjUwHhcNMjUwMTAxMDk0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDRkMGRhMjllYTExZmU0NWU2NGNkYTg1MDlhZmE3NTY0ZjE4N2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oNhY4aGHTifCEAX7/+402KbPMNu
PeR3RMs7hr9I+sU/ENEz3a75H4DZm8+VZBqNAMOu4xcMJxoccu3FUNYtCUkZER0s
njvevbvOEQPMRdPLs1JO0fs9TLB0C/5IUz8djXqJSZ0kWm4uikT0QW+0N3dbQaB2
/VaYqal6+op/cw1WGOnz4/3l5ydcue461lav+w2fIDofZfLLEpbNb4Vuy+WdsqfC
oJvTV6EL1nFeDcqAgd7JJzOMYrySukzoUxTCcr587N+vUiRem17DcwjPjepVtz0/
1sATFWW0KaLjxLTQHbmjFwf6/H3HD0KJ0PmM+Sva6zr3Je292m4AN3UF8QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEBNDaKeoR/kXmTNqFCa+nVk8YfqMB8GA1UdIwQY
MBaAFPniD306LMldneb04zTLS2eSLnD1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lSVBmVG9zeVYyZDV2VGpOTXRMWjVJdWNQVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMw
LWE1NGViODU2NmJlZi8xL1FFME5vcDZoSC1SZVpNMm9VSnI2ZFdUeGgtby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNmEvN2U3ZmNlLTQ4NDEtNDc2Yi04NGMwLWE1NGViODU2NmJl
Zi8xLzEtZUlQZlRvc3lWMmQ1dlRqTk10TFo1SXVjUFUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHCWJQw
DQYJKoZIhvcNAQELBQADggEBAFZPVuBc4iNdwKtTdizYbA7FQhbxCsavlbmdOmHp
TudEF+/5XqmcY3uJT1esMmz9EzKwHMEFf7MFq7nXK8U5WSbRHM29dALElEhxTX4l
lniJ1lgWtKi1wgrh5xpIMRUC6yoH02an2thsAv5pbmSIDd4Rw9rf33PVna6xbtSB
UciemFISvUbTujy07OgcUZ7HbVOhquCZswkvqKdkxVEkZkq4XHd2Q1PZGWmtQkws
7WcbvehMD6Lmaxj59dumwT52BfS1uHuUr4WAEgARca8QIkxtvPz4pBhg/ZLUCr7F
jVNiu90/tKfxcuSoRv6T29C8073GDPuRwML8UBDwZeGOvnU=
-----END CERTIFICATE-----