Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa
File:                     I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa (raw, json)
Hash identifier:          J5yFqxN1A9HSh1h4LfTcY/5BgexCgptY4Dax8tjW9X4=
Subject key identifier:   23:48:71:5A:68:B5:BA:E9:04:BE:AC:0A:3D:F7:BD:49:0E:5B:FC:80
Certificate issuer:       /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial:       019426D929D6F1B9ED49496F743BBD8CB97E
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa
Signing time:             Thu 02 Jan 2025 11:49:13 +0000
ROA not before:           Thu 02 Jan 2025 11:49:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208368
IP address blocks:        185.229.22.0/23 maxlen: 24
                          2a0d:5e00::/29 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:d9:29:d6:f1:b9:ed:49:49:6f:74:3b:bd:8c:b9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
        Validity
            Not Before: Jan  2 11:49:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2348715a68b5bae904beac0a3df7bd490e5bfc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:fa:1f:f7:ca:e2:98:e2:32:1c:14:de:71:
                    89:81:6e:67:78:26:c1:45:2e:39:75:d3:b6:03:1f:
                    6c:c7:74:ce:3a:9e:b4:2f:17:a1:a8:1d:1d:f1:23:
                    00:bd:06:49:20:1b:2c:46:87:5a:1b:37:4a:c2:d8:
                    67:bf:f9:0a:16:65:48:b7:6b:e1:88:43:66:3b:52:
                    28:10:ce:c8:c0:01:ce:91:00:1d:1e:f9:6f:f4:fb:
                    ec:0f:25:4c:93:db:af:57:a7:6c:9b:ea:3f:77:eb:
                    29:8b:b8:d8:20:1f:15:2b:e4:d8:00:ab:09:34:e9:
                    87:fd:01:ad:b3:21:83:b4:4f:6b:0e:17:f5:e4:45:
                    b2:a7:ce:7d:d4:39:26:99:9b:e1:8c:40:e0:f1:c3:
                    69:97:d5:a6:b3:46:aa:9f:56:f0:52:66:eb:0e:46:
                    17:a1:0b:40:a1:1f:23:33:ce:59:23:1b:5d:32:94:
                    6e:cf:7e:de:6d:1e:b2:1f:60:8b:eb:d4:52:2f:37:
                    f5:61:89:10:83:3d:28:70:3c:90:c2:8d:e4:83:d2:
                    ad:7b:4a:ff:9f:b0:03:cb:43:17:38:f9:d9:ec:09:
                    2b:7d:f5:b1:8e:5b:20:6e:9f:13:d7:b9:49:23:bc:
                    bb:d7:ac:c3:c0:71:4d:80:91:ce:ae:2d:7a:2e:f9:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:48:71:5A:68:B5:BA:E9:04:BE:AC:0A:3D:F7:BD:49:0E:5B:FC:80
            X509v3 Authority Key Identifier:
                keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/I0hxWmi1uukEvqwKPfe9SQ5b_IA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.22.0/23
                IPv6:
                  2a0d:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         a5:72:dd:ff:d1:c1:ae:87:ab:b4:6c:a8:48:d3:44:39:b3:5e:
         39:7d:a1:68:3d:61:ff:37:99:85:ae:68:9e:90:b7:11:16:97:
         52:09:91:cb:d0:65:43:bb:a7:16:f4:1d:e3:9b:6a:0e:d6:38:
         be:1d:0a:0d:16:fa:30:e6:6b:14:2e:7c:75:72:f9:54:fd:9b:
         1f:14:21:69:af:5f:2b:d1:6e:6b:bf:1c:db:08:77:0f:2c:3e:
         8e:8c:07:25:ea:fb:b2:92:05:c1:d1:d5:c5:62:26:b4:09:4f:
         c7:b5:f2:05:a1:c9:32:42:33:0e:d5:6c:e6:e0:a9:61:57:76:
         7c:06:06:b0:fc:e5:f3:5d:96:d1:d2:b6:b2:cb:21:58:1c:bd:
         2b:e0:85:83:db:8d:a0:ae:34:9f:71:1a:1f:48:b9:b4:46:35:
         2b:eb:35:50:79:e3:1f:ca:99:85:fa:01:91:96:22:94:c1:6b:
         9f:4b:da:e3:d4:f9:58:28:76:d9:bb:e4:17:5e:b4:cc:93:4f:
         9e:ff:fe:56:00:31:f6:a5:bd:b7:37:33:a7:f9:dd:0d:51:9d:
         d8:18:94:69:1a:02:7b:2c:c3:9b:59:93:bf:c5:02:b8:19:9b:
         86:c4:10:da:e6:89:b8:c3:cc:c7:bc:2b:1b:46:65:a2:fc:75:
         13:49:d1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----