Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/5Sdp75UI07U0XNu2tAWSzrc-qpk.roa
File:                     5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (raw, json)
Hash identifier:          SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=
Subject key identifier:   E5:27:69:EF:95:08:D3:B5:34:5C:DB:B6:B4:05:92:CE:B7:3E:AA:99
Certificate issuer:       /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial:       019625351BB142FF3E4635566859EE436BAA
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/5Sdp75UI07U0XNu2tAWSzrc-qpk.roa
Signing time:             Fri 11 Apr 2025 14:15:59 +0000
ROA not before:           Fri 11 Apr 2025 14:15:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8767
IP address blocks:        185.174.104.0/23 maxlen: 23
                          2a14:5187:181a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:25:35:1b:b1:42:ff:3e:46:35:56:68:59:ee:43:6b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
        Validity
            Not Before: Apr 11 14:15:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e52769ef9508d3b5345cdbb6b40592ceb73eaa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:c8:83:8c:65:ab:47:e8:f5:cd:9f:1a:7e:
                    16:d7:56:d5:6e:6a:d7:61:3c:65:49:45:1d:4d:a0:
                    d5:cb:8f:f9:3f:26:a3:3a:49:cb:5c:2f:2d:0a:7a:
                    6b:0c:cb:79:af:e7:63:8b:2e:b9:a4:af:eb:48:eb:
                    86:00:23:1c:0a:8f:b8:47:fb:20:82:a9:05:45:64:
                    00:9a:26:aa:00:50:a3:90:7d:f2:8a:ae:c4:3d:ff:
                    1c:97:db:3c:c8:bd:d4:7b:26:ec:21:85:9a:ea:8e:
                    b3:14:f8:c4:a1:2c:dd:f6:d3:75:96:2b:c2:0c:d2:
                    a7:cc:ab:bc:31:17:5b:e0:bb:90:29:34:7f:bb:23:
                    b8:d8:13:b6:bb:c3:9e:f5:02:10:2b:e5:b1:f0:ae:
                    3c:80:06:16:04:34:00:5d:05:bc:20:42:57:69:bc:
                    87:a3:02:9f:67:55:ee:08:6c:46:10:9b:0b:5e:8e:
                    f4:fd:d4:6e:80:c3:ae:d7:0a:79:81:c4:85:39:a2:
                    c6:f0:5e:35:b6:67:e0:5c:95:12:a5:ea:2f:3f:0e:
                    e8:b8:8b:60:5f:11:4d:b0:70:a8:1f:87:c5:fb:1a:
                    12:0c:3f:89:61:c7:49:12:70:66:fe:0b:71:1c:27:
                    f5:c3:ef:5f:43:1f:69:d5:a3:3e:fb:f9:17:ed:5d:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:69:EF:95:08:D3:B5:34:5C:DB:B6:B4:05:92:CE:B7:3E:AA:99
            X509v3 Authority Key Identifier:
                keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/5Sdp75UI07U0XNu2tAWSzrc-qpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.174.104.0/23
                IPv6:
                  2a14:5187:181a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:5a:67:3e:e1:07:7c:6c:d4:b7:ac:89:6e:83:a9:7b:4f:ba:
         92:9d:b8:41:8d:9c:2d:53:cf:62:cb:95:6c:89:19:ed:af:13:
         23:50:99:f8:55:d3:31:8d:c3:04:16:07:d9:22:b3:3a:b7:49:
         0a:25:6e:81:99:f4:50:4a:28:47:8a:69:c1:5b:8c:10:0a:ff:
         f5:e5:c3:cb:62:3c:1d:f4:b6:79:76:54:c6:0a:62:48:36:d9:
         f3:e4:94:2f:f1:97:28:22:29:13:4b:60:20:f6:77:02:7a:78:
         85:73:0f:b0:66:9e:01:fa:d4:7d:9c:f3:0a:55:b0:0c:62:55:
         99:c7:9b:cf:e7:ff:77:4f:a8:8b:91:b6:bf:74:93:59:75:c2:
         9b:44:e3:85:ca:07:61:eb:46:08:4b:5b:fd:ed:c9:e1:4b:a6:
         75:eb:c3:f4:f6:74:8a:91:53:c2:af:62:86:70:69:aa:78:e5:
         32:4d:15:d2:65:98:c6:6e:6e:ec:42:9b:ec:0e:b6:f0:0c:68:
         80:5b:ed:0f:ba:e1:56:cf:fd:94:92:d5:1f:94:3e:71:b8:75:
         ca:84:cd:76:27:d8:74:7c:11:2d:37:e5:f5:d1:4c:ea:e5:08:
         f8:24:cf:b0:18:83:87:88:da:fb:68:af:a6:c6:2c:43:f3:b5:
         46:51:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----