Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/EHlGqb04iAIbXB5rqXIY0OnBfmY.roa
File:                     EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (raw, json)
Hash identifier:          81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=
Subject key identifier:   10:79:46:A9:BD:38:88:02:1B:5C:1E:6B:A9:72:18:D0:E9:C1:7E:66
Certificate issuer:       /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial:       01961F689E584DF4EB1A3100795CF0B36BD4
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/EHlGqb04iAIbXB5rqXIY0OnBfmY.roa
Signing time:             Thu 10 Apr 2025 11:14:32 +0000
ROA not before:           Thu 10 Apr 2025 11:14:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     3356
IP address blocks:        2a05:8943::/32 maxlen: 32
                          2a05:8944::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:1f:68:9e:58:4d:f4:eb:1a:31:00:79:5c:f0:b3:6b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
        Validity
            Not Before: Apr 10 11:14:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=107946a9bd3888021b5c1e6ba97218d0e9c17e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:5e:a3:c9:2f:fe:19:38:fe:30:dc:29:00:
                    a5:f4:41:e9:89:9d:0c:d0:e9:44:95:bd:5b:03:02:
                    b4:28:ed:3e:ef:34:5d:60:75:29:e0:89:d5:b5:39:
                    da:af:e5:bd:12:c1:5c:c9:47:f4:52:ab:28:0b:48:
                    1c:4d:99:87:1d:ca:c7:57:3f:1d:00:5a:91:30:5a:
                    03:07:8d:d1:b6:5f:33:a1:37:d6:e9:a4:f2:eb:6d:
                    9a:a6:5b:5f:17:ae:54:dd:ce:e1:75:82:2f:f8:b5:
                    d4:ec:66:39:cd:78:ed:79:bb:90:b1:6e:94:ad:0a:
                    a5:a9:75:f5:76:b1:b0:08:44:e8:4c:23:ed:74:72:
                    43:31:2d:da:fa:a0:79:c5:0e:a6:4c:2e:bb:9b:80:
                    79:ac:5a:57:65:10:3a:e3:88:ee:fc:19:cf:23:04:
                    3f:d6:f6:45:31:98:44:50:58:ec:53:e4:3b:a5:eb:
                    48:3c:9d:71:70:2a:48:d5:7f:74:28:84:74:6d:3c:
                    ea:10:55:ea:02:89:a9:03:f7:d9:0a:e5:69:25:74:
                    2a:b5:97:08:e3:d9:83:9a:6a:c8:59:91:15:5f:c3:
                    15:f7:6a:c7:8f:6c:9d:0d:cb:93:8a:b7:40:da:2c:
                    a6:db:d9:e0:c9:bb:14:77:dd:c6:17:f9:3a:c2:24:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:46:A9:BD:38:88:02:1B:5C:1E:6B:A9:72:18:D0:E9:C1:7E:66
            X509v3 Authority Key Identifier:
                keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/EHlGqb04iAIbXB5rqXIY0OnBfmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:8943::-2a05:8944:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         78:01:e2:61:39:9c:4f:0d:2b:d9:a8:75:8f:07:c5:e2:90:9a:
         44:6b:f9:af:0c:10:e7:a1:b3:36:79:fb:6c:0c:f2:4d:89:23:
         36:5e:6a:6e:78:6a:5d:e3:cb:ce:0f:34:a3:7d:d6:27:83:d2:
         2c:a9:d7:a6:42:6a:e5:ce:f4:2a:f0:38:13:8e:9a:5d:97:cb:
         de:c6:61:e2:97:82:f8:75:83:23:af:a7:25:0c:d9:d9:33:01:
         fa:07:08:59:96:c2:1a:4e:f7:0f:9e:9b:0f:05:ec:b0:1c:2a:
         aa:f6:8d:6a:e7:e0:c5:17:b4:86:33:8d:21:6d:2a:cd:1f:5a:
         d0:4b:6d:ff:54:ee:c1:39:2d:9d:32:da:66:b0:1c:66:13:c1:
         4e:fb:b7:be:90:27:c8:f7:43:ac:d1:20:f7:ca:cd:a3:51:55:
         81:67:84:e7:93:b6:41:7a:8c:e8:8d:4a:eb:8a:db:36:f8:b5:
         64:a6:4b:64:b5:cf:69:ce:b8:82:a0:42:79:4c:7a:52:83:fd:
         a0:93:22:e3:d5:cf:0d:7c:07:53:af:35:47:3f:28:e9:f0:33:
         c5:2c:c1:bd:be:cd:03:d9:e0:a6:02:6f:57:c9:8a:4f:bb:1e:
         8c:88:17:6d:15:f6:22:d3:a7:64:ef:58:54:a0:e3:95:5e:21:
         01:a1:e9:f8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAZYfaJ5YTfTrGjEAeVzws2vUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4
Y2FiODEwHhcNMjUwNDEwMTExNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc5NDZhOWJkMzg4ODAyMWI1YzFlNmJhOTcyMThkMGU5YzE3ZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ9eo8kv/hk4/jDcKQCl9EHpiZ0M
0OlElb1bAwK0KO0+7zRdYHUp4InVtTnar+W9EsFcyUf0UqsoC0gcTZmHHcrHVz8d
AFqRMFoDB43Rtl8zoTfW6aTy622apltfF65U3c7hdYIv+LXU7GY5zXjtebuQsW6U
rQqlqXX1drGwCEToTCPtdHJDMS3a+qB5xQ6mTC67m4B5rFpXZRA644ju/BnPIwQ/
1vZFMZhEUFjsU+Q7petIPJ1xcCpI1X90KIR0bTzqEFXqAompA/fZCuVpJXQqtZcI
49mDmmrIWZEVX8MV92rHj2ydDcuTirdA2iym29ngybsUd93GF/k6wiRcLQIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFBB5Rqm9OIgCG1wea6lyGNDpwX5mMB8GA1UdIwQY
MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt
MWVmOWYyMzE5NTIyLzEvRUhsR3FiMDRpQUliWEI1cnFYSVkwT25CZm1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy
LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQMA4DBQAqBYlD
AwUAKgWJRDANBgkqhkiG9w0BAQsFAAOCAQEAeAHiYTmcTw0r2ah1jwfF4pCaRGv5
rwwQ56GzNnn7bAzyTYkjNl5qbnhqXePLzg80o33WJ4PSLKnXpkJq5c70KvA4E46a
XZfL3sZh4peC+HWDI6+nJQzZ2TMB+gcIWZbCGk73D56bDwXssBwqqvaNaufgxRe0
hjONIW0qzR9a0Ett/1TuwTktnTLaZrAcZhPBTvu3vpAnyPdDrNEg98rNo1FVgWeE
55O2QXqM6I1K64rbNvi1ZKZLZLXPac64gqBCeUx6UoP9oJMi49XPDXwHU681Rz8o
6fAzxSzBvb7NA9ngpgJvV8mKT7sejIgXbRX2ItOnZO9YVKDjlV4hAaHp+A==
-----END CERTIFICATE-----