Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/fTr7pZx8MPUJuvCU9PpwspkhuW0.roa
File:                     fTr7pZx8MPUJuvCU9PpwspkhuW0.roa (raw, json)
Hash identifier:          6geYj5GPfaBkHuC0c+aM7Bw/kBWCtr0i5KTY9JygR6I=
Subject key identifier:   7D:3A:FB:A5:9C:7C:30:F5:09:BA:F0:94:F4:FA:70:B2:99:21:B9:6D
Certificate issuer:       /CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
Certificate serial:       0194228DCF3FF56B2DDCE67EE713D23EB504
Authority key identifier: F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/fTr7pZx8MPUJuvCU9PpwspkhuW0.roa
Signing time:             Wed 01 Jan 2025 15:48:26 +0000
ROA not before:           Wed 01 Jan 2025 15:48:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     197441
IP address blocks:        46.23.0.0/20 maxlen: 24
                          2a02:7000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:cf:3f:f5:6b:2d:dc:e6:7e:e7:13:d2:3e:b5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4902d240b25d7eb77f4f02e24f233f44a9a13
        Validity
            Not Before: Jan  1 15:48:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7d3afba59c7c30f509baf094f4fa70b29921b96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:78:d7:de:37:d0:d6:af:5b:1c:06:68:98:
                    ed:ca:8b:66:52:3b:b4:43:1d:36:bb:a2:fb:a6:9a:
                    2c:ce:a4:e8:32:4f:ea:5e:71:fb:29:df:f3:f0:d6:
                    88:42:90:4b:d3:2d:3c:6c:b5:36:e0:09:ce:d2:b6:
                    93:09:7f:40:a0:9c:d6:5d:67:d9:82:7c:7e:b7:77:
                    d2:2b:e5:bc:cd:57:0d:46:19:f4:3b:fa:1d:f3:ac:
                    28:b5:8a:68:27:de:64:5d:57:d1:30:47:52:57:1e:
                    4e:81:27:1a:28:14:fb:ae:89:d3:0b:03:59:ed:b2:
                    6d:6a:11:ea:a3:ab:46:64:dc:e3:71:5b:c7:92:b1:
                    7d:7f:62:e2:68:5f:b7:a4:0d:1c:d2:47:cc:6e:04:
                    66:c0:62:eb:ee:90:7c:50:47:d2:6f:83:92:b0:ec:
                    76:05:02:82:3b:98:1f:1d:89:27:96:42:02:e6:53:
                    fc:7c:3c:e8:30:c2:07:42:09:3b:a1:f6:41:5a:85:
                    1e:86:e3:53:c7:9f:45:7e:41:27:59:66:db:03:ab:
                    87:d1:8e:aa:f7:4c:5f:fc:f1:76:8c:e6:cc:9c:ba:
                    0d:7b:2e:34:28:92:7c:8c:27:3a:b1:62:93:33:18:
                    b7:98:c0:8e:c2:0b:2b:98:ad:c3:88:e2:8f:88:dd:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3A:FB:A5:9C:7C:30:F5:09:BA:F0:94:F4:FA:70:B2:99:21:B9:6D
            X509v3 Authority Key Identifier:
                keyid:F7:F4:90:2D:24:0B:25:D7:EB:77:F4:F0:2E:24:F2:33:F4:4A:9A:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_SQLSQLJdfrd_TwLiTyM_RKmhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/fTr7pZx8MPUJuvCU9PpwspkhuW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c6a4fe-a760-4c4c-81b0-53ab88c5f2c7/1/9_SQLSQLJdfrd_TwLiTyM_RKmhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.23.0.0/20
