Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/E-uqinJu4BsX4hD4fJ27XeSRRfM.roa
File:                     E-uqinJu4BsX4hD4fJ27XeSRRfM.roa (raw, json)
Hash identifier:          TEk3E/eVLOZFNokaZvtcliN6SvQ4jr1qswSoyGLZrLI=
Subject key identifier:   13:EB:AA:8A:72:6E:E0:1B:17:E2:10:F8:7C:9D:BB:5D:E4:91:45:F3
Certificate issuer:       /CN=864df1128f7d42c6884863b5f273f3eba6596156
Certificate serial:       0194D561895A1B785093790F60097DAC083F
Authority key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/E-uqinJu4BsX4hD4fJ27XeSRRfM.roa
Signing time:             Wed 05 Feb 2025 09:12:06 +0000
ROA not before:           Wed 05 Feb 2025 09:12:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     31115
IP address blocks:        194.93.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:d5:61:89:5a:1b:78:50:93:79:0f:60:09:7d:ac:08:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=864df1128f7d42c6884863b5f273f3eba6596156
        Validity
            Not Before: Feb  5 09:12:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=13ebaa8a726ee01b17e210f87c9dbb5de49145f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:ca:b8:51:dd:6b:ea:5c:78:2b:2f:91:44:
                    b8:f7:26:3d:96:d8:c1:cc:8b:69:9f:d5:ae:1a:2d:
                    71:95:45:26:3d:fc:5a:9f:0c:ee:fa:6c:5e:38:97:
                    d2:f0:cd:59:93:b8:28:8e:e2:09:5d:2f:7e:15:30:
                    28:41:8e:c2:d5:78:4f:53:30:38:b4:3f:4d:b7:18:
                    60:b9:be:23:8c:01:80:f0:00:ae:d9:71:17:77:a1:
                    c5:6d:6a:63:75:57:d7:fc:37:5e:9a:61:0b:77:03:
                    da:54:f4:a9:84:60:f2:9d:69:2d:ee:de:12:1c:09:
                    e9:56:a4:95:58:a2:c2:67:53:3a:f6:7d:ad:2c:31:
                    f1:35:2f:44:10:e8:7a:7f:f4:1c:db:64:2b:3d:9d:
                    08:59:51:f8:f3:fd:53:19:48:52:67:f2:00:92:6a:
                    a1:a2:2d:8c:ab:03:8e:8c:89:33:37:e2:59:0f:f1:
                    82:be:73:a3:34:db:99:b7:7d:f9:9e:02:8b:76:09:
                    5d:87:89:f9:91:dd:61:f5:e5:25:af:c9:b1:f8:11:
                    c9:8e:b8:37:a3:b5:77:6f:4e:ad:3a:45:98:74:e3:
                    93:64:cb:cd:e6:65:df:b5:a0:b9:8d:af:e8:b3:51:
                    6c:67:7a:fa:ef:17:4d:48:ea:f7:d4:84:71:27:e9:
                    52:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EB:AA:8A:72:6E:E0:1B:17:E2:10:F8:7C:9D:BB:5D:E4:91:45:F3
            X509v3 Authority Key Identifier:
                keyid:86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/E-uqinJu4BsX4hD4fJ27XeSRRfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:e5:f3:1b:2a:f4:8c:ea:81:54:86:c2:da:92:95:59:97:bd:
         13:0d:05:42:9a:d2:0a:f5:98:71:d2:58:48:ba:f8:80:3d:c0:
         e7:b6:33:90:6a:3f:8e:a7:5b:46:10:9a:a7:73:45:4f:14:3b:
         34:04:7c:1a:0c:54:f0:41:70:37:af:10:3d:38:f8:4e:79:d9:
         5a:97:31:a0:7f:ec:10:93:19:2d:ae:28:80:a7:5c:2d:e7:e6:
         ec:1d:8a:f9:d0:29:02:b2:bf:aa:aa:68:b4:81:de:db:59:60:
         61:eb:a3:ea:82:b4:a4:e6:8a:a1:be:c5:31:76:e9:8e:e7:8d:
         fd:49:74:a6:fd:45:b6:ae:1a:97:5e:fa:75:64:05:ac:31:c4:
         31:bf:a1:63:f4:df:0a:e3:69:a4:86:a8:dd:69:6b:62:ce:16:
         de:11:6f:b7:0e:e2:5a:31:af:ff:6d:12:41:dc:46:93:c4:2e:
         03:43:e4:96:d0:0e:9c:88:9e:7c:8e:5c:a3:34:51:9a:98:41:
         b9:77:85:21:7f:1f:f7:74:b7:3e:0d:37:24:4d:59:ae:f9:89:
         f7:31:46:4b:c9:64:c3:05:aa:6b:a0:81:71:61:47:af:0c:dc:
         8e:5c:27:62:54:6d:86:a2:0d:20:26:39:d6:f3:71:9e:e0:d4:
         d2:66:d3:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTVYYlaG3hQk3kPYAl9rAg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NGRmMTEyOGY3ZDQyYzY4ODQ4NjNiNWYyNzNmM2ViYTY1
OTYxNTYwHhcNMjUwMjA1MDkxMjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2ViYWE4YTcyNmVlMDFiMTdlMjEwZjg3YzlkYmI1ZGU0OTE0NWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7HKuFHda+pceCsvkUS49yY9ltjB
zItpn9WuGi1xlUUmPfxanwzu+mxeOJfS8M1Zk7gojuIJXS9+FTAoQY7C1XhPUzA4
tD9Ntxhgub4jjAGA8ACu2XEXd6HFbWpjdVfX/DdemmELdwPaVPSphGDynWkt7t4S
HAnpVqSVWKLCZ1M69n2tLDHxNS9EEOh6f/Qc22QrPZ0IWVH48/1TGUhSZ/IAkmqh
oi2MqwOOjIkzN+JZD/GCvnOjNNuZt335ngKLdgldh4n5kd1h9eUlr8mx+BHJjrg3
o7V3b06tOkWYdOOTZMvN5mXftaC5ja/os1FsZ3r67xdNSOr31IRxJ+lS/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPrqopybuAbF+IQ+Hydu13kkUXzMB8GA1UdIwQY
MBaAFIZN8RKPfULGiEhjtfJz8+umWWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2Ut
ODBkN2ZhNWRmYmI0LzEvRS11cWluSnU0QnNYNGhENGZKMjdYZVNSUmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85YjVkMDItMTZmOC00Mjg0LTk0M2UtODBkN2ZhNWRmYmI0
LzEvaGszeEVvOTlRc2FJU0dPMThuUHo2NlpaWVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwl0oMA0G
CSqGSIb3DQEBCwUAA4IBAQCT5fMbKvSM6oFUhsLakpVZl70TDQVCmtIK9Zhx0lhI
uviAPcDntjOQaj+Op1tGEJqnc0VPFDs0BHwaDFTwQXA3rxA9OPhOedlalzGgf+wQ
kxktriiAp1wt5+bsHYr50CkCsr+qqmi0gd7bWWBh66PqgrSk5oqhvsUxdumO5439
SXSm/UW2rhqXXvp1ZAWsMcQxv6Fj9N8K42mkhqjdaWtizhbeEW+3DuJaMa//bRJB
3EaTxC4DQ+SW0A6ciJ58jlyjNFGamEG5d4Uhfx/3dLc+DTckTVmu+Yn3MUZLyWTD
BaproIFxYUevDNyOXCdiVG2Gog0gJjnW83Ge4NTSZtOC
-----END CERTIFICATE-----