Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/auh_CELZVQItOo9vbdk8bNA5drU.roa
File:                     auh_CELZVQItOo9vbdk8bNA5drU.roa (raw, json)
Hash identifier:          lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=
Subject key identifier:   6A:E8:7F:08:42:D9:55:02:2D:3A:8F:6F:6D:D9:3C:6C:D0:39:76:B5
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       01941FFA613473AB9E64D11D81D0CC8DCA8F
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/auh_CELZVQItOo9vbdk8bNA5drU.roa
Signing time:             Wed 01 Jan 2025 03:48:10 +0000
ROA not before:           Wed 01 Jan 2025 03:48:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198838
IP address blocks:        193.109.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:fa:61:34:73:ab:9e:64:d1:1d:81:d0:cc:8d:ca:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Jan  1 03:48:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6ae87f0842d955022d3a8f6f6dd93c6cd03976b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:04:71:ac:fd:51:a5:84:9e:7e:28:0a:c4:
                    d3:83:94:4e:8d:81:13:c8:02:e8:75:cf:15:6d:ec:
                    2d:09:40:99:f5:6c:99:04:94:df:ec:42:43:98:86:
                    29:cc:d4:35:56:eb:1c:5a:cd:19:11:52:6e:55:13:
                    e6:57:12:0a:5e:a4:36:9d:9d:cb:dc:98:c4:06:bc:
                    c7:4b:d8:41:72:5f:00:1f:b5:3c:a8:8f:12:09:c0:
                    2d:d6:6c:be:48:66:9a:c6:f8:d1:df:d6:ad:92:75:
                    12:1f:fc:34:e0:91:15:b0:74:6e:33:01:de:3c:32:
                    f0:68:29:8b:80:f2:0f:3c:dc:ca:4f:04:4b:47:a9:
                    37:97:e1:67:f0:29:40:f9:e6:d9:b7:e6:26:4a:e8:
                    c2:54:ba:ae:9e:6d:38:2e:35:eb:a7:72:2d:2d:fa:
                    eb:cf:88:4f:c5:b5:c8:3f:e2:64:4c:03:6c:81:47:
                    74:f9:17:67:55:94:ee:ee:90:2a:ca:24:19:57:4c:
                    9f:83:fe:76:6d:4c:e4:86:69:0c:61:92:6f:f3:05:
                    36:aa:52:9a:6d:f9:f7:b7:23:6d:3e:41:08:40:03:
                    9e:95:9c:b8:5a:41:52:ab:2b:64:1e:92:e7:71:54:
                    08:89:a6:d7:8d:03:c9:7a:3d:e8:0a:b4:e3:c8:ed:
                    fb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:7F:08:42:D9:55:02:2D:3A:8F:6F:6D:D9:3C:6C:D0:39:76:B5
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/auh_CELZVQItOo9vbdk8bNA5drU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:3d:86:bb:e7:07:d2:03:7f:f9:d0:f8:f8:d7:bc:8d:a3:91:
         ce:39:62:70:0e:1f:0c:f8:88:5a:da:84:0a:3f:40:50:30:b7:
         16:67:24:4f:33:8e:52:17:1b:6d:ee:4e:8e:6f:55:b0:ad:6d:
         1f:1c:ed:23:29:5c:f8:38:17:da:45:a9:ab:04:6c:87:e8:07:
         3f:36:37:ce:63:70:c9:32:fc:b4:92:8a:23:31:3d:79:c9:ea:
         ed:da:e5:2e:b0:78:59:ca:1f:b7:25:01:38:e0:14:9c:48:38:
         5b:21:4a:3f:f1:2e:59:8a:96:2f:b9:df:1b:4a:07:c2:21:00:
         e2:c8:65:ba:81:df:4b:7b:ed:f8:ae:0d:a4:63:78:a1:45:4b:
         72:1b:ea:85:37:90:03:4e:18:e5:b9:cd:e6:7a:25:d0:7a:90:
         70:a2:ac:a9:4d:e0:c5:2e:88:32:b8:ff:d5:55:e8:84:86:e8:
         33:ff:cb:0e:ec:cf:74:6f:c2:f6:28:de:e5:26:ac:5a:0d:85:
         6a:5b:c3:f4:c5:46:83:3d:cd:c4:9e:f8:15:8c:76:fc:cd:09:
         64:99:7c:40:f0:de:c5:3e:f1:70:47:79:06:6e:ab:ba:f6:bf:
         6a:87:2e:d3:0d:97:09:7e:f9:71:e7:a2:f9:7e:44:11:88:4e:
         b3:6e:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----