Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/C-s3qmcWvVMYI1a9KzViDKmJV5c.roa
File:                     C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (raw, json)
Hash identifier:          /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=
Subject key identifier:   0B:EB:37:AA:67:16:BD:53:18:23:56:BD:2B:35:62:0C:A9:89:57:97
Certificate issuer:       /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial:       0195F69AB8B724B950667674DD7716100577
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/C-s3qmcWvVMYI1a9KzViDKmJV5c.roa
Signing time:             Wed 02 Apr 2025 13:04:49 +0000
ROA not before:           Wed 02 Apr 2025 13:04:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31561
IP address blocks:        185.1.14.0/24 maxlen: 24
                          2001:7f8:12e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f6:9a:b8:b7:24:b9:50:66:76:74:dd:77:16:10:05:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
        Validity
            Not Before: Apr  2 13:04:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=0beb37aa6716bd53182356bd2b35620ca9895797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:d5:d1:c3:cf:db:68:8c:af:f3:af:ff:f2:
                    18:92:97:b8:5a:fe:12:90:08:b4:91:5a:37:f0:fe:
                    cf:14:91:f1:fc:40:ff:57:73:06:d4:2b:9e:82:61:
                    d7:4c:a3:0f:cf:2b:5f:4a:ec:59:8e:28:94:55:09:
                    a8:b5:70:a2:de:62:b4:ef:fe:04:93:7a:e9:91:ed:
                    ce:f2:39:08:43:51:64:e3:54:51:6d:a4:42:74:eb:
                    34:a1:7f:fb:59:ce:e7:7b:c8:e0:b3:cf:81:32:30:
                    6e:6e:bf:59:81:02:82:c8:3e:98:ea:a9:8a:8a:5c:
                    e4:84:21:26:9b:45:79:4a:65:71:b0:be:21:bd:4e:
                    c5:55:66:50:9e:90:94:9f:d3:37:0f:d6:5f:c3:09:
                    d7:b3:7f:59:76:76:0f:60:fa:aa:6a:1f:53:98:e9:
                    15:5e:ce:c8:03:80:33:9e:2c:74:04:6f:3c:ba:a1:
                    d9:ea:d7:71:de:f1:cd:2f:65:16:71:9c:d1:40:37:
                    fb:e9:ea:bf:e4:cc:d6:2f:82:8a:0a:f5:0c:2f:25:
                    7c:ad:7d:e2:35:e8:b2:98:d8:8e:3c:4a:0b:80:24:
                    e8:b9:c2:60:74:b3:8c:cd:60:cf:f1:45:1d:39:71:
                    64:9c:2e:81:6e:a7:c4:aa:42:4e:bb:ca:ff:6f:aa:
                    1d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EB:37:AA:67:16:BD:53:18:23:56:BD:2B:35:62:0C:A9:89:57:97
            X509v3 Authority Key Identifier:
                keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/C-s3qmcWvVMYI1a9KzViDKmJV5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.14.0/24
                IPv6:
                  2001:7f8:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:4a:f8:85:c7:c0:89:fb:f4:d3:8b:08:f0:e9:6f:71:a4:
         a0:05:0d:fc:77:ae:59:2b:9c:1f:f0:92:b2:3f:8e:51:d8:ee:
         1f:b7:de:f7:18:16:a4:61:56:80:d9:c0:76:a6:35:df:c4:39:
         cc:c4:0e:86:bd:6b:86:7e:93:be:47:05:a2:47:a2:c3:e4:db:
         67:f4:79:e9:7e:8a:bf:eb:6f:22:aa:b9:0c:9a:a3:68:50:be:
         e4:9e:9f:6d:b4:5b:1d:7c:9d:46:70:26:87:21:d7:88:d8:a6:
         9f:55:d9:63:ed:97:4d:50:96:bb:b4:88:fc:cf:26:88:c2:1c:
         c7:ee:d1:40:cd:5a:f5:d3:56:ec:32:d7:6b:45:9a:97:7d:ae:
         15:95:1f:84:50:d1:df:7a:04:3b:45:cd:4b:c9:a9:04:38:51:
         88:85:67:73:99:6e:63:cd:58:22:8f:5b:04:07:a8:6e:a2:9c:
         df:49:18:16:a6:a2:c5:eb:0a:89:9b:48:21:62:50:db:16:26:
         e3:41:16:df:29:cf:10:1b:b4:8d:ea:e6:65:97:7d:36:94:14:
         54:cf:8c:cd:a6:85:52:b8:99:21:e1:06:ef:1f:a3:87:b3:43:
         21:e7:51:45:7b:a8:61:cc:82:bd:2f:c5:5c:20:5a:66:53:2b:
         87:e9:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----