Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa
File:                     qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (raw, json)
Hash identifier:          5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=
Subject key identifier:   AA:7E:26:CD:80:97:74:54:41:9F:15:B2:5C:17:8B:F4:DC:D4:1B:04
Certificate issuer:       /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial:       0194258F74DD2AD3CB43E574D234481198B5
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa
Signing time:             Thu 02 Jan 2025 05:49:05 +0000
ROA not before:           Thu 02 Jan 2025 05:49:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     42700
IP address blocks:        194.110.199.0/24 maxlen: 24
                          2001:678:1ec::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:74:dd:2a:d3:cb:43:e5:74:d2:34:48:11:98:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
        Validity
            Not Before: Jan  2 05:49:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=aa7e26cd80977454419f15b25c178bf4dcd41b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:c8:d1:a5:33:b1:38:58:ef:d8:c0:88:8e:
                    75:10:3a:20:19:44:e9:c3:93:7a:56:00:59:c7:2a:
                    6a:9d:ee:7b:4c:cd:2b:77:76:20:c8:53:53:23:f0:
                    c0:68:52:13:de:63:a8:4c:e0:6e:db:41:45:32:c7:
                    ed:2d:93:6b:7e:28:59:17:9c:80:dc:a4:b5:53:75:
                    ad:71:d3:63:66:70:bb:83:63:47:4f:65:5d:78:47:
                    1b:1e:49:b8:b3:f2:28:fe:a5:25:d6:de:34:fd:ad:
                    8e:06:78:c3:2f:bc:09:3a:de:07:66:9a:ad:dd:27:
                    62:1f:73:25:4a:cb:0e:3e:41:da:e0:cf:52:a8:98:
                    ef:b8:be:70:36:78:5c:45:69:4e:cb:65:f0:91:47:
                    2b:e2:07:d9:60:38:9e:17:36:6e:4d:05:4c:44:8b:
                    83:fa:dc:9d:22:27:dc:aa:92:63:61:b1:e1:18:b9:
                    e1:d5:ee:f4:dd:5d:d3:70:67:ab:09:6e:82:f6:11:
                    f1:f1:1c:1e:e0:f8:fd:de:f1:a0:5d:8c:38:dc:5d:
                    4c:95:8a:73:32:85:ea:8b:80:a8:de:83:c4:fe:13:
                    c8:e7:d4:14:54:8d:7a:e3:ab:bf:f8:a7:dc:76:9a:
                    2a:2b:f0:87:30:5e:1d:72:bd:da:a7:21:9a:09:dd:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:26:CD:80:97:74:54:41:9F:15:B2:5C:17:8B:F4:DC:D4:1B:04
            X509v3 Authority Key Identifier:
                keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.199.0/24
                IPv6:
                  2001:678:1ec::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:e7:e8:54:77:ae:bc:c7:eb:a9:3b:d6:6b:7b:20:80:7c:97:
         07:18:ff:e5:c2:c9:7c:84:ce:07:20:3f:4b:7f:8e:0e:94:6c:
         34:48:86:26:4f:81:b0:76:d5:36:ae:74:1d:5d:bd:f0:aa:8d:
         3c:c0:8e:73:d1:51:e0:84:84:0a:f3:32:37:28:17:9d:3d:d9:
         8c:a1:f3:fe:22:de:14:0a:0c:09:74:22:1a:3d:33:26:b1:9f:
         8f:ad:86:9f:c7:7f:0e:1d:fc:cb:0c:c6:8a:40:83:f0:2e:af:
         96:fd:64:84:25:e9:ca:e5:71:13:e8:f4:8c:ab:a9:49:5f:55:
         ef:fb:a7:4e:8a:2c:29:ff:04:82:d6:bb:d3:54:39:ae:fa:99:
         aa:33:3e:fe:3f:80:73:3b:ba:99:3a:29:cd:6c:10:1e:54:a7:
         b1:b3:d4:c5:29:ee:27:fb:70:6d:ba:8e:93:d6:ab:59:c8:78:
         36:de:85:1d:b2:ad:98:13:da:84:fe:18:2c:bd:db:f0:1b:df:
         72:75:08:d5:a0:8c:27:16:a3:b3:53:3b:0f:81:b6:57:b3:04:
         83:f9:a0:91:c4:03:ac:cf:8b:51:06:e1:9b:33:cf:2e:c2:8e:
         10:84:8d:d3:1f:12:ca:8e:f0:01:78:b7:ed:ba:d0:6d:d0:b6:
         a0:89:df:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----