Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/e5dMHPand7tLiGm-I939H3JZTvY.roa
File:                     e5dMHPand7tLiGm-I939H3JZTvY.roa (raw, json)
Hash identifier:          y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=
Subject key identifier:   7B:97:4C:1C:F6:A7:77:BB:4B:88:69:BE:23:DD:FD:1F:72:59:4E:F6
Certificate issuer:       /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial:       0194D5BA571D36F8FDEE0E065F5679F220A0
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/e5dMHPand7tLiGm-I939H3JZTvY.roa
Signing time:             Wed 05 Feb 2025 10:49:06 +0000
ROA not before:           Wed 05 Feb 2025 10:49:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215499
IP address blocks:        2001:678:1028::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:ba:57:1d:36:f8:fd:ee:0e:06:5f:56:79:f2:20:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
        Validity
            Not Before: Feb  5 10:49:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7b974c1cf6a777bb4b8869be23ddfd1f72594ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:c9:53:46:b3:d6:eb:41:6b:92:90:13:28:
                    21:cf:b4:75:d1:94:9c:7e:67:e3:6d:74:09:8b:0c:
                    93:ee:4d:44:f6:1d:8d:0b:d4:85:e6:43:cc:35:dc:
                    32:a9:19:4c:f0:f0:a9:ae:c1:b7:47:18:f4:ef:b9:
                    53:da:b4:3b:95:a9:c0:2e:36:49:89:d5:6c:c4:b9:
                    0d:14:8e:72:25:33:e5:77:e1:0d:57:d2:73:c5:9e:
                    25:46:20:ec:aa:b5:2d:f0:0a:82:78:4b:c1:92:b4:
                    f2:e0:aa:d7:94:1f:61:f7:ee:ce:29:5c:20:cd:32:
                    e5:4d:3e:dd:a6:db:fd:49:f1:57:79:2f:07:b3:f3:
                    89:ec:44:b5:34:e7:16:53:ed:87:0b:e9:d3:7b:82:
                    6f:db:ab:f2:c4:d5:a3:5f:1f:8f:21:29:e4:77:98:
                    d9:9f:c1:98:59:ca:81:cd:c4:51:8a:88:d1:03:12:
                    41:b7:74:ca:b1:26:cb:55:f1:91:12:2e:c6:16:31:
                    69:92:8a:bd:85:6b:c6:a4:26:83:d1:54:a4:cd:12:
                    a2:67:70:71:56:ec:5a:18:81:56:41:3b:6d:54:a4:
                    bf:65:2c:f4:b8:eb:4c:3f:7c:c1:e2:77:d9:51:04:
                    43:3b:d9:bc:28:00:b5:05:3a:b4:bb:61:b1:5c:68:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:97:4C:1C:F6:A7:77:BB:4B:88:69:BE:23:DD:FD:1F:72:59:4E:F6
            X509v3 Authority Key Identifier:
                keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/e5dMHPand7tLiGm-I939H3JZTvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:1028::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:c0:93:ba:75:46:f4:a6:c1:76:a7:01:cd:13:a3:42:f3:
         bc:8d:9e:f7:79:72:5e:39:3c:aa:64:de:1d:e0:fd:f6:0f:33:
         21:a4:70:7c:a4:16:ff:13:be:8a:3e:dd:6c:f4:b2:4e:72:5f:
         52:dc:ca:1a:53:3d:d8:fd:13:55:6c:10:27:b2:5e:f0:90:92:
         d7:e2:1a:c3:77:86:05:e3:f7:ab:d4:58:1f:56:a9:7b:04:c7:
         fa:ab:d3:21:d5:11:40:5d:32:75:04:b7:05:28:24:a9:23:ec:
         14:ed:76:b3:7e:08:47:cc:f7:e5:36:10:42:bd:fa:f0:0d:81:
         a3:3e:0b:f3:c4:3a:f4:90:1f:33:21:a4:16:33:cb:fc:ff:3e:
         eb:a7:93:a0:5e:79:36:3f:87:7c:f1:26:13:c2:52:f7:bc:ca:
         9c:85:25:c7:e1:75:61:c9:67:ce:31:e6:ed:0b:32:aa:a6:09:
         70:ef:7a:ed:42:b3:eb:7b:ef:c3:70:52:f5:bb:bc:a2:f7:9d:
         4e:70:a6:81:75:a7:44:4f:b2:ac:00:ff:bc:38:3b:fd:d6:ab:
         8a:a9:58:6d:2f:f7:38:73:d4:1c:02:73:cc:c3:81:33:d2:39:
         32:7f:33:3b:e5:35:19:99:ae:68:c0:c7:c1:65:cd:75:41:a8:
         33:ee:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----