Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EoTaeWkOJz05rIXfnxtfbquyeqw.roa
File:                     EoTaeWkOJz05rIXfnxtfbquyeqw.roa (raw, json)
Hash identifier:          YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=
Subject key identifier:   12:84:DA:79:69:0E:27:3D:39:AC:85:DF:9F:1B:5F:6E:AB:B2:7A:AC
Certificate issuer:       /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial:       0194258F8E8A71007B7A945B021E69A7FB6D
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EoTaeWkOJz05rIXfnxtfbquyeqw.roa
Signing time:             Thu 02 Jan 2025 05:49:12 +0000
ROA not before:           Thu 02 Jan 2025 05:49:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     61984
IP address blocks:        185.51.176.0/22 maxlen: 22
                          2a01:b0e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:8f:8e:8a:71:00:7b:7a:94:5b:02:1e:69:a7:fb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
        Validity
            Not Before: Jan  2 05:49:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1284da79690e273d39ac85df9f1b5f6eabb27aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:13:ac:c0:75:bc:20:96:d6:e4:cf:91:14:
                    1e:50:06:25:21:b3:45:50:07:f9:a2:e0:f2:3d:d1:
                    a4:ce:36:6f:38:f3:d0:6c:dd:8f:ab:8e:f0:1f:be:
                    cf:c8:54:09:a9:ec:41:e4:29:df:74:29:1c:d5:9d:
                    7e:92:6b:c7:ae:8b:d1:0b:b1:f9:6e:b1:41:7b:e9:
                    ad:51:06:cf:2e:e9:52:45:f8:d9:3f:7f:6f:85:b7:
                    91:4c:3b:89:7f:43:54:11:09:6b:62:a8:39:ec:e7:
                    e9:2a:82:b1:b5:84:52:44:5e:6e:af:5b:95:91:e8:
                    2f:83:85:04:b1:e3:6a:97:0f:bf:8d:3f:5a:e9:c4:
                    b8:41:2a:6a:83:b0:21:e9:0f:65:72:c9:22:7e:60:
                    c5:2c:74:be:78:4f:60:1b:5e:51:9e:88:60:5c:54:
                    7e:53:1e:72:9b:cc:9a:23:e9:ac:31:20:31:c3:4b:
                    77:b2:54:a8:0f:ee:d7:96:54:aa:0d:ea:73:f3:76:
                    cb:ba:4a:74:a5:70:12:a4:48:e5:9f:ec:06:4b:77:
                    3f:92:f3:b8:59:5c:0e:c4:5f:3b:2b:30:8f:f6:6b:
                    51:6c:05:5d:4c:08:c9:e8:d4:d7:9e:23:be:18:7f:
                    80:e5:59:e8:48:ee:c8:f1:a3:ff:50:b1:56:9a:dc:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:84:DA:79:69:0E:27:3D:39:AC:85:DF:9F:1B:5F:6E:AB:B2:7A:AC
            X509v3 Authority Key Identifier:
                keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EoTaeWkOJz05rIXfnxtfbquyeqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.176.0/22
                IPv6:
                  2a01:b0e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:71:f5:58:02:39:70:bb:0d:7e:cb:5f:61:2b:20:ee:3b:f5:
         06:7a:aa:62:4f:48:7d:4b:dc:c0:21:2a:c7:68:f2:3b:3d:f2:
         35:08:93:99:a1:57:21:c6:cd:cd:c7:36:2e:bd:92:31:1e:16:
         b1:25:dc:17:c9:ac:23:0d:93:13:7a:32:a3:65:6f:66:8d:35:
         09:0b:2a:04:ce:11:71:be:48:0f:f2:2f:f9:2d:0a:39:fb:cf:
         5e:a6:40:62:24:6d:50:da:c2:b4:3d:b8:9f:06:14:64:7e:dd:
         09:ca:1a:19:ab:ff:cd:3b:b1:1a:24:8e:37:02:f1:2a:b4:dc:
         67:71:2b:88:7e:e1:fd:8b:ea:18:07:46:12:c8:a8:23:f6:93:
         6b:d4:4f:14:81:31:fd:c8:40:e8:e2:ca:2b:b5:c0:c0:3e:00:
         38:7d:62:5a:59:fd:13:a4:c2:d4:ec:97:1e:12:3e:13:22:0f:
         22:52:d0:2a:9d:f9:c4:4e:0f:48:02:d7:29:55:3b:81:94:88:
         95:1d:f6:ff:e4:cc:e0:67:cc:c3:85:4e:3d:d1:f0:c3:57:f7:
         7c:a0:56:7b:10:ca:5a:fa:b5:59:08:ff:31:aa:c2:c8:cc:be:
         92:2f:8e:53:48:96:06:78:58:9e:e5:3f:63:da:7e:c9:9d:2f:
         0c:df:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----