Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/ZhfTjFWerubW-wXYF5uHcQImBi0.roa
File:                     ZhfTjFWerubW-wXYF5uHcQImBi0.roa (raw, json)
Hash identifier:          ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=
Subject key identifier:   66:17:D3:8C:55:9E:AE:E6:D6:FB:05:D8:17:9B:87:71:02:26:06:2D
Certificate issuer:       /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial:       0194206876EBCF54C04DDE54C0883F090CFC
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/ZhfTjFWerubW-wXYF5uHcQImBi0.roa
Signing time:             Wed 01 Jan 2025 05:48:24 +0000
ROA not before:           Wed 01 Jan 2025 05:48:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47337
IP address blocks:        46.16.152.0/21 maxlen: 24
                          2a02:2520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:76:eb:cf:54:c0:4d:de:54:c0:88:3f:09:0c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
        Validity
            Not Before: Jan  1 05:48:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6617d38c559eaee6d6fb05d8179b87710226062d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:e0:8b:42:37:dd:99:48:b1:6a:d7:38:89:
                    07:97:24:07:1f:d5:5e:60:ae:32:06:22:a5:04:2e:
                    1e:33:6d:c2:9b:de:da:7d:df:58:73:3a:3b:a0:23:
                    24:72:75:24:b7:ed:de:c0:c8:17:ee:36:5b:e3:85:
                    03:53:06:bb:87:bb:c6:26:46:d6:2c:19:20:17:ff:
                    6d:60:fe:7a:5e:bb:c5:ea:d8:e1:01:19:9d:15:d7:
                    88:0c:bd:c8:1c:c2:5b:df:6e:3c:88:ef:50:36:19:
                    cf:90:91:15:96:c3:94:ed:b4:4f:1c:0f:58:88:24:
                    5f:86:84:a3:19:03:4a:56:ef:27:01:cc:6c:25:96:
                    2a:16:a5:3f:b9:52:51:7e:ce:16:8f:41:4d:ae:f5:
                    12:28:d1:85:ac:d2:a3:d7:2b:35:36:89:38:d3:a7:
                    10:c3:83:0a:3c:52:73:4f:86:83:a3:97:95:f7:5e:
                    78:a0:43:61:a9:1c:96:ad:91:e5:9f:06:a5:ec:90:
                    b2:71:e2:ff:8a:47:55:8f:8e:75:13:4c:82:91:65:
                    31:22:0c:57:3c:da:cc:4f:75:93:85:de:19:ae:23:
                    97:0f:aa:3c:cc:ca:b6:5d:e0:2a:3d:bc:e4:20:92:
                    9d:dd:ca:a3:af:de:da:55:f7:b4:d1:d2:7b:da:30:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:D3:8C:55:9E:AE:E6:D6:FB:05:D8:17:9B:87:71:02:26:06:2D
            X509v3 Authority Key Identifier:
                keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/ZhfTjFWerubW-wXYF5uHcQImBi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.16.152.0/21
                IPv6:
                  2a02:2520::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:08:86:2c:fb:fe:2b:d8:42:f7:93:b1:58:92:a8:2d:52:8b:
         5d:67:43:08:bf:2b:14:a1:74:68:03:e8:20:cb:5c:07:db:8a:
         12:c0:6d:d8:cc:36:81:5c:3c:de:64:be:ae:b8:c5:e8:70:09:
         04:11:62:ca:2b:0f:06:21:60:da:6e:16:db:7c:0f:a5:e7:69:
         7e:c0:64:70:3d:0d:6d:69:4e:d4:f2:01:d9:e8:07:34:d4:29:
         df:3b:42:0f:ed:44:c0:98:f0:96:be:41:40:33:2d:fe:dd:91:
         61:d1:6e:36:c8:26:d9:c2:e7:c1:8b:2a:d0:13:c4:be:32:df:
         b3:bb:bb:08:8c:0e:1d:b5:39:f2:f3:33:47:c6:02:e1:23:35:
         7a:f6:b0:ef:55:9c:70:89:0c:02:b1:06:23:58:f5:e6:55:9b:
         b2:d3:20:86:e7:df:15:a3:cb:a5:68:c1:af:8a:15:1b:bb:3b:
         1e:9b:55:55:ad:d9:bf:7f:90:19:cf:5d:a1:29:7b:09:58:3e:
         92:cc:b2:bb:69:d0:c5:2e:07:45:74:9c:5a:ce:52:bd:85:03:
         5c:8c:18:b6:d3:21:18:b1:3c:92:fa:22:6c:7e:14:95:5e:f8:
         31:34:ab:20:6a:ff:86:e2:35:a4:20:be:94:e2:98:6b:6f:b2:
         ea:fa:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----