Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/oOmlEIPuZj-euGQgaSJSIdcSgws.roa
File:                     oOmlEIPuZj-euGQgaSJSIdcSgws.roa (raw, json)
Hash identifier:          4HVEBIShSrKuBB15YN2IPkpfbl2tZhoTqa30YNiE+ew=
Subject key identifier:   A0:E9:A5:10:83:EE:66:3F:9E:B8:64:20:69:22:52:21:D7:12:83:0B
Certificate issuer:       /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial:       01942826025F84643971C3EE8BF0AD4D8239
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/oOmlEIPuZj-euGQgaSJSIdcSgws.roa
Signing time:             Thu 02 Jan 2025 17:52:47 +0000
ROA not before:           Thu 02 Jan 2025 17:52:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     60155
IP address blocks:        185.55.200.0/22 maxlen: 22
                          2a04:d640::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:28:26:02:5f:84:64:39:71:c3:ee:8b:f0:ad:4d:82:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
        Validity
            Not Before: Jan  2 17:52:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=a0e9a51083ee663f9eb8642069225221d712830b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:aa:7b:96:c5:6f:97:b3:bf:b8:be:83:2a:
                    83:98:10:6a:6a:f3:ed:65:f2:fe:13:7b:45:65:50:
                    58:1f:13:86:91:0c:3e:ca:e7:14:24:ff:d9:08:3d:
                    d7:aa:e2:54:84:3d:e0:59:e7:e2:34:32:a4:a7:1f:
                    13:64:2a:44:01:8a:1b:0c:57:f7:8d:39:a6:fb:a0:
                    31:ab:4f:4a:dc:77:e7:3e:6b:93:08:52:71:2d:01:
                    aa:d6:13:72:c1:b5:69:36:f1:46:52:94:7b:f0:b4:
                    eb:14:aa:03:6e:7d:ba:42:ac:e6:2e:07:4d:97:a0:
                    15:01:81:b1:e6:b7:54:07:85:51:12:fd:fc:f3:13:
                    f1:a4:37:96:7d:21:d3:56:1c:24:9a:65:e2:a1:41:
                    bb:fd:f1:cf:7c:a3:16:d4:1a:08:99:f7:10:ca:5b:
                    34:f6:51:c0:01:a0:bb:1d:52:d8:37:59:bf:0d:64:
                    35:d6:6d:f9:30:51:af:f9:e3:ad:ca:7c:00:35:42:
                    57:7f:9b:f1:8b:27:a2:3b:d6:2d:62:64:a8:24:12:
                    13:b2:6b:40:cd:bc:30:2d:ad:03:1c:bd:91:00:11:
                    46:ad:e4:ff:f9:89:42:12:e4:c8:b2:a9:20:8b:4c:
                    9a:a0:e4:38:73:7d:47:0d:ff:84:a0:80:37:12:bc:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E9:A5:10:83:EE:66:3F:9E:B8:64:20:69:22:52:21:D7:12:83:0B
            X509v3 Authority Key Identifier:
                keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/oOmlEIPuZj-euGQgaSJSIdcSgws.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.200.0/22
                IPv6:
                  2a04:d640::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:e9:30:30:6e:4f:39:87:1f:8a:f9:ab:91:94:6c:7f:91:bc:
         5a:00:0f:1f:49:73:c6:6f:c0:e0:dd:40:fc:fd:50:5e:68:d3:
         11:da:fa:64:ba:c2:b2:58:91:0d:b3:e8:3c:25:69:74:e1:c6:
         ef:ee:76:51:a1:a0:fd:ee:c5:3a:51:21:5d:3c:7b:ae:95:59:
         26:61:54:71:4a:af:09:c9:2c:18:f0:1c:02:d2:27:16:23:56:
         bd:13:21:95:08:bc:7e:e7:2a:06:ad:1d:8b:20:63:2a:fa:39:
         ef:29:aa:e0:b9:e1:f0:19:99:7c:0c:9a:95:45:64:75:71:5f:
         03:bf:94:ab:f7:85:1a:24:80:e1:21:c3:b8:42:27:36:fa:ea:
         3c:5a:21:5b:95:b4:eb:e0:35:17:f6:19:9f:0d:61:77:40:9e:
         bf:6e:e0:8b:65:13:9c:2d:a2:38:a4:aa:7e:7f:d8:b1:6d:3a:
         c6:86:58:be:28:18:6e:c1:cd:2f:04:94:37:9b:cf:6a:06:84:
         70:68:6a:3a:0e:c6:6c:77:c2:39:e8:19:89:a1:60:f0:0a:54:
         f7:10:94:be:26:c7:10:67:bd:ee:69:9e:b9:c5:9e:39:be:20:
         4c:88:b8:d8:47:dc:01:a5:80:49:f9:d1:0d:2f:75:3b:f4:eb:
         56:11:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----