Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa
File:                     Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (raw, json)
Hash identifier:          5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=
Subject key identifier:   25:AF:B5:38:77:E5:04:F5:79:BB:39:2B:CE:CA:D4:91:C9:1C:48:34
Certificate issuer:       /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial:       019426D91AC7CCB8A171165093AE366F5433
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa
Signing time:             Thu 02 Jan 2025 11:49:09 +0000
ROA not before:           Thu 02 Jan 2025 11:49:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     59755
IP address blocks:        185.71.8.0/22 maxlen: 22
                          2a03:37a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:1a:c7:cc:b8:a1:71:16:50:93:ae:36:6f:54:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
        Validity
            Not Before: Jan  2 11:49:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=25afb53877e504f579bb392bcecad491c91c4834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:c4:b8:35:c3:21:db:6d:b9:5c:8b:0a:b1:
                    d0:d1:08:6a:1d:ff:08:ad:dc:d5:00:c1:95:1c:e8:
                    06:19:e7:e1:cb:27:9c:2b:e3:86:6d:3c:76:a0:0f:
                    9d:b3:62:74:d8:0f:24:8d:5f:4a:29:e2:cb:d8:e9:
                    f6:71:6f:fc:92:3a:e8:fa:c5:44:9e:25:57:4b:c1:
                    bb:70:e6:9e:f2:61:04:dd:59:a2:89:02:14:17:2e:
                    cb:22:a7:38:57:d2:e4:ce:4c:88:f1:41:82:af:10:
                    0c:9d:1b:61:9e:ca:93:32:3a:c2:3e:56:fb:03:81:
                    ba:e8:76:24:09:97:ef:33:3f:a2:8b:13:ba:98:cd:
                    10:39:e3:2d:cb:70:9a:85:91:ff:26:76:d6:6b:0b:
                    2e:42:4c:21:f4:d2:db:e9:c5:e6:6f:af:ec:40:47:
                    5d:4f:f2:d1:04:93:f7:18:5b:bf:47:ad:45:87:66:
                    56:63:c6:db:a0:f3:ca:6f:fc:64:12:ca:8b:2e:c1:
                    cd:9f:84:cc:a1:bd:cb:83:e9:00:a9:9e:73:92:48:
                    47:4d:72:88:06:8b:d6:9d:4f:5a:fd:9e:fa:c8:f0:
                    6f:80:9d:39:83:7b:27:96:fc:fa:be:da:79:f5:50:
                    16:ae:3c:81:6e:d5:c1:14:55:a5:15:2e:3a:ea:8e:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AF:B5:38:77:E5:04:F5:79:BB:39:2B:CE:CA:D4:91:C9:1C:48:34
            X509v3 Authority Key Identifier:
                keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.71.8.0/22
                IPv6:
                  2a03:37a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:72:c7:02:5d:d6:74:f1:36:e3:40:85:37:75:c9:79:f4:
         a0:53:9b:b4:4d:b5:7c:bf:85:9b:ea:a5:ab:d5:e0:6d:da:19:
         4a:95:68:db:3e:2f:85:0d:05:2d:8a:48:d4:0b:0a:c4:8a:5a:
         70:24:d7:75:d5:94:e5:e8:f4:04:9e:54:df:be:37:f2:2d:b9:
         09:04:db:bb:39:a1:ba:87:5f:bd:70:e7:0d:22:e2:80:d9:8c:
         e5:36:37:78:73:d3:1e:a5:e7:a9:30:ce:50:10:55:c7:da:e3:
         9e:e3:e3:f9:2e:b3:c4:c2:6a:38:0f:6f:b5:9e:8e:da:a1:e5:
         36:ff:c2:02:2c:e7:76:51:00:47:55:1d:d6:7e:c3:a4:04:54:
         8c:b7:3d:a5:94:46:6f:30:e9:87:17:f5:30:11:bd:05:3c:78:
         59:6c:d4:f4:11:1d:92:44:67:1d:a9:91:cd:cc:5d:77:b2:94:
         f7:d7:3a:73:52:bd:bc:79:bd:01:fe:69:7a:55:7d:b6:db:10:
         95:d1:b4:ca:fc:b7:fb:39:b8:49:0c:79:79:d1:c2:62:f7:f7:
         32:0a:8c:02:c6:fc:bf:b8:b6:a6:6b:e6:a7:d1:54:35:31:7b:
         9a:8c:f7:b6:f0:3c:28:8f:bb:13:db:ac:46:70:ed:ff:2c:ae:
         d3:b8:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----