Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E4H11vqlDsWfsKfFnRaByGFpFjE.roa
File:                     E4H11vqlDsWfsKfFnRaByGFpFjE.roa (raw, json)
Hash identifier:          uk2Eyw6ijxdod6j6CVfKRX8Y6AcwVXdvoKqS9Zsbg6E=
Subject key identifier:   13:81:F5:D6:FA:A5:0E:C5:9F:B0:A7:C5:9D:16:81:C8:61:69:16:31
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       0194274770DD4104D9386297E0DCE1F18877
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E4H11vqlDsWfsKfFnRaByGFpFjE.roa
Signing time:             Thu 02 Jan 2025 13:49:40 +0000
ROA not before:           Thu 02 Jan 2025 13:49:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     215523
IP address blocks:        185.210.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:70:dd:41:04:d9:38:62:97:e0:dc:e1:f1:88:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jan  2 13:49:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1381f5d6faa50ec59fb0a7c59d1681c861691631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:d0:87:28:f8:1d:a0:93:28:4b:28:75:97:
                    83:c7:7e:4b:b4:76:74:a5:75:ec:76:a8:54:e9:32:
                    f6:c5:de:5f:8d:93:74:d0:99:85:0e:32:de:91:ba:
                    02:7c:b4:13:f8:04:f8:74:4b:83:81:d7:43:9e:c1:
                    dc:80:65:0e:c5:3b:f0:ac:17:77:16:36:78:51:66:
                    b9:82:79:a4:50:e9:24:ef:ed:71:56:e1:3a:17:d1:
                    7a:09:c4:e5:a4:95:4c:da:0c:6d:57:98:3d:ad:e3:
                    67:ee:95:b2:aa:00:23:81:66:70:10:02:ef:c2:d5:
                    9b:52:57:ce:8c:21:39:cb:60:57:60:22:f0:5f:18:
                    ae:01:80:96:d1:c4:a4:98:7d:f4:0f:77:d9:90:76:
                    b5:77:03:cb:70:10:7d:40:6d:70:00:e1:1c:c4:63:
                    b8:e0:52:fd:c9:c1:9a:5a:26:a6:46:a2:43:19:19:
                    80:42:a2:cf:f4:a1:2b:9a:08:5b:3a:ab:c8:49:ca:
                    10:53:57:14:15:d1:16:43:a5:bf:c9:70:72:03:c1:
                    11:bb:f6:fe:31:ec:54:14:c0:dd:25:9a:66:76:1c:
                    bb:73:09:d3:f3:94:22:4d:2c:1d:52:46:f3:ad:70:
                    56:c7:0e:1a:ae:dc:bd:10:22:65:7e:5d:e5:42:09:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:81:F5:D6:FA:A5:0E:C5:9F:B0:A7:C5:9D:16:81:C8:61:69:16:31
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/E4H11vqlDsWfsKfFnRaByGFpFjE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.210.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:66:7a:1f:ea:4f:52:53:1b:85:33:46:60:da:81:5c:82:38:
         2a:0b:a8:94:db:4a:96:d8:05:c7:83:0a:f5:a1:c5:40:8e:40:
         6a:e1:36:22:a5:10:0d:54:ad:36:09:41:f9:a8:55:f4:6b:7b:
         73:62:c7:cc:d3:fd:bf:d0:0a:56:18:39:c4:e4:03:e4:f4:26:
         12:b7:e9:12:29:61:b7:bc:1c:99:ef:5e:95:e0:19:63:31:18:
         96:2a:75:93:ed:ca:cd:6d:52:ee:fb:6b:23:2b:c6:ce:d6:0c:
         ef:52:66:1f:8b:7a:a3:36:79:ab:e5:ba:36:0d:95:0f:3a:42:
         f1:80:6f:f8:6d:07:7a:01:79:d5:3e:3c:78:66:03:1a:45:ad:
         d6:ef:96:80:ce:80:c8:a4:56:49:83:36:e1:3c:47:57:ab:e1:
         4e:4c:8e:4b:76:23:0a:97:c2:f4:0e:64:7e:61:8b:12:9f:50:
         b4:bb:17:f5:19:1b:49:f9:30:00:3e:94:40:22:20:05:a2:fc:
         83:f2:b1:48:b5:b1:ad:26:9c:d7:f0:ee:7e:99:63:e4:de:b6:
         38:a1:08:7c:10:c8:b1:a9:1a:27:1c:1d:18:7b:a0:16:e7:05:
         c4:84:46:25:fe:3b:7f:a4:9a:13:52:ee:b3:da:db:9f:43:3c:
         22:b1:58:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR3DdQQTZOGKX4Nzh8Yh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjUwMTAyMTM0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzgxZjVkNmZhYTUwZWM1OWZiMGE3YzU5ZDE2ODFjODYxNjkxNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mjQhyj4HaCTKEsodZeDx35LtHZ0
pXXsdqhU6TL2xd5fjZN00JmFDjLekboCfLQT+AT4dEuDgddDnsHcgGUOxTvwrBd3
FjZ4UWa5gnmkUOkk7+1xVuE6F9F6CcTlpJVM2gxtV5g9reNn7pWyqgAjgWZwEALv
wtWbUlfOjCE5y2BXYCLwXxiuAYCW0cSkmH30D3fZkHa1dwPLcBB9QG1wAOEcxGO4
4FL9ycGaWiamRqJDGRmAQqLP9KErmghbOqvIScoQU1cUFdEWQ6W/yXByA8ERu/b+
MexUFMDdJZpmdhy7cwnT85QiTSwdUkbzrXBWxw4arty9ECJlfl3lQglFlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOB9db6pQ7Fn7CnxZ0WgchhaRYxMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvRTRIMTF2cWxEc1dmc0tmRm5SYUJ5R0ZwRmpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudKqMA0G
CSqGSIb3DQEBCwUAA4IBAQAmZnof6k9SUxuFM0Zg2oFcgjgqC6iU20qW2AXHgwr1
ocVAjkBq4TYipRANVK02CUH5qFX0a3tzYsfM0/2/0ApWGDnE5APk9CYSt+kSKWG3
vByZ716V4BljMRiWKnWT7crNbVLu+2sjK8bO1gzvUmYfi3qjNnmr5bo2DZUPOkLx
gG/4bQd6AXnVPjx4ZgMaRa3W75aAzoDIpFZJgzbhPEdXq+FOTI5LdiMKl8L0DmR+
YYsSn1C0uxf1GRtJ+TAAPpRAIiAFovyD8rFItbGtJpzX8O5+mWPk3rY4oQh8EMix
qRonHB0Ye6AW5wXEhEYl/jt/pJoTUu6z2tufQzwisVgm
-----END CERTIFICATE-----