Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ovKyvCqAYAi4GuIc3J8z5faKymI.roa
File:                     ovKyvCqAYAi4GuIc3J8z5faKymI.roa (raw, json)
Hash identifier:          Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=
Subject key identifier:   A2:F2:B2:BC:2A:80:60:08:B8:1A:E2:1C:DC:9F:33:E5:F6:8A:CA:62
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       019421B1EF12CE48414608D326D56847948C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ovKyvCqAYAi4GuIc3J8z5faKymI.roa
Signing time:             Wed 01 Jan 2025 11:48:16 +0000
ROA not before:           Wed 01 Jan 2025 11:48:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42440
IP address blocks:        94.183.58.1/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:b1:ef:12:ce:48:41:46:08:d3:26:d5:68:47:94:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jan  1 11:48:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a2f2b2bc2a806008b81ae21cdc9f33e5f68aca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:b4:36:aa:84:fe:88:97:72:e3:59:5b:86:
                    bc:a5:06:b0:d3:2f:71:4e:36:fb:fb:f3:4d:9d:9d:
                    5e:8c:aa:7c:c5:21:01:96:5b:87:3a:c9:fd:cd:fa:
                    fa:bc:fc:e2:14:82:16:6b:46:3d:df:aa:12:d0:a3:
                    76:47:dc:52:02:79:22:a1:ec:70:ee:2b:90:8b:e0:
                    19:f8:21:30:be:9c:90:83:b4:91:0a:f1:1b:4c:34:
                    9e:06:26:6c:a6:22:94:76:59:1f:09:4e:66:dc:84:
                    7d:f4:11:76:6d:11:6a:85:2f:7f:ed:77:12:62:3d:
                    eb:bf:87:78:1a:ba:d1:0d:0c:21:33:44:43:a8:f0:
                    ef:4f:72:ef:8c:0b:d6:16:9d:81:be:92:8f:a7:40:
                    66:bb:e1:10:20:f2:79:56:2c:33:1f:c8:46:39:9c:
                    c1:1f:71:f3:5f:da:2a:56:9a:53:69:da:46:e5:10:
                    36:0a:00:5a:cc:f3:a7:de:79:d5:42:02:9b:33:a0:
                    d4:5e:a5:60:e8:61:fd:6f:b6:df:0a:47:00:87:d9:
                    25:a9:d2:bb:a7:1c:c7:de:99:72:09:cf:0d:b4:dc:
                    75:5d:6c:d3:83:9c:99:28:5d:2e:1b:8e:e3:3c:e5:
                    4e:ad:f0:fc:d5:01:10:bc:f2:b6:06:97:08:16:ef:
                    3f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:B2:BC:2A:80:60:08:B8:1A:E2:1C:DC:9F:33:E5:F6:8A:CA:62
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/ovKyvCqAYAi4GuIc3J8z5faKymI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.58.1/32

    Signature Algorithm: sha256WithRSAEncryption
         95:5e:e8:ea:23:ac:fc:85:82:5d:15:eb:7a:59:5a:95:9c:79:
         97:86:42:f5:41:44:3d:4e:3c:a0:bf:be:21:b6:03:c4:e2:ad:
         f3:fa:de:f2:7d:0d:c2:35:4e:4a:fc:38:f7:25:ac:ac:24:65:
         38:e0:0c:b2:41:96:8a:15:ae:b0:df:27:00:92:6e:78:e7:12:
         fe:41:3c:d4:84:60:e3:2c:4e:c9:58:ea:19:3b:6f:60:3d:cc:
         51:13:e9:df:2a:ee:22:a7:94:6f:2f:b3:a5:dc:3b:b6:66:96:
         f1:2e:77:c3:e6:b7:32:df:f9:3b:9c:5f:90:74:6f:98:45:39:
         1b:38:70:35:f7:a4:0d:92:49:b6:28:1d:fd:10:69:9c:83:db:
         e6:b5:04:f6:c7:c1:ae:f6:16:a8:85:0d:75:67:d9:84:c0:52:
         42:a5:b6:a8:14:e2:cc:52:cf:29:2c:69:48:36:03:59:75:be:
         e1:f1:93:d0:80:41:2b:df:17:93:63:8f:9e:03:12:80:c4:36:
         53:2a:0e:ec:be:49:d1:a5:95:95:69:71:fc:98:30:37:b7:ec:
         7b:71:98:0b:7c:39:ee:ab:c9:4a:51:00:b8:06:a1:db:84:d8:
         23:7c:49:94:71:b4:8f:7e:91:7b:1d:9f:bd:f2:f8:2c:92:20:
         6f:60:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----