Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/nEst59VNXuZ4VJfEimqfkDoIWMw.roa
File:                     nEst59VNXuZ4VJfEimqfkDoIWMw.roa (raw, json)
Hash identifier:          MVYyTOwc+4oCrDyXY6sI17JYzQycO6fjKklmhjG1KnA=
Subject key identifier:   9C:4B:2D:E7:D5:4D:5E:E6:78:54:97:C4:8A:6A:9F:90:3A:08:58:CC
Certificate issuer:       /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial:       019424B3F1AD9EEB0AAB372588799E3F2317
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/nEst59VNXuZ4VJfEimqfkDoIWMw.roa
Signing time:             Thu 02 Jan 2025 01:49:20 +0000
ROA not before:           Thu 02 Jan 2025 01:49:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8605
IP address blocks:        2001:67c:2198::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:f1:ad:9e:eb:0a:ab:37:25:88:79:9e:3f:23:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
        Validity
            Not Before: Jan  2 01:49:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9c4b2de7d54d5ee6785497c48a6a9f903a0858cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:0d:bc:3b:18:1a:c0:b8:55:f8:fa:1c:40:
                    e7:66:2a:21:63:56:43:09:c2:dc:9c:78:33:7e:57:
                    c1:a2:57:7f:17:b5:40:00:d7:ea:0e:2d:0d:48:1b:
                    d5:6c:23:b9:cd:27:47:78:e0:20:c2:0d:78:3b:8c:
                    3c:72:15:76:74:79:75:a9:c0:6b:28:83:d1:ce:0b:
                    03:a2:eb:68:58:7c:19:e4:41:cd:ac:12:b6:b6:14:
                    a0:98:28:b8:d5:18:1d:c0:e4:22:78:a7:be:ce:0a:
                    e2:8b:71:dd:19:f6:f5:fd:dd:55:f4:37:a6:50:1d:
                    7e:3e:87:a3:7a:8e:65:9f:14:87:3b:9d:eb:bc:25:
                    fd:d5:59:88:fb:a6:03:41:24:d1:d6:33:1b:bf:96:
                    8b:39:1b:2d:27:b2:49:27:c5:f6:1c:49:58:5b:6a:
                    6a:e7:0e:c0:05:cb:f5:3a:61:81:6a:34:b5:4e:f0:
                    90:6a:27:78:52:89:6c:e6:03:f1:cf:12:52:7d:1a:
                    a6:45:c4:88:83:12:55:39:9a:c6:ea:2a:57:8e:0b:
                    10:6b:a9:25:bf:60:22:d8:d4:c4:03:42:92:fa:86:
                    3f:1b:17:cc:2d:f9:3d:b9:86:3d:f8:79:57:f5:08:
                    81:95:6e:0b:13:0b:61:20:ae:1e:67:1a:a4:7e:45:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4B:2D:E7:D5:4D:5E:E6:78:54:97:C4:8A:6A:9F:90:3A:08:58:CC
            X509v3 Authority Key Identifier:
                keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/nEst59VNXuZ4VJfEimqfkDoIWMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2198::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:7c:74:a8:8e:a5:14:39:be:d6:e9:9a:3e:be:1e:e0:a3:
         09:0d:07:7d:0d:75:e0:ef:7f:a5:4e:10:41:49:a7:04:33:e1:
         9e:c6:b9:37:f5:77:35:4e:7d:8d:ab:bf:46:c4:55:94:70:f7:
         b9:af:d6:be:36:70:80:41:1e:df:3c:98:34:a7:1d:80:c9:9c:
         7c:fa:6e:e5:5b:55:7a:68:58:e0:41:43:6b:87:a0:23:3b:9b:
         ad:5c:fd:f3:54:0d:d6:b0:65:12:44:e2:01:bd:9e:26:58:33:
         b4:e5:2a:23:88:27:7b:94:1e:ef:22:a5:0d:e3:8c:43:f1:2a:
         d0:02:49:08:8c:2c:ce:7a:e2:1f:0d:70:fa:e9:3c:60:ba:8c:
         86:ff:da:e0:be:73:e7:09:41:0f:20:5a:51:55:a4:e6:53:30:
         a0:e4:e0:16:16:f7:5e:af:29:06:c0:65:6f:14:b3:4d:75:f6:
         56:ed:65:e9:05:89:5f:1a:08:eb:ec:fd:db:c6:86:ae:35:59:
         83:1b:8a:dc:e0:6f:45:f6:a0:83:5d:3a:98:13:e0:42:84:d9:
         ed:bb:61:05:31:40:29:5e:f4:bb:1a:44:d8:10:e6:ac:17:fd:
         dd:08:a8:66:b2:f2:45:2d:cc:d7:f6:bc:e1:f7:5d:96:5a:58:
         01:ce:5b:6b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQks/GtnusKqzcliHmePyMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzNhMzlhMGUwNDVkZGZhZWY1MDJmMWZkOTFjNmNjMTY1
MDk0NTkwHhcNMjUwMTAyMDE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzRiMmRlN2Q1NGQ1ZWU2Nzg1NDk3YzQ4YTZhOWY5MDNhMDg1OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO0NvDsYGsC4Vfj6HEDnZiohY1ZD
CcLcnHgzflfBold/F7VAANfqDi0NSBvVbCO5zSdHeOAgwg14O4w8chV2dHl1qcBr
KIPRzgsDoutoWHwZ5EHNrBK2thSgmCi41RgdwOQieKe+zgrii3HdGfb1/d1V9Dem
UB1+Poejeo5lnxSHO53rvCX91VmI+6YDQSTR1jMbv5aLORstJ7JJJ8X2HElYW2pq
5w7ABcv1OmGBajS1TvCQaid4Uols5gPxzxJSfRqmRcSIgxJVOZrG6ipXjgsQa6kl
v2Ai2NTEA0KS+oY/GxfMLfk9uYY9+HlX9QiBlW4LEwthIK4eZxqkfkWHpQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJxLLefVTV7meFSXxIpqn5A6CFjMMB8GA1UdIwQY
MBaAFNpzo5oOBF3frvUC8f2RxswWUJRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5Pam1nNEVYZC11OVFMeF9aSEd6QlpRbEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xNzM3ZmMtYjIyMS00ZmYwLWJmYTct
NWQ2NzRjYWRkZDZmLzEvbkVzdDU5Vk5YdVo0VkpmRWltcWZrRG9JV013LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xNzM3ZmMtYjIyMS00ZmYwLWJmYTctNWQ2NzRjYWRkZDZm
LzEvMm5Pam1nNEVYZC11OVFMeF9aSEd6QlpRbEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCGY
MA0GCSqGSIb3DQEBCwUAA4IBAQAbxHx0qI6lFDm+1umaPr4e4KMJDQd9DXXg73+l
ThBBSacEM+Gexrk39Xc1Tn2Nq79GxFWUcPe5r9a+NnCAQR7fPJg0px2AyZx8+m7l
W1V6aFjgQUNrh6AjO5utXP3zVA3WsGUSROIBvZ4mWDO05SojiCd7lB7vIqUN44xD
8SrQAkkIjCzOeuIfDXD66TxguoyG/9rgvnPnCUEPIFpRVaTmUzCg5OAWFvderykG
wGVvFLNNdfZW7WXpBYlfGgjr7P3bxoauNVmDG4rc4G9F9qCDXTqYE+BChNntu2EF
MUApXvS7GkTYEOasF/3dCKhmsvJFLczX9rzh912WWlgBzltr
-----END CERTIFICATE-----