Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa
File:                     Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa (raw, json)
Hash identifier:          W+Jc00IUJdyvPz1MZqpBm2Jn6DassHktVVAV8ICXpsc=
Subject key identifier:   09:BD:31:72:3F:89:C6:2F:A4:56:66:F8:D0:FF:69:16:2C:90:01:4D
Certificate issuer:       /CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
Certificate serial:       019424B3A516278BD96D1CEB02A9AF682DA8
Authority key identifier: 10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa
Signing time:             Thu 02 Jan 2025 01:49:00 +0000
ROA not before:           Thu 02 Jan 2025 01:49:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     24971
IP address blocks:        185.32.160.0/22 maxlen: 24
                          2a00:a5a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:a5:16:27:8b:d9:6d:1c:eb:02:a9:af:68:2d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10af800ce95bfbb1f473b0b5f9f7b93175930e89
        Validity
            Not Before: Jan  2 01:49:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=09bd31723f89c62fa45666f8d0ff69162c90014d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:02:47:1e:8c:f8:43:0c:07:45:ea:5a:f7:e2:
                    e5:83:ce:25:a6:ad:d9:e6:7a:07:48:98:a1:7c:35:
                    c0:ed:a6:09:c4:ba:7b:82:57:63:cc:be:da:c9:59:
                    5a:d8:c5:37:20:e8:ea:27:df:32:23:b8:f8:70:8f:
                    52:d2:4a:97:ec:de:4c:bc:58:47:b0:57:7d:21:52:
                    6c:33:22:aa:47:32:96:72:e8:46:35:60:5e:97:75:
                    22:f4:60:65:5e:20:5c:c1:f7:56:b9:df:7b:20:d6:
                    6c:29:8f:9f:83:dc:1d:a8:eb:cd:b7:ec:61:29:87:
                    f5:e8:84:45:a0:50:3d:e6:da:a1:a1:74:ef:a3:e8:
                    30:9b:93:1f:50:1d:cf:c0:a2:d8:ec:b2:73:db:67:
                    51:cc:d0:c4:0c:33:82:ae:68:51:83:24:e0:36:af:
                    ca:33:99:7b:9d:14:14:a5:e1:b0:dd:92:4b:cf:ec:
                    05:12:73:1c:c4:71:cc:76:cd:5f:2f:fa:03:34:1f:
                    8a:02:0a:56:94:4a:78:d7:f3:eb:94:72:2a:bd:bd:
                    f6:48:30:78:88:0e:92:a4:ff:1c:12:b5:e8:93:29:
                    49:49:9d:be:51:dc:11:0b:d4:21:38:de:9d:ec:46:
                    62:ec:31:e4:e2:c0:a5:48:38:41:e1:0a:07:fd:61:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BD:31:72:3F:89:C6:2F:A4:56:66:F8:D0:FF:69:16:2C:90:01:4D
            X509v3 Authority Key Identifier:
                keyid:10:AF:80:0C:E9:5B:FB:B1:F4:73:B0:B5:F9:F7:B9:31:75:93:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK-ADOlb-7H0c7C1-fe5MXWTDok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/Cb0xcj-Jxi-kVmb40P9pFiyQAU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9a78e6-3bf7-42b6-8cbf-119942f3d7a7/1/EK-ADOlb-7H0c7C1-fe5MXWTDok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.32.160.0/22
                IPv6:
                  2a00:a5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:fa:d5:8e:19:43:13:a1:9f:29:93:82:0f:74:87:6f:c7:
         d3:35:52:10:9d:db:17:e4:5a:37:df:53:96:81:93:ad:3d:09:
         2f:b4:95:3d:7d:be:9d:cb:37:36:27:cf:58:88:64:20:d6:49:
         ac:98:cc:18:10:3b:06:f0:80:f2:51:22:26:a1:fa:ba:bc:40:
         07:cf:26:69:cc:50:fc:39:d5:d1:a0:77:84:2a:e2:2c:00:a0:
         42:cd:2f:a9:66:b3:0f:6e:9d:6c:ba:e5:92:28:99:0c:27:18:
         08:84:ef:78:6c:58:49:f0:22:ea:df:3d:c5:8d:f7:43:df:28:
         b8:c8:cf:72:01:be:57:cd:22:19:82:0f:cf:3e:c8:c2:bf:85:
         83:b8:30:02:4a:8c:be:f9:bf:b6:46:ca:57:75:d7:ea:98:13:
         25:47:95:31:0d:a5:75:61:f3:19:a5:3d:14:5d:e3:75:15:aa:
         52:dd:9b:c9:1f:5b:8c:5d:dd:8d:4c:2e:ee:a8:86:ed:42:d7:
         01:8f:13:72:db:62:67:9e:3f:c8:28:88:d6:ef:f9:a1:ad:3d:
         2a:85:30:d1:1f:5d:66:ce:67:16:8c:7d:4e:46:b8:dd:e7:09:
         25:e5:e6:bd:2b:17:f6:46:bf:b4:a7:95:a6:b5:d8:c1:54:f8:
         01:5c:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----