Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa
File:                     HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa (raw, json)
Hash identifier:          E94twRw9JlGZMbmmCttmzyXZguvpf/OPgy8FVeGF2rg=
Subject key identifier:   1E:D3:F5:4E:64:BB:26:7A:7E:AD:D6:04:FB:6E:64:51:D7:1B:48:5F
Certificate issuer:       /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial:       01942748066AFC757BBD05480A8A2B13F72F
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa
Signing time:             Thu 02 Jan 2025 13:50:19 +0000
ROA not before:           Thu 02 Jan 2025 13:50:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25512
IP address blocks:        85.209.124.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:48:06:6a:fc:75:7b:bd:05:48:0a:8a:2b:13:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
        Validity
            Not Before: Jan  2 13:50:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1ed3f54e64bb267a7eadd604fb6e6451d71b485f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:6b:ec:e2:cf:dc:72:d0:b4:14:69:89:d0:
                    ce:93:86:4d:7e:af:41:b2:bf:33:ba:07:24:ce:50:
                    40:a4:bf:4e:8b:30:31:b4:02:a4:c4:5d:1c:62:ca:
                    bc:66:eb:47:28:2d:42:90:c2:c9:22:61:9b:54:81:
                    5c:8c:71:ee:69:46:58:73:ac:cd:f1:70:1d:e4:11:
                    58:39:cc:b3:0e:13:91:be:c5:bd:c8:23:d2:38:29:
                    99:64:e7:b7:00:e4:2d:e8:9e:84:d3:05:60:51:dd:
                    93:19:51:b2:56:31:df:67:86:de:8f:5c:5d:1b:d0:
                    fd:fa:1d:d4:62:69:a4:e0:5e:15:ce:e4:63:61:5b:
                    30:8f:80:88:8c:4e:bc:15:1a:07:73:d3:82:58:c6:
                    e8:6b:4f:cf:3c:a8:21:f5:09:c7:8c:58:49:cf:cb:
                    48:b3:6d:a1:fb:37:09:36:0f:1d:d4:13:19:14:48:
                    08:7a:9f:ff:91:3e:80:04:f6:70:94:1f:b4:1c:2c:
                    7a:0b:77:9f:1b:af:66:3c:73:1d:c7:14:8c:42:70:
                    86:87:24:3e:2d:fc:26:0d:c0:b6:0d:8f:dd:d3:20:
                    84:bd:c6:80:9f:b6:6c:b6:d7:7e:c2:25:10:d8:43:
                    b6:20:be:a1:67:d9:26:e5:74:7e:6e:0c:42:19:76:
                    96:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D3:F5:4E:64:BB:26:7A:7E:AD:D6:04:FB:6E:64:51:D7:1B:48:5F
            X509v3 Authority Key Identifier:
                keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/HtP1TmS7Jnp-rdYE-25kUdcbSF8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:1b:e6:67:89:69:44:db:0e:b0:44:7f:5d:c7:01:76:04:
         79:f8:7c:f9:59:32:e3:f7:ff:37:ea:e4:f0:f1:f6:ed:48:47:
         ab:c0:3d:c6:74:8c:48:13:61:a2:9d:3c:69:13:cb:90:58:e3:
         c8:62:66:ef:f8:82:cf:fe:9f:75:e3:be:16:a8:de:bd:57:ff:
         0b:8a:4c:a2:34:3f:83:75:8e:b6:50:0e:f8:d6:24:25:0e:2d:
         42:8d:ea:b6:76:2c:94:93:cf:d4:7e:e0:46:2f:ff:2b:8f:aa:
         36:45:de:60:6b:58:0e:d2:b3:a5:f8:36:a1:a5:75:b9:29:c4:
         c2:1a:87:6f:20:e3:55:4b:24:12:ab:dd:29:0d:6d:aa:17:32:
         ec:ee:13:5e:91:90:87:14:a3:93:58:e8:b6:8d:fe:ce:2d:f0:
         6a:9f:75:dd:4c:9e:c6:94:fc:80:b5:c9:2d:16:0e:a3:26:39:
         30:0f:26:9d:47:d6:75:73:a5:a7:21:22:0f:56:81:e7:a9:29:
         95:1d:75:42:80:c1:49:7e:88:52:59:ff:1f:0a:df:ea:22:4b:
         74:2a:48:c3:f4:20:44:f2:71:ef:b9:5a:f2:46:83:55:3b:79:
         cb:bc:22:90:73:61:61:18:9b:00:5f:0e:42:e9:e1:8f:09:02:
         b8:92:94:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----