Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/V9qSkag-yPFb6kdg7t_bXdafQY8.roa
File:                     V9qSkag-yPFb6kdg7t_bXdafQY8.roa (raw, json)
Hash identifier:          /gE5NbLPMb6fQQc04np3UK1UkGHwo2L/kFXUOBu9e5c=
Subject key identifier:   57:DA:92:91:A8:3E:C8:F1:5B:EA:47:60:EE:DF:DB:5D:D6:9F:41:8F
Certificate issuer:       /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial:       01952F14BBACEDE86D8D68B0EBF4F3365CEF
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/V9qSkag-yPFb6kdg7t_bXdafQY8.roa
Signing time:             Sat 22 Feb 2025 19:14:02 +0000
ROA not before:           Sat 22 Feb 2025 19:14:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202643
IP address blocks:        185.116.115.0/24 maxlen: 24
                          2a0e:bec0::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:2f:14:bb:ac:ed:e8:6d:8d:68:b0:eb:f4:f3:36:5c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
        Validity
            Not Before: Feb 22 19:14:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57da9291a83ec8f15bea4760eedfdb5dd69f418f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:55:53:e6:fb:52:a3:54:c4:d7:02:e2:1c:2a:
                    5b:2c:4b:ea:d8:7d:6a:c3:eb:77:af:95:9a:36:6e:
                    0c:59:82:38:8a:a4:ff:5c:7a:5c:e6:b9:b5:da:d4:
                    a8:87:aa:91:f2:ee:04:68:3f:97:d8:3d:43:cd:06:
                    c9:17:3b:2b:a7:25:b6:08:6a:27:b3:9e:3d:6f:72:
                    13:a0:7c:28:07:6e:d9:6f:45:0a:b9:49:40:dc:d2:
                    f8:05:8d:ee:dc:51:37:33:0a:4a:26:bc:ca:11:7b:
                    b8:88:a6:c8:c5:22:62:bd:1d:08:9d:9b:48:70:9c:
                    2b:4b:06:7c:2e:75:dd:f7:23:77:69:44:51:49:18:
                    71:12:10:9b:27:9f:3c:43:57:40:f0:eb:7f:01:6b:
                    8b:43:31:ca:1e:38:38:19:19:28:0e:9e:c6:1b:af:
                    21:da:87:46:c2:e8:55:f7:d0:e3:06:31:71:c5:21:
                    b2:82:86:51:56:08:bd:48:03:cc:c7:5e:97:0f:84:
                    8b:3a:28:24:28:0a:73:26:d5:45:e2:7c:91:ea:01:
                    1b:9e:91:d0:c6:c5:d4:8c:0a:95:01:f1:f5:3f:ed:
                    d2:a4:7d:fc:29:a1:da:0d:ae:74:0c:06:9c:c1:56:
                    b7:d4:c4:75:be:f2:72:0a:d4:74:8b:af:35:e4:7c:
                    bb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:92:91:A8:3E:C8:F1:5B:EA:47:60:EE:DF:DB:5D:D6:9F:41:8F
            X509v3 Authority Key Identifier:
                keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/V9qSkag-yPFb6kdg7t_bXdafQY8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.115.0/24
                IPv6:
                  2a0e:bec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:fd:e8:5c:dd:3e:e1:48:d8:fc:22:08:ff:ca:b5:3b:7c:c5:
         05:e7:3f:7d:64:c7:67:1a:16:f0:05:38:ab:50:f0:21:35:0d:
         06:02:2f:e0:19:1d:c1:59:c4:f1:07:45:33:39:31:8d:a0:3a:
         e8:aa:6d:e4:fa:43:02:fa:60:55:e2:e3:4d:58:03:97:ca:87:
         01:ce:af:bc:ab:58:74:3a:1f:ed:72:5c:8a:2c:a7:eb:8b:59:
         45:cc:9f:d3:2e:3a:aa:c3:bc:ab:09:27:79:68:d0:8e:c3:e4:
         54:51:ec:6b:da:60:48:20:76:2a:1e:9c:21:71:c6:c4:27:fe:
         5d:a3:99:f5:d3:96:a7:2f:0c:0c:ed:f2:8c:b6:e1:43:73:2c:
         b5:b5:50:df:87:88:96:2e:a3:35:87:aa:d8:19:3e:4b:86:f2:
         2d:69:dd:30:1b:2f:3f:82:29:6f:f6:b8:2f:09:fa:51:6b:dc:
         2a:37:82:94:1f:01:12:87:83:37:f6:dd:34:97:5a:a5:e3:d3:
         c8:7f:3e:36:15:f7:bf:dd:4c:c4:46:50:f4:ee:4e:1e:46:bf:
         7d:81:58:d8:2f:47:25:b2:69:c7:fa:64:68:6b:00:02:0c:ff:
         06:92:ca:d8:b7:9c:cb:da:96:98:ff:6a:fe:3e:c5:dc:7a:43:
         9c:d5:9f:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZUvFLus7ehtjWiw6/TzNlzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTJmNDQxMzgyZDViYTFkODBkZjQ1OWJkNDZjMGEzMTU5
MGU3MmYwHhcNMjUwMjIyMTkxNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2RhOTI5MWE4M2VjOGYxNWJlYTQ3NjBlZWRmZGI1ZGQ2OWY0MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lVT5vtSo1TE1wLiHCpbLEvq2H1q
w+t3r5WaNm4MWYI4iqT/XHpc5rm12tSoh6qR8u4EaD+X2D1DzQbJFzsrpyW2CGon
s549b3IToHwoB27Zb0UKuUlA3NL4BY3u3FE3MwpKJrzKEXu4iKbIxSJivR0InZtI
cJwrSwZ8LnXd9yN3aURRSRhxEhCbJ588Q1dA8Ot/AWuLQzHKHjg4GRkoDp7GG68h
2odGwuhV99DjBjFxxSGygoZRVgi9SAPMx16XD4SLOigkKApzJtVF4nyR6gEbnpHQ
xsXUjAqVAfH1P+3SpH38KaHaDa50DAacwVa31MR1vvJyCtR0i6815Hy7LwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFfakpGoPsjxW+pHYO7f213Wn0GPMB8GA1UdIwQY
MBaAFOMS9EE4LVuh2A30Wb1GwKMVkOcvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTkt
YjgwZWZiZDY4YmZkLzEvVjlxU2thZy15UEZiNmtkZzd0X2JYZGFmUVk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMTYyZTctNGY3NC00ZTY5LWJhOTktYjgwZWZiZDY4YmZk
LzEvNHhMMFFUZ3RXNkhZRGZSWnZVYkFveFdRNXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXRzMA0E
AgACMAcDBQMqDr7AMA0GCSqGSIb3DQEBCwUAA4IBAQAD/ehc3T7hSNj8Igj/yrU7
fMUF5z99ZMdnGhbwBTirUPAhNQ0GAi/gGR3BWcTxB0UzOTGNoDroqm3k+kMC+mBV
4uNNWAOXyocBzq+8q1h0Oh/tclyKLKfri1lFzJ/TLjqqw7yrCSd5aNCOw+RUUexr
2mBIIHYqHpwhccbEJ/5do5n105anLwwM7fKMtuFDcyy1tVDfh4iWLqM1h6rYGT5L
hvItad0wGy8/gilv9rgvCfpRa9wqN4KUHwESh4M39t00l1ql49PIfz42Ffe/3UzE
RlD07k4eRr99gVjYL0clsmnH+mRoawACDP8GksrYt5zL2paY/2r+PsXcekOc1Z9O
-----END CERTIFICATE-----