Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa
File:                     UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (raw, json)
Hash identifier:          cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=
Subject key identifier:   51:6B:7F:5D:17:3D:25:5F:45:30:27:6C:01:C4:CF:45:D8:8E:50:DA
Certificate issuer:       /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial:       01953DAA4067EAFABE4A2D83FAE31B3FB8BC
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa
Signing time:             Tue 25 Feb 2025 15:12:02 +0000
ROA not before:           Tue 25 Feb 2025 15:12:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213518
IP address blocks:        79.170.96.0/22 maxlen: 24
                          2a14:d300::/29 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3d:aa:40:67:ea:fa:be:4a:2d:83:fa:e3:1b:3f:b8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
        Validity
            Not Before: Feb 25 15:12:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=516b7f5d173d255f4530276c01c4cf45d88e50da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:bd:88:59:4e:f9:a7:96:c2:81:7f:06:a8:
                    87:6e:58:22:72:62:18:1b:5e:a2:c5:9e:53:5b:1d:
                    d4:be:9f:11:2e:3e:b5:3e:29:08:b9:51:a6:d9:73:
                    61:a4:fa:8e:f1:22:c1:c2:91:39:aa:80:80:9e:66:
                    bc:92:3d:db:61:f9:33:06:f4:c1:fc:01:ce:aa:7c:
                    56:12:bd:f4:2a:aa:ae:75:64:48:64:3e:e5:d4:9b:
                    2e:b1:50:a4:a1:7b:2a:16:d9:a0:ad:ed:ef:65:21:
                    dd:69:75:30:cb:a0:92:a5:8a:73:f8:47:a6:f6:7e:
                    98:63:50:1b:e9:70:50:c0:79:11:b5:2b:f3:7e:ee:
                    28:d3:56:c0:f1:9e:f0:d9:44:ae:d9:2d:1a:66:d4:
                    f8:dd:22:e9:fb:ba:04:af:6d:92:62:dc:04:d8:43:
                    f4:cf:09:25:e5:d5:db:63:79:cb:60:ea:39:a2:24:
                    47:0f:8b:0f:12:c3:a2:eb:01:e5:9a:e8:8b:cd:1f:
                    59:ae:4f:c2:fa:a3:45:72:a5:49:2b:0f:d6:d2:4a:
                    6c:db:af:81:31:97:7d:24:d4:53:67:6f:c8:dc:dd:
                    43:d5:c2:7c:23:f3:4f:64:7e:f3:46:b5:69:95:53:
                    fe:d9:a2:fe:d0:e7:84:4f:2b:99:cf:01:cb:02:71:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:7F:5D:17:3D:25:5F:45:30:27:6C:01:C4:CF:45:D8:8E:50:DA
            X509v3 Authority Key Identifier:
                keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.170.96.0/22
                IPv6:
                  2a14:d300::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:ba:6e:e5:40:67:c4:31:f0:e0:cc:88:06:37:1f:52:78:
         61:89:5d:3b:bb:30:47:f3:20:bc:a0:e6:8b:e6:4d:30:9f:92:
         86:85:9a:cf:b9:e2:26:25:90:6a:5a:63:f8:7d:66:53:75:08:
         62:ea:f1:ee:7f:f5:94:3f:e7:53:a6:6e:f0:3c:2c:d4:2e:be:
         3c:20:70:9f:ad:4a:d7:c5:15:77:a3:72:91:23:12:05:d6:96:
         e8:cf:ba:41:a4:33:5a:5b:db:98:6e:bd:1d:11:78:2d:4a:9e:
         57:b1:20:47:90:f8:ac:bc:09:00:66:e6:59:81:a5:0c:c0:8f:
         22:d3:9c:ab:01:b2:9b:5c:e2:d3:8e:71:2b:cd:44:5e:79:ab:
         91:1a:d8:78:fa:55:6d:d6:39:c6:3d:c7:02:50:fd:4e:3f:c2:
         d3:9c:e4:3e:e4:51:00:fe:77:9a:ea:49:dd:88:bf:82:9c:fd:
         37:2e:81:63:a4:a7:10:a6:95:73:39:83:7a:ef:93:30:6b:2e:
         13:4d:a2:53:e9:e9:bf:2d:db:1a:8d:39:4d:75:7a:7b:5a:aa:
         27:f8:7e:31:08:74:a5:38:da:16:9a:92:d6:33:ef:51:92:6f:
         9e:32:2a:d7:61:30:8f:74:8b:38:39:97:7c:48:a8:d7:70:e6:
         83:48:fe:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----