Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa
File:                     efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa (raw, json)
Hash identifier:          Ks2lZAvTiIXOJHL4XOxVW69lFz0D0Ra18E8s7zHIoZo=
Subject key identifier:   79:F7:5C:27:83:1D:FE:75:B4:35:63:90:D4:F8:7C:36:F8:2A:53:88
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       0194228D98A1D7D33D114B83F350033B07C2
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa
Signing time:             Wed 01 Jan 2025 15:48:12 +0000
ROA not before:           Wed 01 Jan 2025 15:48:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212842
IP address blocks:        185.38.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:98:a1:d7:d3:3d:11:4b:83:f3:50:03:3b:07:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Jan  1 15:48:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79f75c27831dfe75b4356390d4f87c36f82a5388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:78:af:0a:68:a5:07:e7:7b:39:de:42:d6:16:
                    09:1e:c5:82:41:a3:37:87:a4:5a:36:67:33:3f:9e:
                    87:50:83:37:a7:f7:57:eb:2c:e0:2a:7c:05:cb:a1:
                    45:58:83:99:30:4e:e6:32:1e:4a:0b:09:61:af:40:
                    2a:3b:16:bd:cf:05:6b:12:aa:9d:a4:e6:ef:3b:1d:
                    ed:2e:f5:7c:a1:25:b2:fc:d7:54:af:7d:15:a4:fa:
                    f6:c8:1d:86:65:e3:b3:ed:a2:f8:ac:cd:00:36:c5:
                    98:e8:60:d7:44:c5:d7:f0:a7:13:86:f9:6a:47:dd:
                    73:d3:45:07:53:e7:18:4c:64:19:43:a9:4d:b5:d7:
                    75:c0:07:5a:66:4d:a9:ae:65:18:62:95:83:96:6c:
                    af:56:2b:a0:8d:a9:02:cc:c1:e2:12:64:45:ed:69:
                    ec:2b:b9:3b:a7:ed:37:5b:73:8a:bc:da:53:ab:e4:
                    7a:eb:c2:63:c4:01:57:82:12:d6:af:5f:32:c0:68:
                    62:72:35:e0:91:ff:67:cc:2e:35:58:5c:ed:7c:d1:
                    b4:95:c6:57:12:09:82:ff:07:2a:b0:4a:71:81:6d:
                    2b:3d:42:f2:55:93:4b:82:d0:23:9d:c8:a3:a8:58:
                    86:05:1a:6b:42:73:8a:d5:9a:9b:7f:48:9f:07:ce:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F7:5C:27:83:1D:FE:75:B4:35:63:90:D4:F8:7C:36:F8:2A:53:88
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/efdcJ4Md_nW0NWOQ1Ph8NvgqU4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:62:11:6f:cc:c5:33:03:b7:84:b1:e9:dd:20:9c:ac:a3:
         08:8e:5f:e0:ab:a3:a6:50:5f:11:af:e3:31:01:3c:ba:f5:64:
         6a:24:38:8a:9f:da:44:ec:c1:ee:74:c3:cb:e6:50:9d:36:56:
         51:f5:29:3b:69:d0:cb:4a:41:b8:a1:b7:7d:36:de:0b:3e:68:
         b4:80:ab:c6:26:23:17:7f:d6:56:11:d2:6b:70:7d:17:46:6f:
         ce:1e:86:27:12:01:05:65:91:31:67:cf:72:01:a9:2f:bc:63:
         18:29:94:c2:56:03:27:e4:f3:e8:de:ca:4b:33:e2:62:17:c8:
         43:b0:2f:f6:1b:47:1d:cb:51:5c:37:d8:29:d3:d7:9a:f1:e8:
         52:46:be:45:1f:ae:fc:27:fe:ac:01:27:18:bb:4b:16:bc:06:
         e7:40:dc:9c:30:43:3b:3a:8c:52:62:ff:d4:dd:d6:f8:a1:e3:
         24:ee:26:4a:d8:7d:72:f2:04:68:39:b3:4f:25:c6:eb:9e:14:
         06:57:e2:f2:76:67:a9:c7:00:02:c9:67:3e:a8:71:ce:72:da:
         ca:9c:1f:c5:71:68:97:f8:16:cc:ee:cf:7f:d0:e6:f2:01:8e:
         42:b0:7a:32:83:35:bf:51:c1:2f:12:e6:a3:ae:6b:d5:01:68:
         84:b9:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----