Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/Npq0NgAUzPmjKDeEsxuhWw6BogU.roa
File:                     Npq0NgAUzPmjKDeEsxuhWw6BogU.roa (raw, json)
Hash identifier:          z3169zTT1YiBlznFXGSnMAqWRbAhW/S4LcLq7Rxd94g=
Subject key identifier:   36:9A:B4:36:00:14:CC:F9:A3:28:37:84:B3:1B:A1:5B:0E:81:A2:05
Certificate issuer:       /CN=884bf80e72f50f09bf563493ebdb11a34bba312d
Certificate serial:       0194258FB6D24D580A388AC402AD3DFD25E9
Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/Npq0NgAUzPmjKDeEsxuhWw6BogU.roa
Signing time:             Thu 02 Jan 2025 05:49:22 +0000
ROA not before:           Thu 02 Jan 2025 05:49:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     208083
IP address blocks:        2a0f:a180::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:b6:d2:4d:58:0a:38:8a:c4:02:ad:3d:fd:25:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d
        Validity
            Not Before: Jan  2 05:49:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=369ab4360014ccf9a3283784b31ba15b0e81a205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:91:d6:a4:7f:3e:13:03:cb:15:f9:ba:2f:27:
                    ba:62:ba:27:a6:83:90:86:bf:e6:0f:06:92:2b:5d:
                    3e:61:15:07:cc:b0:04:68:66:cd:45:5d:86:0b:1f:
                    53:36:e1:99:61:b6:f9:04:7b:ed:bc:4a:b6:85:e1:
                    f1:85:0a:f0:13:6b:30:95:34:ef:12:4a:bc:83:30:
                    de:20:b5:4e:f3:1d:81:6f:37:52:25:41:05:b8:bd:
                    f8:3c:d2:63:51:45:d1:8c:79:e8:9d:05:71:b1:13:
                    6f:dc:1a:a4:aa:8b:9b:63:f6:73:10:63:d9:f6:c4:
                    64:6b:57:20:77:de:19:9e:5c:40:ec:20:5e:c8:67:
                    6e:dd:96:fd:07:2d:49:f5:26:29:ec:a8:ea:2d:d9:
                    15:e7:ab:98:ed:69:9e:e4:e7:84:53:fb:c1:72:e3:
                    c3:43:5c:10:93:e9:df:a6:e8:fa:bb:d2:27:56:70:
                    83:36:3e:25:70:19:ae:a8:83:bd:a8:b5:8a:e1:be:
                    a5:0d:54:82:99:54:e4:42:50:42:e1:85:39:2b:3c:
                    3c:12:49:c2:96:81:4a:0e:0c:47:1a:09:fe:a4:47:
                    ae:b4:f0:85:41:55:e2:9a:83:b0:af:27:a3:6e:8c:
                    8a:76:02:1f:f6:95:e6:45:0a:be:a9:2c:5e:32:bc:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:B4:36:00:14:CC:F9:A3:28:37:84:B3:1B:A1:5B:0E:81:A2:05
            X509v3 Authority Key Identifier:
                keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/Npq0NgAUzPmjKDeEsxuhWw6BogU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:a180::/29

    Signature Algorithm: sha256WithRSAEncryption
         b3:d7:ea:2a:50:00:8e:0a:7f:1f:a0:ea:2e:c6:bd:80:d1:92:
         52:13:1b:dd:e0:db:f1:4e:05:b0:ff:40:4f:a7:04:19:87:e4:
         7c:aa:46:3e:7b:d6:82:12:ca:5e:70:6c:17:76:08:7a:2d:b6:
         23:a2:ac:3e:94:fb:7f:a7:c0:10:9d:c0:47:a8:69:95:a3:cf:
         0b:6f:b2:02:7f:d0:47:2a:76:e4:d3:71:53:66:c7:24:c6:5b:
         a8:fc:fb:b9:39:a5:d4:ed:34:b6:68:04:a3:5e:55:d8:a9:62:
         af:ae:12:40:3c:df:6a:ed:4b:18:4e:2a:8a:bf:98:b4:e5:04:
         43:da:f9:d3:fe:f5:61:16:88:87:ff:98:6b:70:31:19:9e:05:
         4d:c6:02:10:90:4a:a0:5c:a4:86:2f:15:0a:04:00:18:80:ae:
         9f:92:10:df:2b:c7:8e:f4:ac:5a:9e:de:c4:de:ae:c4:81:4f:
         8d:68:a2:6b:03:ba:e2:bc:f4:09:03:55:ad:b3:9f:d4:d9:ba:
         37:d1:6a:56:6c:76:73:b5:36:cb:5f:5d:aa:c0:1c:75:c6:94:
         13:5c:0e:61:db:31:14:c9:47:69:48:05:30:7b:c8:80:e0:5e:
         0e:ae:ca:ea:a3:b5:5c:f9:58:60:70:5f:8f:41:f4:cc:27:74:
         fe:57:c9:76
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj7bSTVgKOIrEAq09/SXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGJmODBlNzJmNTBmMDliZjU2MzQ5M2ViZGIxMWEzNGJi
YTMxMmQwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjlhYjQzNjAwMTRjY2Y5YTMyODM3ODRiMzFiYTE1YjBlODFhMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZHWpH8+EwPLFfm6Lye6YronpoOQ
hr/mDwaSK10+YRUHzLAEaGbNRV2GCx9TNuGZYbb5BHvtvEq2heHxhQrwE2swlTTv
Ekq8gzDeILVO8x2BbzdSJUEFuL34PNJjUUXRjHnonQVxsRNv3BqkqoubY/ZzEGPZ
9sRka1cgd94ZnlxA7CBeyGdu3Zb9By1J9SYp7KjqLdkV56uY7Wme5OeEU/vBcuPD
Q1wQk+nfpuj6u9InVnCDNj4lcBmuqIO9qLWK4b6lDVSCmVTkQlBC4YU5Kzw8EknC
loFKDgxHGgn+pEeutPCFQVXimoOwryejboyKdgIf9pXmRQq+qSxeMryXEwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDaatDYAFMz5oyg3hLMboVsOgaIFMB8GA1UdIwQY
MBaAFIhL+A5y9Q8Jv1Y0k+vbEaNLujEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGIt
MzZmOTg0N2FjMzViLzEvTnBxME5nQVV6UG1qS0RlRXN4dWhXdzZCb2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGItMzZmOTg0N2FjMzVi
LzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+hgDAN
BgkqhkiG9w0BAQsFAAOCAQEAs9fqKlAAjgp/H6DqLsa9gNGSUhMb3eDb8U4FsP9A
T6cEGYfkfKpGPnvWghLKXnBsF3YIei22I6KsPpT7f6fAEJ3AR6hplaPPC2+yAn/Q
Ryp25NNxU2bHJMZbqPz7uTml1O00tmgEo15V2Klir64SQDzfau1LGE4qir+YtOUE
Q9r50/71YRaIh/+Ya3AxGZ4FTcYCEJBKoFykhi8VCgQAGICun5IQ3yvHjvSsWp7e
xN6uxIFPjWiiawO64rz0CQNVrbOf1Nm6N9FqVmx2c7U2y19dqsAcdcaUE1wOYdsx
FMlHaUgFMHvIgOBeDq7K6qO1XPlYYHBfj0H0zCd0/lfJdg==
-----END CERTIFICATE-----