Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa
File:                     AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (raw, json)
Hash identifier:          6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=
Subject key identifier:   03:03:04:25:F1:83:FB:F4:CD:45:9E:F6:73:9C:7E:F5:D2:11:B1:DE
Certificate issuer:       /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial:       0194C70C1A444FB8DBC1665BB3D78C170D37
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa
Signing time:             Sun 02 Feb 2025 14:24:06 +0000
ROA not before:           Sun 02 Feb 2025 14:24:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204497
IP address blocks:        2a09:7ac1:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c7:0c:1a:44:4f:b8:db:c1:66:5b:b3:d7:8c:17:0d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
        Validity
            Not Before: Feb  2 14:24:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=03030425f183fbf4cd459ef6739c7ef5d211b1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:a4:3f:71:71:a1:c3:b3:5c:04:f3:41:55:
                    fc:31:a2:c1:6c:50:eb:75:aa:fe:82:9d:14:dc:9c:
                    70:55:2c:75:42:0e:42:50:24:66:af:cc:db:cc:59:
                    4b:e9:d3:5c:6a:b4:b4:7f:db:de:ed:7e:39:38:5c:
                    78:57:96:aa:24:50:06:08:be:4f:0c:a7:12:da:63:
                    fa:cf:75:37:0a:33:08:45:30:59:f9:2f:43:8d:13:
                    f3:96:37:e2:ed:e0:a4:56:e0:68:f7:45:eb:9e:a8:
                    40:a5:39:c1:44:76:91:e4:ba:9c:ca:44:ba:ca:1d:
                    52:11:43:cb:4f:d7:e0:59:da:6c:22:68:ff:05:d9:
                    93:bb:75:79:bc:82:ff:b4:8c:92:1b:a8:79:df:06:
                    cf:d6:2b:c6:0c:91:db:42:64:fd:0c:85:28:c8:74:
                    ec:c1:b8:96:66:78:18:65:f0:96:cd:68:df:d1:1b:
                    3d:d5:e2:e4:b5:28:dd:44:de:32:04:81:9d:13:a1:
                    66:97:c3:66:6f:c2:de:95:17:9e:ee:a3:ae:6b:5b:
                    a5:68:0a:39:e9:df:d7:70:5f:11:68:7d:17:74:a2:
                    73:38:e8:35:a8:24:35:22:da:c0:28:1c:8f:9b:4f:
                    d2:d2:20:ab:50:61:bd:ee:0e:cf:82:65:6e:d1:03:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:03:04:25:F1:83:FB:F4:CD:45:9E:F6:73:9C:7E:F5:D2:11:B1:DE
            X509v3 Authority Key Identifier:
                keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:7ac1:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:ec:4e:98:b7:c6:a4:3c:77:7a:84:38:b6:4d:61:93:c2:71:
         c2:b2:2b:dd:7d:ca:6e:dd:18:c7:13:32:a5:6b:e4:11:09:9b:
         06:01:0b:5d:41:00:f2:33:85:57:74:45:b7:be:7e:51:26:a1:
         b5:e0:8a:26:74:68:be:c8:66:79:54:56:f3:1e:95:51:3b:18:
         68:51:0b:2c:9d:7d:80:67:21:8f:b9:09:40:2e:79:12:65:df:
         c0:ae:eb:e7:d8:41:17:c2:53:33:c9:d1:55:cd:fe:e7:a6:af:
         84:c6:a4:ee:8d:45:3d:38:5c:27:c8:07:da:4c:47:48:e1:08:
         c8:f5:46:51:b2:a4:cd:c4:fd:0b:96:71:ef:71:ba:15:48:d3:
         5b:b2:08:b6:1b:76:ad:0b:3b:27:27:f6:6a:7f:a6:e5:c3:94:
         68:6a:fd:ac:38:d1:8a:01:29:53:a3:49:02:4b:0d:84:04:b3:
         df:6b:78:fa:3d:e6:34:4e:79:6a:f3:0b:5b:72:f8:4f:29:a9:
         f5:b5:1d:e6:d7:09:a1:0f:83:b7:63:94:07:36:65:5a:ab:be:
         c7:d5:ad:28:65:fd:0c:12:36:a7:fd:97:fc:2f:5d:5b:42:f3:
         0e:95:5e:df:88:79:ea:11:db:ad:1c:42:8f:e8:e5:02:f6:d3:
         42:d5:38:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZTHDBpET7jbwWZbs9eMFw03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw
ZDVkN2EwHhcNMjUwMjAyMTQyNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzAzMDQyNWYxODNmYmY0Y2Q0NTllZjY3MzljN2VmNWQyMTFiMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZmkP3FxocOzXATzQVX8MaLBbFDr
dar+gp0U3JxwVSx1Qg5CUCRmr8zbzFlL6dNcarS0f9ve7X45OFx4V5aqJFAGCL5P
DKcS2mP6z3U3CjMIRTBZ+S9DjRPzljfi7eCkVuBo90XrnqhApTnBRHaR5LqcykS6
yh1SEUPLT9fgWdpsImj/BdmTu3V5vIL/tIySG6h53wbP1ivGDJHbQmT9DIUoyHTs
wbiWZngYZfCWzWjf0Rs91eLktSjdRN4yBIGdE6Fml8Nmb8LelRee7qOua1ulaAo5
6d/XcF8RaH0XdKJzOOg1qCQ1ItrAKByPm0/S0iCrUGG97g7PgmVu0QPKVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAMDBCXxg/v0zUWe9nOcfvXSEbHeMB8GA1UdIwQY
MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt
MGM0OTU0NzdjYTEwLzEvQXdNRUpmR0QtX1ROUlo3MmM1eC05ZElSc2Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw
LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgl6wQAC
MA0GCSqGSIb3DQEBCwUAA4IBAQCv7E6Yt8akPHd6hDi2TWGTwnHCsivdfcpu3RjH
EzKla+QRCZsGAQtdQQDyM4VXdEW3vn5RJqG14IomdGi+yGZ5VFbzHpVROxhoUQss
nX2AZyGPuQlALnkSZd/Aruvn2EEXwlMzydFVzf7npq+ExqTujUU9OFwnyAfaTEdI
4QjI9UZRsqTNxP0LlnHvcboVSNNbsgi2G3atCzsnJ/Zqf6blw5Roav2sONGKASlT
o0kCSw2EBLPfa3j6PeY0Tnlq8wtbcvhPKan1tR3m1wmhD4O3Y5QHNmVaq77H1a0o
Zf0MEjan/Zf8L11bQvMOlV7fiHnqEdutHEKP6OUC9tNC1Thn
-----END CERTIFICATE-----