Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/4IRJfTOXaKsLO79AGo1JoJbZxnI.roa
File:                     4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (raw, json)
Hash identifier:          z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=
Subject key identifier:   E0:84:49:7D:33:97:68:AB:0B:3B:BF:40:1A:8D:49:A0:96:D9:C6:72
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       01942143EE7FCF2C88D16EE510EB9AFC64AD
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/4IRJfTOXaKsLO79AGo1JoJbZxnI.roa
Signing time:             Wed 01 Jan 2025 09:48:07 +0000
ROA not before:           Wed 01 Jan 2025 09:48:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     25540
IP address blocks:        185.26.88.0/22 maxlen: 22
                          2a00:88a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:21:43:ee:7f:cf:2c:88:d1:6e:e5:10:eb:9a:fc:64:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Jan  1 09:48:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e084497d339768ab0b3bbf401a8d49a096d9c672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:fd:b3:1d:83:81:74:a2:a5:27:cb:10:1c:
                    c7:b7:ee:d4:39:60:1b:7c:ef:10:16:03:11:f0:09:
                    e9:da:2a:61:6a:f5:9e:d1:d9:a8:48:6d:80:b0:52:
                    01:1e:c7:4b:34:c2:2f:2b:58:c0:ac:40:6d:3e:db:
                    35:26:04:01:41:08:60:a5:44:5a:bd:9b:b6:17:e8:
                    21:75:c9:0d:0c:5e:f7:96:46:7e:57:11:70:97:2f:
                    d8:8a:1d:2a:52:35:49:03:aa:41:f5:95:d8:fd:31:
                    15:ef:25:35:9f:75:10:d9:df:50:92:71:bd:2a:6b:
                    b1:f5:ef:fa:81:9b:e5:78:4e:b0:a6:ff:93:c0:56:
                    1e:e2:b1:3b:22:77:db:92:ed:fe:cb:8f:15:1c:4c:
                    77:5b:a5:dd:48:88:19:d1:9f:5f:21:e5:bd:df:82:
                    af:bb:49:08:2d:bf:4a:f8:87:be:72:9f:8a:ea:6f:
                    80:ac:c4:83:6c:b9:e9:a9:b3:b6:9d:58:8e:83:89:
                    0b:ff:cd:ab:65:0d:e4:eb:42:4b:45:66:6c:1c:63:
                    0e:68:35:cf:ca:71:70:45:b2:8d:a7:58:30:5d:09:
                    83:eb:cd:6f:41:98:7c:c5:f1:56:c0:ab:70:d0:2f:
                    f5:2c:4a:a2:2c:41:3f:7e:16:98:07:b8:7f:7a:7a:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:84:49:7D:33:97:68:AB:0B:3B:BF:40:1A:8D:49:A0:96:D9:C6:72
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/4IRJfTOXaKsLO79AGo1JoJbZxnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.88.0/22
                IPv6:
                  2a00:88a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:e0:19:87:9b:a1:b1:50:e8:f3:8f:5b:cf:46:7d:d6:4c:
         4e:c2:69:08:b2:3a:cc:42:ef:aa:5e:91:11:90:32:92:fe:60:
         2d:12:2a:96:62:23:9b:21:99:44:0a:3f:13:f6:fb:38:fe:d7:
         16:74:25:92:ee:cf:7d:64:88:35:06:87:39:68:d0:82:30:50:
         ee:be:7e:9e:b4:99:f1:e3:9e:34:b5:36:c1:64:c6:d1:0f:de:
         70:f2:87:42:d9:b2:7f:d6:9c:8b:17:a7:92:aa:2e:cf:e1:ff:
         97:82:3e:b9:f5:ba:11:8f:32:6b:ba:72:07:2b:81:8c:01:90:
         46:38:03:38:6a:05:ed:36:7a:82:2c:e8:42:6b:20:49:64:73:
         cc:25:1d:43:ff:2f:17:7d:0b:06:e3:97:c0:26:bc:dd:24:de:
         b9:18:e2:d7:f2:1a:8c:f4:f0:d8:32:99:09:95:14:6c:e9:89:
         69:83:87:eb:69:97:16:25:4f:ed:cf:f2:1f:d4:38:e3:cc:e9:
         e2:d0:a1:ae:61:40:0a:d3:0c:d5:ce:97:84:a2:ba:d4:30:e1:
         11:94:3b:a8:06:c2:4c:a7:f0:a6:23:0b:55:87:3c:07:f6:08:
         d7:ce:53:65:a5:57:c1:6a:38:dd:05:aa:b1:d8:e1:68:94:7e:
         5a:e5:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----