Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa
File:                     jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa (raw, json)
Hash identifier:          RvRrftZ+/LxLaZ6N2kHwAtDW2/FTXY0AOnQQBNDsQnk=
Subject key identifier:   8E:CC:10:E4:C4:BD:C7:AF:06:A1:9D:18:FA:A0:CE:B4:D0:D0:26:92
Certificate issuer:       /CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
Certificate serial:       019423D74E6E632398436F9843F41B5460BF
Authority key identifier: 71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa
Signing time:             Wed 01 Jan 2025 21:48:20 +0000
ROA not before:           Wed 01 Jan 2025 21:48:20 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     51013
IP address blocks:        81.95.108.0/24 maxlen: 24
                          2a02:4a8:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:d7:4e:6e:63:23:98:43:6f:98:43:f4:1b:54:60:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713b9404a0c43223addc8ea1b10ab74b777a2a01
        Validity
            Not Before: Jan  1 21:48:20 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=8ecc10e4c4bdc7af06a19d18faa0ceb4d0d02692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:a7:54:09:41:57:fe:3b:53:af:c5:f2:54:
                    97:11:eb:68:16:2b:33:04:15:32:92:83:f2:24:94:
                    57:c7:8e:fd:01:30:69:ba:2c:38:9f:cf:59:00:db:
                    3f:c0:23:6e:1e:a2:22:c7:38:de:83:10:28:6e:0a:
                    66:a0:ab:39:f1:ec:22:95:be:12:ff:f2:3c:cf:e3:
                    96:97:c4:03:e0:e3:dd:d7:a3:7a:a9:be:42:38:83:
                    c4:d4:1a:d4:4b:bc:fd:b2:a5:2e:0c:d5:9e:97:37:
                    34:c6:83:6b:20:a0:48:36:a1:da:1d:d2:75:34:b4:
                    8a:82:ce:cd:c7:72:96:5a:9c:aa:44:94:3b:8a:56:
                    ac:c0:63:fe:d3:0f:1f:7e:f8:e5:83:40:ca:d0:ea:
                    39:b6:f5:50:e1:e8:6e:8e:db:9a:dc:2e:f2:d0:4b:
                    4e:b1:7b:7f:15:91:c9:33:62:8d:34:1f:38:0f:a8:
                    35:19:e0:a6:c2:02:4a:9e:39:68:cf:c6:db:9a:0b:
                    bf:b7:64:ce:8a:b6:ce:c1:4e:fd:24:d0:98:bb:96:
                    5d:ce:ac:61:ac:f7:b6:05:1a:ea:6e:1d:71:9f:be:
                    af:e1:a2:df:20:cb:2c:08:e5:5a:18:c3:ef:9c:7b:
                    de:c7:37:5f:41:0b:b8:59:f4:5a:da:0a:0c:63:92:
                    4b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CC:10:E4:C4:BD:C7:AF:06:A1:9D:18:FA:A0:CE:B4:D0:D0:26:92
            X509v3 Authority Key Identifier:
                keyid:71:3B:94:04:A0:C4:32:23:AD:DC:8E:A1:B1:0A:B7:4B:77:7A:2A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTuUBKDEMiOt3I6hsQq3S3d6KgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/jswQ5MS9x68GoZ0Y-qDOtNDQJpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7ec7a2-8318-462f-966e-7a531d483747/1/cTuUBKDEMiOt3I6hsQq3S3d6KgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.95.108.0/24
                IPv6:
                  2a02:4a8:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:fa:fb:ff:a5:12:63:47:c3:ef:e1:84:67:52:a1:6a:b6:3e:
         da:9b:f0:52:ba:95:b9:0b:6f:82:3f:c3:25:db:58:dd:7e:52:
         02:64:4d:10:1f:0a:a6:b1:24:d2:46:c4:90:e7:54:2c:44:ab:
         52:a1:da:04:2d:47:dd:de:97:8d:99:70:dc:d8:3d:41:e1:32:
         4a:3a:6b:f9:a7:1b:eb:f4:62:c1:4a:96:e9:6d:da:84:2f:c1:
         b0:07:f6:ca:68:ef:6f:bd:7d:e9:ec:d2:4e:6d:96:17:91:c3:
         83:e3:3f:b2:26:a2:e2:b0:ec:86:13:4c:c6:3e:bb:21:b9:ba:
         62:f0:ed:0c:6e:f6:e7:f4:cc:7c:d0:76:e8:33:34:cf:4f:51:
         97:46:1f:52:d0:2e:d6:20:49:d2:c1:a7:8f:bb:c5:14:6f:83:
         53:cd:9b:3e:43:9c:ae:22:a7:4f:00:c2:b4:03:e8:cc:0e:dc:
         3d:26:b9:42:18:e4:c4:1f:42:12:b6:31:fc:12:99:39:17:0f:
         65:39:18:f3:a5:55:e0:ec:59:73:9b:b6:64:d4:01:aa:c1:ad:
         6c:51:d5:b5:ff:8b:2d:97:ba:8e:dc:63:e4:56:ee:59:46:b6:
         31:5a:f5:31:2e:07:de:38:52:a9:6f:4f:5b:3a:45:70:f0:ec:
         8d:65:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----