Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa
File:                     z4wMvnR06etPJrAf1XPqDyyKG9U.roa (raw, json)
Hash identifier:          8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=
Subject key identifier:   CF:8C:0C:BE:74:74:E9:EB:4F:26:B0:1F:D5:73:EA:0F:2C:8A:1B:D5
Certificate issuer:       /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial:       019420683AA1C96E59610C698B25F27770D2
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa
Signing time:             Wed 01 Jan 2025 05:48:09 +0000
ROA not before:           Wed 01 Jan 2025 05:48:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208446
IP address blocks:        185.137.99.0/24 maxlen: 24
                          2a12:7c40::/29 maxlen: 48
                          2a12:7c40:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:68:3a:a1:c9:6e:59:61:0c:69:8b:25:f2:77:70:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
        Validity
            Not Before: Jan  1 05:48:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=cf8c0cbe7474e9eb4f26b01fd573ea0f2c8a1bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:58:f7:6d:86:33:a7:d5:5d:3a:e8:49:c4:
                    c9:e5:0d:4b:77:1b:7e:df:23:e3:1a:9f:05:32:3d:
                    1c:17:c0:e1:3f:58:c3:36:f1:0e:e9:c8:08:9f:fd:
                    51:ec:6b:80:e9:56:ab:43:ce:f2:3d:35:6f:8c:ca:
                    ca:7c:2d:a1:ff:67:82:cf:3a:7d:3a:8c:53:40:0a:
                    4f:e2:76:fd:31:13:05:52:20:d7:8a:6b:cc:6d:75:
                    23:d3:fc:d1:a9:ea:3c:b5:04:55:20:5b:68:c7:ae:
                    60:8b:a2:bf:cf:52:e3:f5:73:c7:a4:51:12:64:3a:
                    da:39:3d:98:16:03:d4:36:0d:83:ad:0e:51:b8:bc:
                    86:70:73:c2:f3:79:9c:84:97:25:b7:d4:60:33:b7:
                    2c:e4:5c:ec:42:6e:a5:da:95:8e:51:fa:39:e3:f4:
                    46:7a:cb:a6:fb:3d:36:06:f0:8e:35:da:b9:d9:9e:
                    8b:02:08:4a:8c:30:a0:1b:e3:43:67:ec:b6:b5:90:
                    6f:39:77:55:a7:fb:be:ca:2c:d6:33:08:89:f3:61:
                    19:5e:b7:5c:84:e7:de:9e:0b:86:a2:7f:a8:5c:fc:
                    3f:d4:e7:61:01:7c:66:01:f2:58:60:55:0a:44:bd:
                    cc:ae:e3:3a:4b:10:62:6c:db:64:ff:9d:de:e6:41:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8C:0C:BE:74:74:E9:EB:4F:26:B0:1F:D5:73:EA:0F:2C:8A:1B:D5
            X509v3 Authority Key Identifier:
                keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/z4wMvnR06etPJrAf1XPqDyyKG9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.99.0/24
                IPv6:
                  2a12:7c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:ad:0d:c6:f5:ae:81:a0:a2:89:7e:8a:cd:09:72:4e:e0:
         b2:3f:a4:30:c9:9f:9f:d4:91:af:8a:22:e8:7a:dc:10:89:bd:
         4a:ef:8a:5c:8f:f9:d5:2e:6f:4f:e6:51:e3:fd:a1:94:f1:e7:
         77:1d:d9:4c:ea:c0:91:ab:f1:bf:ca:de:70:43:a0:02:e0:e9:
         5c:ba:38:96:a0:b2:dc:25:57:60:00:72:2a:f5:50:6b:95:38:
         07:d7:95:37:9b:ca:f0:c0:f9:fa:89:bd:b3:f3:9e:0d:d2:41:
         16:d3:7f:7f:67:38:6b:8c:74:d2:22:f9:88:a5:f1:47:2f:5e:
         cb:28:45:0d:e4:da:df:28:c5:85:e2:43:01:1b:8b:70:a8:1e:
         56:f7:cb:11:f5:e0:0f:b3:c9:ce:3a:c2:d8:d2:4e:b1:5a:08:
         42:25:87:85:71:c0:9e:20:d1:26:08:7e:07:c0:60:b7:a2:09:
         0b:87:a6:b6:e0:6b:55:6b:84:9e:38:f6:f1:c2:71:fc:ee:84:
         a9:47:2d:bf:79:62:34:58:82:a0:d4:f6:3b:ea:dc:9d:88:2e:
         90:90:e4:d2:5a:d2:e4:97:60:5d:1f:8a:97:89:02:89:1e:03:
         78:6c:c7:0d:b9:c9:8e:8d:76:02:00:8f:ca:25:56:9c:93:5a:
         f6:4d:40:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaDqhyW5ZYQxpiyXyd3DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTRlOTVmYTU5YjUyYjU5OWRiYTQwNmQ3Yjc2ZjM4M2Nh
OTBmYTgwHhcNMjUwMTAxMDU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjhjMGNiZTc0NzRlOWViNGYyNmIwMWZkNTczZWEwZjJjOGExYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCJY922GM6fVXTroScTJ5Q1Ldxt+
3yPjGp8FMj0cF8DhP1jDNvEO6cgIn/1R7GuA6VarQ87yPTVvjMrKfC2h/2eCzzp9
OoxTQApP4nb9MRMFUiDXimvMbXUj0/zRqeo8tQRVIFtox65gi6K/z1Lj9XPHpFES
ZDraOT2YFgPUNg2DrQ5RuLyGcHPC83mchJclt9RgM7cs5FzsQm6l2pWOUfo54/RG
esum+z02BvCONdq52Z6LAghKjDCgG+NDZ+y2tZBvOXdVp/u+yizWMwiJ82EZXrdc
hOfenguGon+oXPw/1OdhAXxmAfJYYFUKRL3MruM6SxBibNtk/53e5kHj2QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFM+MDL50dOnrTyawH9Vz6g8sihvVMB8GA1UdIwQY
MBaAFNWU6V+lm1K1mdukBte3bzg8qQ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQt
ZTNiMGI0MWUyNWM1LzEvejR3TXZuUjA2ZXRQSnJBZjFYUHFEeXlLRzlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQtZTNiMGI0MWUyNWM1
LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYljMA0E
AgACMAcDBQMqEnxAMA0GCSqGSIb3DQEBCwUAA4IBAQBrEq0NxvWugaCiiX6KzQly
TuCyP6QwyZ+f1JGviiLoetwQib1K74pcj/nVLm9P5lHj/aGU8ed3HdlM6sCRq/G/
yt5wQ6AC4OlcujiWoLLcJVdgAHIq9VBrlTgH15U3m8rwwPn6ib2z854N0kEW039/
ZzhrjHTSIvmIpfFHL17LKEUN5NrfKMWF4kMBG4twqB5W98sR9eAPs8nOOsLY0k6x
WghCJYeFccCeINEmCH4HwGC3ogkLh6a24GtVa4SeOPbxwnH87oSpRy2/eWI0WIKg
1PY76tydiC6QkOTSWtLkl2BdH4qXiQKJHgN4bMcNucmOjXYCAI/KJVack1r2TUAv
-----END CERTIFICATE-----