Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/mOMTOzklCOsSuB9v2boILVZdvLA.roa
File:                     mOMTOzklCOsSuB9v2boILVZdvLA.roa (raw, json)
Hash identifier:          mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=
Subject key identifier:   98:E3:13:3B:39:25:08:EB:12:B8:1F:6F:D9:BA:08:2D:56:5D:BC:B0
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019427B53428D6182A728F888E3B60D59E6E
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/mOMTOzklCOsSuB9v2boILVZdvLA.roa
Signing time:             Thu 02 Jan 2025 15:49:34 +0000
ROA not before:           Thu 02 Jan 2025 15:49:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     39164
IP address blocks:        185.222.210.0/24 maxlen: 24
                          2a10:8180::/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:34:28:d6:18:2a:72:8f:88:8e:3b:60:d5:9e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jan  2 15:49:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=98e3133b392508eb12b81f6fd9ba082d565dbcb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:0f:c8:2f:93:2b:32:f1:5e:ee:5d:84:87:
                    a0:7d:fb:e5:08:b6:1f:bf:61:0b:ad:1e:cc:d0:7d:
                    a4:18:e9:9f:52:6c:2e:2a:2b:6a:03:d2:0c:34:b7:
                    9a:46:b3:4a:77:53:9d:f2:69:4c:89:9a:78:5f:0e:
                    03:b7:27:0f:8c:90:d8:e6:14:fc:0f:c0:7e:39:8d:
                    71:31:e5:a1:81:0a:02:7f:4e:47:f8:83:cc:ac:00:
                    63:d3:37:cd:5b:3b:1f:df:47:b9:fd:72:d6:ba:6a:
                    ef:37:eb:1a:59:ac:ce:87:16:72:49:6f:fe:c3:d5:
                    dd:1e:d9:39:37:75:04:72:db:96:c4:1e:da:77:4a:
                    8f:fe:04:08:df:7d:3f:05:bc:eb:7f:b1:0c:ef:89:
                    25:b5:27:ce:a7:04:aa:fe:4e:3f:b6:fc:42:b6:48:
                    d1:93:25:b7:ab:5d:e8:25:80:fc:2d:6d:0c:40:4d:
                    fd:70:92:33:1b:41:70:75:b8:f7:e5:f4:fe:2d:14:
                    5b:2a:f8:66:bd:77:9a:2b:a8:70:96:9d:46:e8:f6:
                    e7:56:c7:70:f2:77:15:a4:05:a0:30:7e:d3:45:78:
                    17:45:77:9d:97:5a:32:67:e9:3f:83:7c:12:eb:aa:
                    82:34:57:e4:b7:f2:ed:e8:31:4e:8b:d9:76:74:38:
                    e4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E3:13:3B:39:25:08:EB:12:B8:1F:6F:D9:BA:08:2D:56:5D:BC:B0
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/mOMTOzklCOsSuB9v2boILVZdvLA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.210.0/24
                IPv6:
                  2a10:8180::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:dd:59:e6:9d:9e:5a:ce:59:f0:f1:03:95:41:e4:d8:7f:
         0e:63:4f:19:58:3a:ca:56:d8:8d:9e:d5:02:00:52:81:67:48:
         fe:0a:eb:5b:78:3f:cc:8a:95:6e:02:f7:40:77:c2:7f:ed:2a:
         85:76:08:81:1e:1b:f5:8e:08:57:56:fc:f4:f4:97:c6:34:53:
         66:96:b5:60:42:57:bf:31:59:2b:c8:b4:33:2d:df:a0:b4:84:
         87:89:cb:87:d6:94:f7:ea:dd:be:fc:2d:20:c3:2a:7c:92:51:
         ea:0a:d9:5e:3d:86:df:1b:39:a6:07:81:e4:28:c0:ef:ba:6b:
         4f:01:94:d8:f4:31:c3:b3:e5:17:12:be:85:c7:32:08:55:53:
         41:0d:45:91:4a:e8:ab:62:13:ac:8e:8c:51:61:39:11:e6:f5:
         10:33:20:60:15:2d:2c:1c:f6:f0:c5:a6:9f:ea:a6:3b:06:18:
         8b:6f:90:24:9b:ba:dc:34:47:dc:56:f6:9f:84:5d:f4:96:97:
         75:8e:f7:5d:e5:b6:1a:1e:06:4c:74:b7:8b:d5:30:26:7e:f1:
         b1:83:5e:0b:06:e7:92:78:e4:a8:99:04:8e:1b:31:a8:3b:7d:
         b7:a4:84:c1:06:81:08:3d:72:05:ce:ca:11:ba:e6:f4:98:74:
         0c:76:65:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----