Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/f7YxschREuysiSjDT6JDZ1hIzJU.roa
File:                     f7YxschREuysiSjDT6JDZ1hIzJU.roa (raw, json)
Hash identifier:          od3isdJHCZlHUjM+HPneCDkTI9VrgHkYJNlcsSC6Dag=
Subject key identifier:   7F:B6:31:B1:C8:51:12:EC:AC:89:28:C3:4F:A2:43:67:58:48:CC:95
Certificate issuer:       /CN=d016cc56a995507b4fa87c6490442f06b6186687
Certificate serial:       019427B5CB224EEB1D7CD6D5BBD0B48EA850
Authority key identifier: D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/f7YxschREuysiSjDT6JDZ1hIzJU.roa
Signing time:             Thu 02 Jan 2025 15:50:12 +0000
ROA not before:           Thu 02 Jan 2025 15:50:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203538
IP address blocks:        185.131.104.0/22 maxlen: 24
                          2a03:a060::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b5:cb:22:4e:eb:1d:7c:d6:d5:bb:d0:b4:8e:a8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d016cc56a995507b4fa87c6490442f06b6186687
        Validity
            Not Before: Jan  2 15:50:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7fb631b1c85112ecac8928c34fa243675848cc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:a6:f7:ad:ee:08:90:5f:39:3e:8f:8d:22:
                    5c:f1:25:d3:d4:76:79:3a:26:a5:a1:0b:6b:ec:d4:
                    53:52:81:ee:5b:16:df:69:15:0a:f2:0d:ed:d4:8d:
                    b9:70:3d:14:96:eb:2e:cb:46:e7:3f:1b:8f:88:6c:
                    15:04:20:d1:d2:74:ee:81:9a:76:ca:ed:56:21:e4:
                    84:53:b6:eb:5e:2d:74:ba:58:71:65:3b:8c:12:60:
                    ea:80:54:b1:f6:c1:5f:37:43:51:41:08:6d:c3:fb:
                    b3:f5:df:6e:66:41:0c:5c:5c:bf:a4:a6:94:d5:b4:
                    67:13:7d:bb:d1:eb:31:94:70:40:cb:2e:e9:d0:53:
                    9a:c6:6d:99:76:2d:3f:98:bd:09:3a:1b:91:8f:32:
                    0a:d8:17:71:16:4c:ba:ed:ec:b3:29:73:76:b2:20:
                    f3:7e:38:9b:65:97:ea:b7:4e:fb:ec:3a:e8:a5:94:
                    df:28:b3:44:58:59:69:3f:60:79:06:cb:ff:46:37:
                    50:7f:35:6d:a9:61:28:cb:ff:27:e2:5d:93:92:4f:
                    68:a7:2a:38:ff:5d:c5:19:e4:06:0e:f5:5e:c2:68:
                    93:3b:f1:55:48:0d:29:eb:d9:3b:a7:79:e0:18:3f:
                    d1:03:d2:58:81:60:88:3f:44:af:15:c4:03:59:92:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:31:B1:C8:51:12:EC:AC:89:28:C3:4F:A2:43:67:58:48:CC:95
            X509v3 Authority Key Identifier:
                keyid:D0:16:CC:56:A9:95:50:7B:4F:A8:7C:64:90:44:2F:06:B6:18:66:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BbMVqmVUHtPqHxkkEQvBrYYZoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/f7YxschREuysiSjDT6JDZ1hIzJU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d0300-74ee-4677-ad62-c24b7db20de7/1/0BbMVqmVUHtPqHxkkEQvBrYYZoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.131.104.0/22
                IPv6:
                  2a03:a060::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:0e:ee:0f:15:b4:29:9c:e3:02:60:00:9f:90:d6:dd:da:
         02:6e:47:6c:41:92:c8:5f:52:ca:a1:c0:31:57:da:d2:3a:0c:
         8c:cb:60:85:4d:98:a3:05:3b:63:c1:6b:cb:da:0c:ca:7f:96:
         80:c1:8f:f9:16:65:79:5a:70:2e:b8:54:0a:d0:6e:14:61:5d:
         f1:ff:3d:f7:7d:d7:eb:55:16:a5:c1:f7:77:7a:0d:ed:87:b3:
         b6:3b:04:7a:ca:da:91:1e:e4:b5:20:5d:16:28:97:4c:50:0c:
         e2:e2:3a:b9:f0:3e:0f:84:eb:53:30:25:66:d6:73:98:d9:d0:
         02:39:67:3e:a6:ec:f5:5d:97:ce:c8:ad:33:c9:8d:34:f0:c3:
         82:cc:e1:2e:46:2c:db:01:71:ba:51:03:08:d0:8a:7a:95:f1:
         8f:2a:43:a2:cd:16:71:50:0c:1c:94:e6:d6:60:51:fb:bc:76:
         e3:64:f4:5e:88:18:fa:79:42:f6:c6:9f:8c:c6:ff:89:5b:3b:
         9a:cd:1e:e8:9a:48:40:f7:e3:46:38:e9:ab:64:30:88:56:21:
         7d:9e:93:68:64:a4:5e:03:a0:3f:71:2f:f9:fa:28:9f:3d:10:
         f2:4e:de:4c:e2:64:54:32:12:5f:ad:55:c3:55:59:07:f6:9d:
         a8:52:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----