Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sPq2HD-6pM23d6n2GdQpZdJfwxA.roa
File:                     sPq2HD-6pM23d6n2GdQpZdJfwxA.roa (raw, json)
Hash identifier:          i5wFibRAdH0HwsluBxmFPReliYX+CB0QHMLmQ4xAbF4=
Subject key identifier:   B0:FA:B6:1C:3F:BA:A4:CD:B7:77:A9:F6:19:D4:29:65:D2:5F:C3:10
Certificate issuer:       /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial:       019610716A0807AA869CC51260DB97E6F1B6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sPq2HD-6pM23d6n2GdQpZdJfwxA.roa
Signing time:             Mon 07 Apr 2025 13:29:50 +0000
ROA not before:           Mon 07 Apr 2025 13:29:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4515
IP address blocks:        151.242.180.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:71:6a:08:07:aa:86:9c:c5:12:60:db:97:e6:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
        Validity
            Not Before: Apr  7 13:29:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b0fab61c3fbaa4cdb777a9f619d42965d25fc310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:03:f0:c3:c1:21:64:c3:2e:e0:79:3a:b2:
                    ca:9e:dc:ca:f0:b1:a1:da:af:46:c6:26:ad:a4:16:
                    b3:6a:72:a7:14:3d:61:90:94:31:a7:67:f4:41:14:
                    b0:76:eb:fd:84:10:5f:8e:65:ff:93:61:26:e5:61:
                    01:77:47:97:65:76:8e:f8:1d:ab:2a:0a:b5:d6:5e:
                    c9:39:38:22:02:48:25:87:00:26:1b:d7:a2:b5:35:
                    cd:14:86:8c:c8:0f:ac:a9:bb:3b:19:4e:54:01:8a:
                    b8:61:69:6a:b2:c8:2a:06:c6:7c:0e:38:d5:bd:9d:
                    fb:1e:37:fd:df:7b:d0:98:97:44:7b:ca:e3:4f:cc:
                    b0:a2:0d:de:f1:bb:fc:dd:c5:57:cb:3b:2c:8b:8a:
                    8f:bd:9a:e9:0f:38:08:aa:1f:16:37:90:00:30:6c:
                    f9:91:31:8e:9e:76:c6:17:31:01:98:11:25:de:28:
                    31:d3:f4:18:2b:99:75:d0:f0:10:a4:79:ee:3c:57:
                    47:47:08:6b:c8:49:83:18:9b:62:34:75:ef:ba:06:
                    ff:ab:61:ad:70:9c:8c:c7:63:ac:ae:95:2b:8a:e2:
                    93:e7:c3:21:25:14:0c:b9:6e:e8:a5:f9:89:19:58:
                    23:d5:1b:60:50:e1:95:87:79:43:9e:4a:06:cd:22:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FA:B6:1C:3F:BA:A4:CD:B7:77:A9:F6:19:D4:29:65:D2:5F:C3:10
            X509v3 Authority Key Identifier:
                keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sPq2HD-6pM23d6n2GdQpZdJfwxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.242.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:ae:68:44:1d:19:59:6f:a6:7f:9f:8e:0a:7b:6a:d0:c2:
         29:2d:1a:40:d7:a8:5f:c0:a0:67:b2:8d:27:45:c8:25:d3:86:
         9e:06:38:7d:54:1b:f9:0c:bb:48:a7:35:47:5e:f2:b1:9f:23:
         eb:a4:bf:34:f8:45:44:89:55:fb:72:d0:81:7a:1a:d7:bd:be:
         68:75:70:53:ed:6b:64:fc:8a:32:98:a5:10:36:96:66:a9:94:
         83:30:5e:b8:46:f0:dd:c6:08:1b:b8:77:a7:81:41:ae:36:e9:
         fc:bb:98:a5:1d:7e:43:b2:ca:ea:9d:7d:35:4c:38:93:68:e7:
         9f:7b:ee:70:52:dd:d7:b4:0c:60:c2:f7:eb:d0:3d:20:a8:a2:
         0f:12:e6:72:78:cf:46:38:d2:2b:e9:c4:76:2e:09:ec:da:35:
         a3:8a:9b:04:cd:9d:72:f6:32:41:f3:8b:fc:95:0e:a7:c2:78:
         7d:bd:6e:0f:10:9f:30:63:1a:23:18:13:b8:aa:1b:c6:e4:fd:
         a5:40:12:b1:7f:f6:a2:47:7b:5f:1a:24:7a:e0:b4:f3:e7:cb:
         f7:da:7f:90:ce:37:60:8c:54:f7:86:77:88:42:d0:13:90:7f:
         d1:d9:52:fa:9c:60:db:ad:ef:b4:c3:8f:1a:eb:12:ce:9b:f9:
         d0:3b:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----