Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/g1hDqJ-TaUw9KmfKx4pghTOqN8w.roa
File:                     g1hDqJ-TaUw9KmfKx4pghTOqN8w.roa (raw, json)
Hash identifier:          P6L61VQSrZ18hNQNNuDfiezNuYmPmeZrYiK86nbR/xY=
Subject key identifier:   83:58:43:A8:9F:93:69:4C:3D:2A:67:CA:C7:8A:60:85:33:AA:37:CC
Certificate issuer:       /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial:       01942BAC49FDC5BD024FC330020E78B6672B
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/g1hDqJ-TaUw9KmfKx4pghTOqN8w.roa
Signing time:             Fri 03 Jan 2025 10:18:18 +0000
ROA not before:           Fri 03 Jan 2025 10:18:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     47215
IP address blocks:        5.28.40.0/21 maxlen: 21
                          2a05:e980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:2b:ac:49:fd:c5:bd:02:4f:c3:30:02:0e:78:b6:67:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
        Validity
            Not Before: Jan  3 10:18:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=835843a89f93694c3d2a67cac78a608533aa37cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7f:ca:cc:b3:97:a0:8e:91:fd:1d:46:dd:21:
                    e6:26:15:22:50:03:bd:d8:59:3f:5b:ee:f3:78:0d:
                    55:08:6e:7d:d2:a2:d4:3a:56:07:75:86:4d:df:e3:
                    b6:be:fc:6b:e0:6e:55:02:1f:3a:dd:c7:52:2f:c7:
                    93:96:00:04:17:7d:17:72:58:2c:bc:5e:56:00:5d:
                    4e:78:2f:cb:68:b0:45:5b:47:ca:86:6b:c1:be:88:
                    6e:b7:7f:9b:1d:70:71:9a:b0:1d:d1:1c:9f:89:cf:
                    f1:b0:79:f3:c8:96:63:c3:f1:f7:73:2b:d1:40:34:
                    6f:47:ed:e9:be:ce:c4:5c:a8:3f:59:1a:32:f5:9b:
                    7b:1f:22:09:85:c2:28:fe:7b:6f:15:5c:e2:e9:af:
                    5e:c8:dd:88:48:ea:a9:84:77:5a:77:0f:93:83:bc:
                    86:00:45:08:96:94:af:d3:b4:2d:58:15:87:66:b6:
                    c6:5b:84:5a:41:8d:25:dc:73:19:f3:25:ef:c2:d0:
                    1c:6d:51:3e:5a:73:3f:62:7d:6b:fc:b1:fe:c6:f9:
                    d7:7b:11:d3:b7:ee:50:95:a4:0d:15:9f:25:d4:25:
                    32:7e:5c:22:01:67:93:e3:9c:91:73:ab:46:79:17:
                    5e:35:d8:15:5f:b8:41:ba:c0:d3:28:fa:7a:8b:f8:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:58:43:A8:9F:93:69:4C:3D:2A:67:CA:C7:8A:60:85:33:AA:37:CC
            X509v3 Authority Key Identifier:
                keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/g1hDqJ-TaUw9KmfKx4pghTOqN8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.28.40.0/21
                IPv6:
                  2a05:e980::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:12:18:32:d5:09:27:cb:97:1b:53:4a:9b:89:20:56:a1:9b:
         0b:90:c2:50:60:c4:00:8c:56:27:3b:e8:82:6f:59:8d:18:c9:
         30:aa:de:95:61:dc:de:42:e3:8f:96:53:c5:7c:ca:2c:0f:d6:
         34:a8:41:ce:08:13:f5:0e:69:cc:83:70:4e:5c:2c:da:64:a5:
         a5:8c:22:a3:b3:5a:d7:4c:40:05:4f:da:ea:45:c9:1f:b0:d5:
         17:9c:cb:bf:ff:f7:89:85:56:54:c9:5b:c5:88:71:64:45:20:
         af:11:ff:52:ed:b8:c6:b1:db:81:0c:b8:24:9d:09:98:74:f4:
         ac:9a:5e:b2:b6:c2:00:dd:d7:02:b4:ac:21:24:11:7c:67:66:
         96:5f:c7:89:2e:a8:1a:ab:21:e8:a5:4c:eb:1a:0f:5f:38:54:
         1d:42:5a:d3:26:29:b8:5c:ba:c3:29:23:78:d6:e8:72:c6:30:
         71:c3:32:82:ae:76:81:6f:22:2a:25:c9:a6:ea:15:28:25:65:
         db:11:0c:56:28:87:80:a5:7d:a6:66:7e:b3:eb:95:88:d9:b7:
         54:87:b2:cc:3b:4a:0c:06:45:09:8a:d7:b5:07:41:df:9f:28:
         04:c6:39:7c:72:78:7e:a7:93:c4:0c:c5:bf:22:a7:90:20:17:
         7e:26:26:ee
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQrrEn9xb0CT8MwAg54tmcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOGU2ODcwMmVmNWQ0OGM0ZjJiMDcyZDljYjQ3M2U2MmI4
N2IzZTQwHhcNMjUwMTAzMTAxODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzU4NDNhODlmOTM2OTRjM2QyYTY3Y2FjNzhhNjA4NTMzYWEzN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn/KzLOXoI6R/R1G3SHmJhUiUAO9
2Fk/W+7zeA1VCG590qLUOlYHdYZN3+O2vvxr4G5VAh863cdSL8eTlgAEF30Xclgs
vF5WAF1OeC/LaLBFW0fKhmvBvohut3+bHXBxmrAd0Ryfic/xsHnzyJZjw/H3cyvR
QDRvR+3pvs7EXKg/WRoy9Zt7HyIJhcIo/ntvFVzi6a9eyN2ISOqphHdadw+Tg7yG
AEUIlpSv07QtWBWHZrbGW4RaQY0l3HMZ8yXvwtAcbVE+WnM/Yn1r/LH+xvnXexHT
t+5QlaQNFZ8l1CUyflwiAWeT45yRc6tGeRdeNdgVX7hBusDTKPp6i/jn1wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFINYQ6ifk2lMPSpnyseKYIUzqjfMMB8GA1UdIwQY
MBaAFEqOaHAu9dSMTysHLZy0c+Yrh7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWIt
MWM0YmI1OGFiNzIwLzEvZzFoRHFKLVRhVXc5S21mS3g0cGdoVE9xTjh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9kMTlmYzItODk0OS00ZmU2LTkzMWItMWM0YmI1OGFiNzIw
LzEvU281b2NDNzExSXhQS3djdG5MUno1aXVIcy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBRwoMA0E
AgACMAcDBQAqBemAMA0GCSqGSIb3DQEBCwUAA4IBAQAuEhgy1Qkny5cbU0qbiSBW
oZsLkMJQYMQAjFYnO+iCb1mNGMkwqt6VYdzeQuOPllPFfMosD9Y0qEHOCBP1DmnM
g3BOXCzaZKWljCKjs1rXTEAFT9rqRckfsNUXnMu///eJhVZUyVvFiHFkRSCvEf9S
7bjGsduBDLgknQmYdPSsml6ytsIA3dcCtKwhJBF8Z2aWX8eJLqgaqyHopUzrGg9f
OFQdQlrTJim4XLrDKSN41uhyxjBxwzKCrnaBbyIqJcmm6hUoJWXbEQxWKIeApX2m
Zn6z65WI2bdUh7LMO0oMBkUJite1B0HfnygExjl8cnh+p5PEDMW/IqeQIBd+Jibu
-----END CERTIFICATE-----