Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/oABxc2AhceHbFWdSMSjl8hsmwIU.roa
File:                     oABxc2AhceHbFWdSMSjl8hsmwIU.roa (raw, json)
Hash identifier:          TEY8sctZHera/7HF2OtPuy78+8vJU3t66DtmPXEJjBo=
Subject key identifier:   A0:00:71:73:60:21:71:E1:DB:15:67:52:31:28:E5:F2:1B:26:C0:85
Certificate issuer:       /CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
Certificate serial:       0194258E3E0C8E2ABE3D11460D6542E28160
Authority key identifier: 7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/oABxc2AhceHbFWdSMSjl8hsmwIU.roa
Signing time:             Thu 02 Jan 2025 05:47:46 +0000
ROA not before:           Thu 02 Jan 2025 05:47:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203239
IP address blocks:        146.247.46.0/24 maxlen: 24
                          2a0d:1e00::/48 maxlen: 48
                          2a0d:1e00:46::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8e:3e:0c:8e:2a:be:3d:11:46:0d:65:42:e2:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fc956a52b73504a4f1ff34547199297a7f5de9d
        Validity
            Not Before: Jan  2 05:47:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a0007173602171e1db1567523128e5f21b26c085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:c6:15:0f:14:c3:5a:d1:92:4a:a3:82:1f:
                    a5:6e:17:0f:3e:82:c0:35:d3:87:26:b4:09:04:c4:
                    88:d2:34:05:56:4e:0d:b2:76:6d:5d:2a:34:3f:3a:
                    88:da:ec:d4:36:1c:e0:e0:57:96:a4:55:04:cb:b8:
                    ef:4e:8b:27:42:b1:c7:ca:c8:37:64:7a:56:3b:0c:
                    29:8a:bc:b7:f6:65:f6:e9:af:8d:a2:53:3e:39:e3:
                    01:90:8b:ca:85:03:cd:fa:c4:d3:d8:dd:bb:f2:88:
                    53:dd:1c:62:a4:07:4c:39:e5:2a:b3:8a:a5:e7:e0:
                    8c:65:8c:56:c1:d6:3e:a0:55:08:ba:5b:be:7a:07:
                    03:2a:f5:40:2c:ba:00:20:e6:89:63:a7:f7:41:21:
                    2e:1f:fb:86:f2:60:3b:ad:c6:ff:b1:09:38:77:cd:
                    67:31:68:75:95:e3:47:54:cd:ef:0c:74:88:d5:16:
                    40:d7:93:16:49:ed:77:c5:41:12:65:66:2f:f8:17:
                    83:4e:02:1c:e6:d2:ea:e5:de:88:22:4d:73:24:2a:
                    7a:4e:9d:0d:8e:ef:80:c5:b5:77:92:19:7b:e9:9c:
                    58:af:69:06:e1:13:2b:c2:c3:88:69:eb:82:5e:aa:
                    59:f7:02:7b:70:09:3f:8a:aa:b1:a0:bd:af:56:d6:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:71:73:60:21:71:E1:DB:15:67:52:31:28:E5:F2:1B:26:C0:85
            X509v3 Authority Key Identifier:
                keyid:7F:C9:56:A5:2B:73:50:4A:4F:1F:F3:45:47:19:92:97:A7:F5:DE:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8lWpStzUEpPH_NFRxmSl6f13p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/oABxc2AhceHbFWdSMSjl8hsmwIU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/71ab69-6965-4b70-968d-bb57a4ef7153/1/f8lWpStzUEpPH_NFRxmSl6f13p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.247.46.0/24
                IPv6:
                  2a0d:1e00::/48
                  2a0d:1e00:46::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:da:fa:14:90:24:65:09:33:d1:b9:42:1e:8e:ba:61:f0:0b:
         1f:e9:9e:38:ea:36:65:c9:af:91:7a:e5:9f:03:94:5f:be:88:
         f1:2d:b8:06:7c:fa:65:76:23:8f:8d:0a:ae:8c:b1:be:08:97:
         99:0f:be:fa:d8:e3:05:05:48:a1:90:52:d1:fb:b5:59:9c:f2:
         1a:2f:8e:d1:36:d2:05:50:f0:6b:40:3a:e5:75:d9:37:f3:47:
         64:48:a7:03:67:de:84:a5:15:7e:a1:f2:4b:f5:d8:13:cb:36:
         f0:52:8a:8c:3d:24:5e:68:12:8f:77:11:a4:26:3c:0a:cb:ac:
         7e:fc:fa:b4:ab:72:e3:98:14:c9:f7:fc:b3:9b:cf:8d:12:30:
         c0:4e:5f:c5:f6:e7:9e:f3:3d:64:37:82:70:43:42:a7:1b:f2:
         49:21:42:95:f5:07:f9:89:e5:62:30:d4:fb:f6:6b:6a:60:86:
         5f:bc:48:9b:c6:0e:b9:8a:77:cd:2b:77:cb:06:57:63:66:e4:
         25:8c:ba:fd:81:ed:11:be:25:65:34:71:e2:5d:f6:c2:f1:3d:
         6e:bf:06:7f:99:06:d4:9a:54:18:5c:57:07:f2:d3:cc:de:bb:
         63:8c:1b:04:16:c1:d2:0e:7b:01:d4:40:11:06:ad:02:29:c6:
         3c:fa:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----