Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/aaI39-DbGwiYxab88qud3MKXp8I.roa
File:                     aaI39-DbGwiYxab88qud3MKXp8I.roa (raw, json)
Hash identifier:          hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=
Subject key identifier:   69:A2:37:F7:E0:DB:1B:08:98:C5:A6:FC:F2:AB:9D:DC:C2:97:A7:C2
Certificate issuer:       /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial:       019426D9E1993E35128AE21F4E4624489B6F
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/aaI39-DbGwiYxab88qud3MKXp8I.roa
Signing time:             Thu 02 Jan 2025 11:50:00 +0000
ROA not before:           Thu 02 Jan 2025 11:50:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     41847
IP address blocks:        185.187.56.0/22 maxlen: 24
                          2a0b:9780::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:e1:99:3e:35:12:8a:e2:1f:4e:46:24:48:9b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
        Validity
            Not Before: Jan  2 11:50:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a237f7e0db1b0898c5a6fcf2ab9ddcc297a7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:16:50:b4:23:4f:c4:e7:27:98:8f:d4:d6:a5:
                    b4:8d:af:17:32:1b:43:b9:dd:71:d6:30:12:f0:00:
                    1a:04:f8:60:1a:80:79:2e:a2:0b:65:f1:93:83:1b:
                    70:a8:28:0c:58:30:b0:33:34:ce:73:c3:11:00:05:
                    e1:1c:a1:fc:2a:89:36:2d:3b:0c:7d:b6:04:34:8e:
                    b8:3f:23:24:d3:53:54:18:82:b5:b9:fa:09:20:59:
                    c1:8a:9e:28:41:7c:ce:8c:b3:06:d0:98:b5:bf:71:
                    97:82:25:67:e5:6f:5a:07:b2:8f:a3:9f:4d:8a:76:
                    dd:2f:b9:3b:97:e8:88:60:7d:57:37:11:3b:39:03:
                    dc:40:36:71:d9:11:85:70:ba:0b:a4:b7:b6:85:be:
                    74:0e:11:c4:a8:76:52:8d:e4:3f:e1:64:36:d8:46:
                    43:45:3f:16:c8:75:e2:1b:04:52:f2:fb:5e:1e:4a:
                    b3:5c:f1:db:bb:cd:d1:68:27:c4:90:44:b3:c7:c6:
                    32:33:20:76:29:d6:bd:f2:31:8d:0f:2a:ef:13:ec:
                    74:89:bd:1c:c1:46:a0:e4:f5:fb:62:de:84:ed:1d:
                    f3:fd:cb:f5:be:3c:f9:44:79:88:c5:fa:21:41:75:
                    6a:df:74:92:91:01:0f:60:aa:2d:fb:38:af:e9:bf:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:37:F7:E0:DB:1B:08:98:C5:A6:FC:F2:AB:9D:DC:C2:97:A7:C2
            X509v3 Authority Key Identifier:
                keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/aaI39-DbGwiYxab88qud3MKXp8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.187.56.0/22
                IPv6:
                  2a0b:9780::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:81:23:65:28:b2:ca:56:21:05:d4:c1:89:5f:72:75:a9:2c:
         5a:52:76:8d:ca:b4:e4:c0:f0:ee:be:7b:ab:a7:1a:46:40:0f:
         05:ba:5f:b7:d6:21:95:f9:99:bd:fe:18:05:00:a6:61:03:51:
         39:ac:42:3e:b9:bb:a4:c4:05:99:5e:0e:fc:4e:9e:1e:be:d3:
         d8:93:7a:60:9b:a2:69:56:ac:fa:6d:53:17:c3:50:2b:d4:ae:
         60:b9:40:d7:27:ac:bf:59:da:b1:ce:c1:a0:bf:cb:57:cc:60:
         ab:b6:8e:18:ab:ff:1a:91:5f:67:dd:e3:fd:09:96:5e:13:b0:
         0a:be:de:c7:f7:ca:d8:05:a6:bf:73:f6:7c:5f:8f:20:0c:38:
         2a:1b:4c:a2:43:f4:14:ef:77:74:94:b5:ec:91:27:f6:35:b1:
         b7:f0:f9:5f:b5:2e:d3:1a:5f:17:be:2e:9f:6f:6c:0b:72:47:
         65:36:5f:b3:71:59:5f:d8:3d:55:1e:d8:c4:d8:2e:38:43:46:
         20:90:60:f7:52:0b:b9:18:22:72:e5:37:c9:33:dd:f0:43:51:
         5e:bd:79:23:64:9d:d1:62:b1:61:d9:c7:32:4a:34:86:e4:00:
         b0:2b:9f:97:8b:e4:a7:3e:33:f8:2f:00:52:d9:9b:a1:f4:14:
         a9:f1:da:5b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQm2eGZPjUSiuIfTkYkSJtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmU0MDdhNmI5OWMwZjA1MjkzMmNjNzc3ZmYwZGU5YjNh
MTk3NGUwHhcNMjUwMTAyMTE1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWEyMzdmN2UwZGIxYjA4OThjNWE2ZmNmMmFiOWRkY2MyOTdhN2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxZQtCNPxOcnmI/U1qW0ja8XMhtD
ud1x1jAS8AAaBPhgGoB5LqILZfGTgxtwqCgMWDCwMzTOc8MRAAXhHKH8Kok2LTsM
fbYENI64PyMk01NUGIK1ufoJIFnBip4oQXzOjLMG0Ji1v3GXgiVn5W9aB7KPo59N
inbdL7k7l+iIYH1XNxE7OQPcQDZx2RGFcLoLpLe2hb50DhHEqHZSjeQ/4WQ22EZD
RT8WyHXiGwRS8vteHkqzXPHbu83RaCfEkESzx8YyMyB2Kda98jGNDyrvE+x0ib0c
wUag5PX7Yt6E7R3z/cv1vjz5RHmIxfohQXVq33SSkQEPYKot+ziv6b8F6wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGmiN/fg2xsImMWm/PKrndzCl6fCMB8GA1UdIwQY
MBaAFGVuQHprmcDwUpMsx3f/DemzoZdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYt
YzAxNWE5ZDRmOGVmLzEvYWFJMzktRGJHd2lZeGFiODhxdWQzTUtYcDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYtYzAxNWE5ZDRmOGVm
LzEvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubs4MA0E
AgACMAcDBQMqC5eAMA0GCSqGSIb3DQEBCwUAA4IBAQAJgSNlKLLKViEF1MGJX3J1
qSxaUnaNyrTkwPDuvnurpxpGQA8Ful+31iGV+Zm9/hgFAKZhA1E5rEI+ubukxAWZ
Xg78Tp4evtPYk3pgm6JpVqz6bVMXw1Ar1K5guUDXJ6y/WdqxzsGgv8tXzGCrto4Y
q/8akV9n3eP9CZZeE7AKvt7H98rYBaa/c/Z8X48gDDgqG0yiQ/QU73d0lLXskSf2
NbG38PlftS7TGl8Xvi6fb2wLckdlNl+zcVlf2D1VHtjE2C44Q0YgkGD3Ugu5GCJy
5TfJM93wQ1FevXkjZJ3RYrFh2ccySjSG5ACwK5+Xi+SnPjP4LwBS2Zuh9BSp8dpb
-----END CERTIFICATE-----