Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa
File:                     DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (raw, json)
Hash identifier:          fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=
Subject key identifier:   0D:78:17:FD:C3:0E:29:69:AF:C9:BE:4C:0C:2B:BE:CB:31:88:49:84
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       0194206848AD7A3EA594C8C534FE3CADA22B
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa
Signing time:             Wed 01 Jan 2025 05:48:12 +0000
ROA not before:           Wed 01 Jan 2025 05:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205538
IP address blocks:        185.214.89.0/24 maxlen: 24
                          185.214.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:48:ad:7a:3e:a5:94:c8:c5:34:fe:3c:ad:a2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Jan  1 05:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0d7817fdc30e2969afc9be4c0c2bbecb31884984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:d3:aa:0c:9f:5d:af:ec:9b:08:f9:e7:bd:
                    f3:a7:0b:91:ce:b4:f4:50:4f:c3:04:a8:9e:3d:22:
                    0a:fe:41:f3:76:59:d8:1a:62:b7:13:27:4d:c9:10:
                    ee:85:a1:76:73:0a:a7:b0:26:66:ff:ea:38:85:a3:
                    17:3e:78:88:0f:b5:74:61:53:22:be:61:3d:69:87:
                    80:0b:c6:e4:d1:20:62:b5:6d:5e:3b:75:9a:d0:4c:
                    69:3f:8d:ae:03:3d:2c:57:19:d4:14:ac:78:f2:30:
                    fc:a2:a0:bb:11:83:ca:79:ed:4e:49:76:6b:2a:46:
                    3c:9d:a0:68:53:da:df:68:75:b3:47:7e:da:70:45:
                    ed:b2:95:16:9b:84:98:44:f3:4c:85:d2:6a:04:21:
                    b2:49:28:85:b0:86:27:6a:fa:0a:3c:54:a8:ae:4a:
                    2a:86:31:fe:da:98:8d:61:c3:b0:5d:b9:03:ed:94:
                    9f:56:79:1f:b3:6b:26:27:37:3c:92:c7:19:78:0e:
                    f3:61:bd:ed:92:d0:98:2c:11:88:77:8e:25:3d:a5:
                    61:ab:ce:b5:87:00:27:94:ec:45:bf:6e:82:eb:97:
                    bf:8f:5b:70:0a:8f:3a:d9:96:7d:f4:d2:d1:5b:be:
                    e3:dd:72:1c:10:e5:31:42:c7:ec:95:bf:f1:ba:67:
                    79:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:17:FD:C3:0E:29:69:AF:C9:BE:4C:0C:2B:BE:CB:31:88:49:84
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.214.89.0-185.214.91.255

    Signature Algorithm: sha256WithRSAEncryption
         11:74:70:c5:3f:fa:6c:fa:22:e7:31:e0:2a:73:8e:eb:de:b5:
         51:11:8c:43:5a:52:5e:33:81:86:bf:b7:3c:79:98:b7:1c:78:
         c5:36:c9:88:4c:e4:76:6b:96:cb:d2:72:65:76:2a:6b:51:24:
         2b:cc:6f:1b:28:e2:bc:2a:89:e1:39:24:eb:ea:de:bd:d6:df:
         08:9a:90:ac:16:af:c7:d0:a4:ff:0c:d4:0a:b4:0c:ef:49:e6:
         ab:45:45:b2:a7:b9:7c:a6:46:23:1b:6b:a6:b9:a0:05:55:85:
         3d:66:df:54:f2:09:0f:e0:5c:79:42:33:9c:25:af:ae:f1:94:
         4b:9d:c3:ed:2b:8d:6a:77:29:b8:ec:30:08:7f:ae:9e:88:b3:
         7a:52:05:d2:46:82:a7:67:55:f3:a0:b3:b0:ee:9d:cb:10:e9:
         68:0a:c2:6e:5d:ea:d3:e3:6c:4f:72:80:3c:eb:5a:59:1a:d3:
         91:60:1a:c3:c4:40:eb:5f:a2:24:aa:2a:f4:96:fe:ae:e2:dc:
         ff:8c:0f:7b:b5:57:15:7c:ba:bc:71:98:2e:ca:a6:32:23:28:
         03:62:2c:89:62:18:16:55:8e:3f:17:eb:fe:57:67:6a:cd:8c:
         f8:19:49:f5:c2:dc:85:e9:8d:02:5e:6e:46:27:a0:74:dc:2d:
         6a:e1:c8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----