Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/Rk8F0_O96bWnV23XOY1ym8DMObc.roa
File:                     Rk8F0_O96bWnV23XOY1ym8DMObc.roa (raw, json)
Hash identifier:          mN43AwUntAXDuv+4vVnXFfluzZ73Kps3qVN8w0gCSEI=
Subject key identifier:   46:4F:05:D3:F3:BD:E9:B5:A7:57:6D:D7:39:8D:72:9B:C0:CC:39:B7
Certificate issuer:       /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial:       0194228D6E91A6FAC5A289B65BDB4FEB1441
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/Rk8F0_O96bWnV23XOY1ym8DMObc.roa
Signing time:             Wed 01 Jan 2025 15:48:01 +0000
ROA not before:           Wed 01 Jan 2025 15:48:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     206894
IP address blocks:        185.172.216.0/22 maxlen: 22
                          2a0b:2700::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:8d:6e:91:a6:fa:c5:a2:89:b6:5b:db:4f:eb:14:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
        Validity
            Not Before: Jan  1 15:48:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=464f05d3f3bde9b5a7576dd7398d729bc0cc39b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:86:00:9a:d5:6f:4a:42:2e:bc:b7:43:53:
                    38:5e:23:32:8e:da:91:49:47:ef:9e:30:b0:b9:f0:
                    0c:8d:d2:36:df:a0:c5:dd:cb:ce:b0:c8:91:fc:8e:
                    9e:4b:fc:d5:a3:25:e6:e1:c5:59:84:f1:30:a0:35:
                    c3:26:69:df:82:2a:fb:21:c6:78:5d:4e:57:9e:c4:
                    78:e5:cb:86:2e:cb:bd:cc:77:4b:65:d4:7e:3d:bf:
                    ac:1c:4e:54:1d:d0:43:fc:6d:f8:f3:e2:0b:51:12:
                    a0:b0:95:17:c8:0a:f8:22:56:cd:df:b5:44:96:6c:
                    7c:71:cb:45:c4:bb:3b:eb:75:49:80:f5:87:08:be:
                    88:fc:71:33:30:3a:98:b3:2c:53:8b:96:5c:a7:a2:
                    3d:e7:59:bd:43:41:ce:63:d6:cb:50:a9:89:21:ff:
                    b3:39:7a:e6:ab:73:5f:8f:14:b8:af:de:33:8c:d9:
                    2d:1b:86:9c:61:17:8e:45:90:eb:49:78:30:9d:1e:
                    01:14:64:19:7d:00:1c:fb:c5:0a:63:8a:8a:28:7f:
                    4e:0e:de:e0:e5:56:62:49:2d:a2:7b:14:e3:99:96:
                    be:c7:ed:89:d4:36:43:7e:d6:73:67:1c:b2:f5:76:
                    88:03:30:a9:06:b9:5f:27:60:ef:7a:ab:bd:20:cc:
                    df:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4F:05:D3:F3:BD:E9:B5:A7:57:6D:D7:39:8D:72:9B:C0:CC:39:B7
            X509v3 Authority Key Identifier:
                keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/Rk8F0_O96bWnV23XOY1ym8DMObc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.172.216.0/22
                IPv6:
                  2a0b:2700::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:da:14:f1:61:fa:fe:b3:ce:c9:ce:0d:15:3d:be:a2:44:ef:
         4c:57:e3:8c:43:d4:f5:0c:2a:e3:68:72:37:96:7f:43:39:60:
         e0:d8:15:63:c3:7f:98:f5:f8:26:71:3d:c3:97:5c:29:11:2f:
         03:8b:cb:21:81:f2:e8:bd:47:d9:9b:45:b4:06:99:b4:02:32:
         3f:29:99:25:dd:01:3d:81:d6:c1:72:fb:c2:ee:5e:a5:26:c2:
         94:38:70:af:d2:27:40:f0:1d:b5:dd:20:70:2e:52:a5:c3:7a:
         48:47:77:1e:99:e2:f4:1d:2a:a8:e7:8d:eb:80:d3:cf:5f:f9:
         b1:cc:e6:c1:1b:1e:b5:71:9e:9c:8e:8d:af:d1:ba:06:ed:10:
         95:c4:36:c5:0f:a2:80:41:c9:34:38:6a:fc:de:f6:a8:82:5f:
         c5:24:7a:1c:5d:42:a7:3d:72:6c:d2:0e:77:2f:29:a2:80:93:
         7c:8c:22:59:8c:59:9b:c6:3c:78:6e:f9:be:30:df:a4:9b:b4:
         17:6e:43:84:b1:7b:dd:07:fc:86:65:5d:64:05:05:c8:38:7a:
         5d:1c:f8:91:f4:8f:c2:19:53:d9:4b:4e:ca:2f:e7:64:94:ae:
         21:a0:d1:f5:bc:48:bf:5c:5a:6f:a5:71:fb:72:fe:c5:5a:86:
         a7:4d:83:34
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijW6RpvrFoom2W9tP6xRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjUwMTAxMTU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjRmMDVkM2YzYmRlOWI1YTc1NzZkZDczOThkNzI5YmMwY2MzOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0GGAJrVb0pCLry3Q1M4XiMyjtqR
SUfvnjCwufAMjdI236DF3cvOsMiR/I6eS/zVoyXm4cVZhPEwoDXDJmnfgir7IcZ4
XU5XnsR45cuGLsu9zHdLZdR+Pb+sHE5UHdBD/G348+ILURKgsJUXyAr4IlbN37VE
lmx8cctFxLs763VJgPWHCL6I/HEzMDqYsyxTi5Zcp6I951m9Q0HOY9bLUKmJIf+z
OXrmq3NfjxS4r94zjNktG4acYReORZDrSXgwnR4BFGQZfQAc+8UKY4qKKH9ODt7g
5VZiSS2iexTjmZa+x+2J1DZDftZzZxyy9XaIAzCpBrlfJ2Dvequ9IMzfMwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEZPBdPzvem1p1dt1zmNcpvAzDm3MB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvUms4RjBfTzk2YlduVjIzWE9ZMXltOERNT2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuazYMA0E
AgACMAcDBQMqCycAMA0GCSqGSIb3DQEBCwUAA4IBAQBj2hTxYfr+s87Jzg0VPb6i
RO9MV+OMQ9T1DCrjaHI3ln9DOWDg2BVjw3+Y9fgmcT3Dl1wpES8Di8shgfLovUfZ
m0W0Bpm0AjI/KZkl3QE9gdbBcvvC7l6lJsKUOHCv0idA8B213SBwLlKlw3pIR3ce
meL0HSqo543rgNPPX/mxzObBGx61cZ6cjo2v0boG7RCVxDbFD6KAQck0OGr83vao
gl/FJHocXUKnPXJs0g53LymigJN8jCJZjFmbxjx4bvm+MN+km7QXbkOEsXvdB/yG
ZV1kBQXIOHpdHPiR9I/CGVPZS07KL+dklK4hoNH1vEi/XFpvpXH7cv7FWoanTYM0
-----END CERTIFICATE-----