Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/JhWEH1-OplFyfRpnGPaAH68zRx4.roa
File:                     JhWEH1-OplFyfRpnGPaAH68zRx4.roa (raw, json)
Hash identifier:          58PwPKP/vJBtdtkIKyrehJCWwjagistWjkfUZr2AKRU=
Subject key identifier:   26:15:84:1F:5F:8E:A6:51:72:7D:1A:67:18:F6:80:1F:AF:33:47:1E
Certificate issuer:       /CN=acb54bcc49291a1f32b7cead4f296882d0531492
Certificate serial:       019420D5E2BF89A52DAB567B2FFD8683F349
Authority key identifier: AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/JhWEH1-OplFyfRpnGPaAH68zRx4.roa
Signing time:             Wed 01 Jan 2025 07:47:55 +0000
ROA not before:           Wed 01 Jan 2025 07:47:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     198011
IP address blocks:        185.105.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:20:d5:e2:bf:89:a5:2d:ab:56:7b:2f:fd:86:83:f3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb54bcc49291a1f32b7cead4f296882d0531492
        Validity
            Not Before: Jan  1 07:47:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2615841f5f8ea651727d1a6718f6801faf33471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:90:84:c0:e0:af:ec:8d:1c:3d:c7:d0:ba:00:
                    3d:e4:b3:ad:ba:62:4d:0e:76:bd:d7:b9:79:f6:e3:
                    9d:aa:5c:52:10:06:e6:96:a4:54:b8:9b:1a:a1:17:
                    ba:69:5c:56:95:11:bb:1c:71:7e:bf:0f:8e:1e:8f:
                    91:88:ff:3b:03:87:82:2b:8f:b0:29:6e:71:8b:70:
                    96:a1:78:37:c8:93:e9:f1:2c:24:5a:0e:76:2b:47:
                    b3:50:0f:50:83:66:12:3c:1c:bf:9e:fb:aa:62:84:
                    a8:76:08:fd:37:fb:b2:da:b1:35:d5:e3:4d:18:85:
                    7e:9e:38:92:ae:4f:4e:ec:4e:f4:1a:c8:29:58:8f:
                    c0:eb:f9:44:8d:4a:70:ea:1f:86:e3:94:ed:6a:e3:
                    c4:89:64:15:c2:11:94:2a:5e:7d:2b:39:31:b5:9c:
                    b8:20:50:6b:99:4d:2c:a4:59:01:c0:13:c6:70:b8:
                    a0:72:ad:c4:b1:fd:0a:00:d5:a0:6f:1b:fb:6f:c0:
                    75:e2:68:ff:0c:82:eb:65:09:bf:35:b4:21:3e:e4:
                    62:dd:fd:95:dc:2b:80:c4:32:39:25:44:f3:77:f9:
                    6d:b3:37:f8:86:69:88:f1:7a:0a:3c:dd:63:10:56:
                    7f:9f:d8:c6:97:9a:02:72:9e:66:c4:ca:29:a1:04:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:15:84:1F:5F:8E:A6:51:72:7D:1A:67:18:F6:80:1F:AF:33:47:1E
            X509v3 Authority Key Identifier:
                keyid:AC:B5:4B:CC:49:29:1A:1F:32:B7:CE:AD:4F:29:68:82:D0:53:14:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLVLzEkpGh8yt86tTylogtBTFJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/JhWEH1-OplFyfRpnGPaAH68zRx4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd2bdd-d3c4-4d60-b096-af3a685d579f/1/rLVLzEkpGh8yt86tTylogtBTFJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:ea:09:d0:5d:df:bc:75:33:5f:2a:fc:e5:23:0e:93:c7:
         a0:69:35:7f:35:80:a7:81:7a:43:09:2e:d5:1f:31:07:95:37:
         25:89:5a:65:d7:93:20:e1:3a:4b:3f:2d:41:40:6a:81:98:be:
         33:2f:ae:3d:e8:36:ad:3d:fd:6c:5f:24:a6:c2:6f:ec:33:8c:
         6f:a4:cc:7f:7f:f0:47:cd:0e:43:c4:68:d6:8c:97:74:e3:eb:
         56:f8:51:cd:06:64:15:07:c7:5f:f2:9b:fb:1e:4e:f7:86:9f:
         19:16:8c:6f:49:bc:a0:37:70:fe:83:58:9b:a9:84:cc:fd:6e:
         7b:2a:61:62:d4:88:c7:d6:b8:e7:bd:aa:e2:c2:26:58:ea:13:
         8d:40:ea:13:32:d6:21:47:c6:c5:61:f0:fd:30:5a:f4:2a:ba:
         30:00:21:fc:93:e3:95:ab:aa:92:64:67:a5:2c:88:53:77:13:
         3e:1b:71:e8:c1:a4:be:59:db:87:84:23:d8:e0:23:7d:fe:3f:
         fd:42:a6:5f:f4:d2:af:fe:97:6d:80:a3:d7:30:c4:09:00:19:
         0d:f8:a5:99:27:8d:82:91:2f:1e:7d:9e:ea:ec:81:3f:4c:11:
         0a:e5:4f:4a:92:85:ac:b4:19:2c:67:47:da:66:4d:db:57:2f:
         c6:59:98:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----