Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa
File:                     LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa (raw, json)
Hash identifier:          1aHlaSEVJU/CBfEh/B+hUORROVZbrb1jBZXbNMg5cy4=
Subject key identifier:   2D:20:E2:0E:41:87:7F:C9:2D:B9:2B:E9:2E:20:85:E1:0C:71:A0:70
Certificate issuer:       /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial:       0194236A1CFE157AD96A04F6C7CFF817625A
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa
Signing time:             Wed 01 Jan 2025 19:49:04 +0000
ROA not before:           Wed 01 Jan 2025 19:49:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49102
IP address blocks:        93.159.128.0/18 maxlen: 18
                          2a00:1578::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:6a:1c:fe:15:7a:d9:6a:04:f6:c7:cf:f8:17:62:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
        Validity
            Not Before: Jan  1 19:49:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2d20e20e41877fc92db92be92e2085e10c71a070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:fd:99:8c:ec:f6:81:ae:a5:cb:5f:e9:e8:
                    ef:e7:ba:df:52:4c:ae:5b:3f:cf:97:be:28:f2:09:
                    7c:cd:38:eb:d8:c1:36:6e:59:6c:a6:26:39:a9:81:
                    23:9b:e2:bd:b7:06:23:40:6c:1c:fd:c0:cd:0c:41:
                    6b:22:ec:2b:1d:d0:95:25:80:bf:a4:5e:a6:da:8d:
                    bf:e1:d0:c5:7c:e8:a4:58:13:1a:72:13:9a:21:7f:
                    fe:ea:0c:75:ba:ac:33:df:38:f7:92:4a:fe:63:dc:
                    93:49:fc:d8:18:06:51:14:e0:6a:b6:4a:c8:95:10:
                    6a:5e:f6:0c:a1:95:74:cd:79:3e:0f:3c:bf:8e:e9:
                    0e:d1:7b:cf:76:ae:b4:de:1f:8a:10:2c:24:c2:9c:
                    40:dc:7e:05:b6:12:0f:05:db:da:80:e9:45:7f:9f:
                    75:6e:c6:e9:53:6e:78:09:d8:49:69:74:9f:16:74:
                    d2:20:0d:89:58:87:71:71:2b:c6:46:38:0b:f6:df:
                    ff:c7:f4:b6:9a:e0:a3:bb:70:81:e1:77:d1:3a:a4:
                    05:f5:06:a2:00:ee:39:1f:52:ad:44:b2:3f:01:16:
                    d3:f1:bd:a5:aa:0d:a2:30:d1:d4:4a:2a:32:55:f4:
                    37:57:9b:b1:62:ac:35:ff:6e:ea:40:98:43:43:14:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:20:E2:0E:41:87:7F:C9:2D:B9:2B:E9:2E:20:85:E1:0C:71:A0:70
            X509v3 Authority Key Identifier:
                keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/LSDiDkGHf8ktuSvpLiCF4QxxoHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.159.128.0/18
                IPv6:
                  2a00:1578::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:03:c3:53:59:aa:0e:17:ad:39:a8:7f:17:35:90:e9:ed:
         9f:4c:94:b7:5e:64:3e:91:86:22:ff:05:41:8a:8d:a5:59:cb:
         36:2d:90:b0:49:fa:df:9d:32:29:87:f8:71:a0:e5:9c:1a:34:
         f8:36:d0:9f:79:18:31:00:73:6c:70:40:88:2f:8c:f9:b5:57:
         86:f2:8b:77:e0:eb:b5:9c:65:79:d5:1f:a1:68:a4:e3:aa:1f:
         fe:f1:40:0d:51:ed:9e:f8:b6:5c:de:f1:b4:ca:32:8f:28:33:
         41:c3:fc:8e:e5:53:82:16:62:6f:07:f8:2d:3d:e7:ab:f1:e0:
         ac:e6:51:04:ed:a9:24:ff:8c:8d:fe:65:df:db:52:30:d8:c5:
         aa:e1:0d:eb:a7:4a:15:b7:a3:0d:e5:c5:a9:cc:44:ca:ab:c2:
         43:75:2a:77:7f:fb:e2:45:3b:c8:85:4a:62:e6:37:fe:e4:a6:
         97:05:a0:09:db:ba:80:c7:44:4e:66:2d:ee:94:e4:7d:7a:ea:
         ec:87:50:ff:81:c1:15:87:b4:85:03:a3:06:19:e8:18:83:19:
         9b:c2:7c:30:39:2a:1c:1e:b5:52:d3:59:87:d1:d2:26:f8:c6:
         bc:e8:e6:cd:1b:d0:66:b4:7e:c8:41:c7:3e:cd:07:ea:03:80:
         58:87:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----