                IPv6:
                  2a02:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:00:6e:be:b4:95:20:af:ce:30:ed:4e:21:b5:23:1d:36:ba:
         fc:7d:b3:69:c8:32:fd:6b:bc:f2:65:97:76:f2:18:7f:7c:25:
         f6:22:72:3f:35:cf:62:c5:e3:9e:b2:cb:2c:a2:00:64:c3:97:
         ef:05:14:58:76:ce:0a:4e:2d:3e:40:64:f6:23:60:cf:7c:64:
         dd:f5:fa:7b:01:06:33:72:35:ee:cf:e5:fa:22:66:03:28:bd:
         54:9b:71:7c:a3:18:c6:43:89:24:a0:c1:64:37:9b:c4:70:92:
         fc:bd:f4:20:ff:4c:f8:26:c9:89:20:11:f6:21:3e:43:85:d5:
         ad:c7:b6:da:a2:62:a4:0e:9c:f7:bb:ec:9a:a4:7c:c8:94:fd:
         c3:fd:3f:a0:16:40:18:14:5b:a9:2f:30:d6:bc:c7:4b:e2:57:
         bd:bf:ed:a4:6b:1b:58:0c:8b:29:c6:83:67:c7:c0:88:ae:5f:
         8b:f8:42:b0:45:c7:53:f7:ad:48:d0:ad:3f:24:78:0f:83:f6:
         b7:0c:c1:cf:c8:af:f9:70:c7:b1:12:cc:35:5e:fb:81:99:19:
         42:6d:57:2c:88:cd:1c:98:ab:d2:81:99:8b:09:40:bf:c3:f9:
         29:ad:76:97:4e:7f:72:59:c3:ee:51:37:ad:43:e1:94:e0:b9:
         eb:d5:e0:36
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijc8/9Wst3OZ+5xPSPrUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZjQ5MDJkMjQwYjI1ZDdlYjc3ZjRmMDJlMjRmMjMzZjQ0
YTlhMTMwHhcNMjUwMTAxMTU0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDNhZmJhNTljN2MzMGY1MDliYWYwOTRmNGZhNzBiMjk5MjFiOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxil419430NavWxwGaJjtyotmUju0
Qx02u6L7pposzqToMk/qXnH7Kd/z8NaIQpBL0y08bLU24AnO0raTCX9AoJzWXWfZ
gnx+t3fSK+W8zVcNRhn0O/od86wotYpoJ95kXVfRMEdSVx5OgScaKBT7ronTCwNZ
7bJtahHqo6tGZNzjcVvHkrF9f2LiaF+3pA0c0kfMbgRmwGLr7pB8UEfSb4OSsOx2
BQKCO5gfHYknlkIC5lP8fDzoMMIHQgk7ofZBWoUehuNTx59FfkEnWWbbA6uH0Y6q
90xf/PF2jObMnLoNey40KJJ8jCc6sWKTMxi3mMCOwgsrmK3DiOKPiN37fQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH06+6WcfDD1CbrwlPT6cLKZIbltMB8GA1UdIwQY
MBaAFPf0kC0kCyXX63f08C4k8jP0SpoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAt
NTNhYjg4YzVmMmM3LzEvZlRyN3BaeDhNUFVKdXZDVTlQcHdzcGtodVcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jNmE0ZmUtYTc2MC00YzRjLTgxYjAtNTNhYjg4YzVmMmM3
LzEvOV9TUUxTUUxKZGZyZF9Ud0xpVHlNX1JLbWhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELhcAMA0E
AgACMAcDBQAqAnAAMA0GCSqGSIb3DQEBCwUAA4IBAQAeAG6+tJUgr84w7U4htSMd
Nrr8fbNpyDL9a7zyZZd28hh/fCX2InI/Nc9ixeOessssogBkw5fvBRRYds4KTi0+
QGT2I2DPfGTd9fp7AQYzcjXuz+X6ImYDKL1Um3F8oxjGQ4kkoMFkN5vEcJL8vfQg
/0z4JsmJIBH2IT5DhdWtx7baomKkDpz3u+yapHzIlP3D/T+gFkAYFFupLzDWvMdL
4le9v+2kaxtYDIspxoNnx8CIrl+L+EKwRcdT961I0K0/JHgPg/a3DMHPyK/5cMex
Esw1XvuBmRlCbVcsiM0cmKvSgZmLCUC/w/kprXaXTn9yWcPuUTetQ+GU4Lnr1eA2
-----END CERTIFICATE-----