Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qxL68d7nCXaNspDescrAWVme1h0.roa
File:                     qxL68d7nCXaNspDescrAWVme1h0.roa (raw, json)
Hash identifier:          Cwe9uCyHM81q23hxW44Tvhn2agJ3g2prLytXedKaI5I=
Subject key identifier:   AB:12:FA:F1:DE:E7:09:76:8D:B2:90:DE:B1:CA:C0:59:59:9E:D6:1D
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       01961622A9087DBD36B2ED50A6FD257BDBCA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qxL68d7nCXaNspDescrAWVme1h0.roa
Signing time:             Tue 08 Apr 2025 16:01:32 +0000
ROA not before:           Tue 08 Apr 2025 16:01:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20326
IP address blocks:        89.106.8.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:22:a9:08:7d:bd:36:b2:ed:50:a6:fd:25:7b:db:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Apr  8 16:01:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ab12faf1dee709768db290deb1cac059599ed61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:b7:70:9c:1b:35:30:36:1a:df:ee:4d:cc:
                    11:31:1e:e0:6c:a7:91:03:11:00:54:79:a1:7c:ed:
                    11:33:7d:a2:73:81:c5:8a:a2:fa:5d:8c:f8:63:3e:
                    da:0b:6a:5b:bc:05:70:c2:79:07:34:ad:03:84:13:
                    14:6a:44:19:66:84:df:bc:35:25:26:06:5f:0e:14:
                    e9:45:c1:a4:c4:20:b5:32:d1:40:76:ff:d7:1c:7b:
                    71:17:04:35:ed:81:57:f4:03:5c:e4:5b:80:b9:b3:
                    c8:1c:dc:07:a3:97:82:de:e8:20:4e:2f:7f:3d:47:
                    e4:b7:5b:bf:01:63:03:6a:ee:c7:a5:93:b3:66:df:
                    03:e7:c7:ea:d3:bb:45:1a:52:70:f3:cf:f0:67:83:
                    a2:7d:6c:17:42:0f:ac:03:96:04:12:41:5b:71:d9:
                    a8:fe:50:4e:fa:50:79:7c:4e:61:15:52:02:07:a3:
                    5e:87:26:c6:a3:b7:35:e2:85:29:8d:22:94:00:94:
                    ee:e0:a6:45:79:e9:f9:fe:cf:d9:62:ec:7e:4c:8b:
                    de:e3:5f:de:34:d1:5a:e2:8b:71:a5:be:2c:ba:f9:
                    f3:5b:73:b5:a9:20:be:e2:82:b0:90:cf:9a:a2:c5:
                    b5:8e:dd:0c:ce:f8:f6:93:b3:ad:cc:bf:10:cf:0e:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:12:FA:F1:DE:E7:09:76:8D:B2:90:DE:B1:CA:C0:59:59:9E:D6:1D
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qxL68d7nCXaNspDescrAWVme1h0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:1a:9e:2d:d7:e4:a1:d8:86:19:9c:ef:17:d3:71:0d:60:c3:
         bb:f7:f8:fa:b6:a9:17:58:ac:28:9f:d0:90:20:63:9e:a3:bd:
         06:3d:fb:5e:7f:17:17:a9:1a:32:3c:3d:48:16:5b:8f:10:88:
         e1:0a:e9:7f:1a:cd:2a:16:1d:c2:ea:2f:0f:24:10:7c:ee:12:
         f1:9c:3b:dd:95:74:59:43:3c:28:5f:d2:ef:f2:23:31:dd:1f:
         31:b9:9a:ce:02:2f:47:67:f5:81:71:c1:fa:36:d4:30:91:e9:
         8e:c2:28:1f:7c:23:65:f9:37:27:bc:2f:7f:10:18:72:0b:af:
         fb:75:ab:7d:fd:fd:ef:c2:2c:91:13:ab:08:c0:3b:90:08:ec:
         9e:77:37:56:57:f6:d1:06:fe:2a:bb:d5:13:f9:05:0f:1f:3e:
         55:f2:7f:c1:19:6f:21:fb:c6:8e:db:07:a5:13:40:99:50:6e:
         34:99:4e:29:41:ad:98:96:bb:b1:e8:78:f7:49:07:6f:92:55:
         a2:3a:b6:f1:f3:fe:04:d2:41:4a:60:f2:54:a8:ac:a0:f9:8b:
         20:3c:e2:02:69:27:e4:40:b2:51:ea:51:81:fb:4c:47:2c:70:
         c7:e2:87:04:36:e0:57:fb:69:f8:7d:8f:9d:1c:3c:02:0c:0e:
         5f:9f:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----