Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa
File:                     WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa (raw, json)
Hash identifier:          yTqA3ZGTODQnxMnTADEBGt1VqhX3aMRxsME8/St0wzk=
Subject key identifier:   5B:15:F5:1E:ED:84:E4:F0:52:50:69:AC:5E:32:BD:84:2F:4C:37:09
Certificate issuer:       /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
Certificate serial:       01941FFA51B8242861F9EE223CCF1AD8D6B7
Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa
Signing time:             Wed 01 Jan 2025 03:48:06 +0000
ROA not before:           Wed 01 Jan 2025 03:48:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213150
IP address blocks:        185.216.11.0/24 maxlen: 24
                          2a07:e940::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:51:b8:24:28:61:f9:ee:22:3c:cf:1a:d8:d6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f
        Validity
            Not Before: Jan  1 03:48:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=5b15f51eed84e4f0525069ac5e32bd842f4c3709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:ea:a7:8b:9b:eb:26:74:0c:d7:e1:0b:51:
                    cb:09:4f:ab:2b:60:53:e6:cc:c4:74:78:86:41:b6:
                    dc:7d:18:a2:b3:58:e8:ea:5c:aa:e2:cb:71:4b:92:
                    ae:db:75:38:ce:4c:ea:f5:c5:b0:ac:d9:79:22:19:
                    b5:5b:bd:9b:66:72:89:2e:62:a8:3a:f0:67:ad:42:
                    2e:ac:a5:92:1d:56:d4:f9:16:f3:17:c0:de:2a:5c:
                    04:74:e5:be:45:14:d4:0c:8f:99:67:18:ed:b9:75:
                    4e:b5:5c:38:f2:46:31:52:04:3b:0b:11:49:c1:92:
                    d1:e4:f4:10:cf:84:02:cb:c3:eb:83:ba:97:62:f9:
                    84:27:77:7e:10:59:b3:07:64:dd:20:2e:aa:d9:3e:
                    09:c7:6d:27:2e:20:81:6b:e6:5a:e0:71:d5:9b:f8:
                    9a:c1:6c:8f:6f:f4:6e:e6:24:d2:5e:0f:bc:89:5b:
                    48:72:38:b1:90:73:11:e9:1c:e0:77:31:9c:e0:ca:
                    d5:f7:fa:ee:af:56:81:22:7e:06:bc:14:ff:8f:72:
                    e1:49:20:c8:85:1e:d9:94:1d:3f:d7:20:5c:a6:8a:
                    a9:da:dc:ef:5f:d2:8d:40:c4:c5:6b:d8:e7:f0:cc:
                    59:62:b6:56:5d:c8:e0:02:bf:84:52:25:77:06:97:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:F5:1E:ED:84:E4:F0:52:50:69:AC:5E:32:BD:84:2F:4C:37:09
            X509v3 Authority Key Identifier:
                keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.11.0/24
                IPv6:
                  2a07:e940::/29

    Signature Algorithm: sha256WithRSAEncryption
         0b:9d:ea:de:d9:65:44:ab:1c:4c:ce:f4:55:75:6b:8e:04:21:
         bd:6d:00:cc:42:97:a8:e4:ca:cd:65:f3:59:62:4f:54:5b:63:
         9b:fb:11:cc:b1:62:3a:80:8f:9d:60:60:cf:7d:37:4a:01:e2:
         15:9f:34:fa:84:f3:5e:2d:1c:73:21:dd:77:25:44:81:b5:ce:
         bc:fb:90:f4:76:f7:ab:3c:c2:bf:fd:83:6b:e6:fb:14:e4:3b:
         c7:48:13:a1:53:6d:65:75:50:0f:7b:0c:7d:47:67:49:a7:94:
         63:32:59:40:23:41:08:08:2b:00:9a:11:dc:1e:18:aa:68:58:
         ca:9f:4f:63:44:26:39:2f:e8:17:b7:ad:33:30:fb:c7:ce:0a:
         0a:de:b8:21:98:84:11:c8:eb:cf:08:b7:61:26:8d:e6:ad:df:
         61:b0:76:5b:ad:87:7c:b3:93:06:91:95:a6:03:cf:b4:87:cc:
         74:2b:e1:85:96:0d:27:d1:35:10:ba:e1:d7:5c:3c:34:f0:62:
         be:70:a6:51:c7:c3:d0:b3:72:70:59:f1:0b:00:f8:0e:ee:75:
         4e:3e:b4:78:0e:6a:0f:ad:3b:98:8b:55:e6:7d:3e:dc:8c:85:
         61:be:19:7c:98:54:1a:4f:fe:75:6e:3e:b5:10:0b:37:76:62:
         fa:03:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----