Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/EiR11fr6TM-xIWtB9B_S9WHDhyg.roa
File:                     EiR11fr6TM-xIWtB9B_S9WHDhyg.roa (raw, json)
Hash identifier:          W7TwQaP1ljwu3y/NoaNHpEvMwxHlKGr1Z26uiUftCq0=
Subject key identifier:   12:24:75:D5:FA:FA:4C:CF:B1:21:6B:41:F4:1F:D2:F5:61:C3:87:28
Certificate issuer:       /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Certificate serial:       0194236990B6F90B712F88F7B041C407C00A
Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/EiR11fr6TM-xIWtB9B_S9WHDhyg.roa
Signing time:             Wed 01 Jan 2025 19:48:28 +0000
ROA not before:           Wed 01 Jan 2025 19:48:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214873
IP address blocks:        5.183.5.0/24 maxlen: 24
                          5.183.6.0/24 maxlen: 24
                          5.183.7.0/24 maxlen: 24
                          2a14:4fc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:23:69:90:b6:f9:0b:71:2f:88:f7:b0:41:c4:07:c0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
        Validity
            Not Before: Jan  1 19:48:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=122475d5fafa4ccfb1216b41f41fd2f561c38728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:93:68:50:02:51:39:b8:1e:02:91:a2:72:
                    34:05:ce:b5:50:10:7d:4f:ac:51:ce:ca:5d:fa:ab:
                    91:5c:95:b6:b0:fe:e6:85:fa:74:40:cf:97:15:1b:
                    aa:08:fb:d1:69:f8:35:f2:a6:c6:fa:39:f7:db:91:
                    fc:d6:8a:45:1e:c0:f3:f6:73:2c:8f:fd:94:18:5e:
                    96:d2:fb:23:01:27:7c:e1:3f:99:ba:3a:71:27:34:
                    4c:6e:65:ca:c9:1b:e0:c1:ca:c5:d5:37:7c:de:d1:
                    fc:74:dd:93:ef:f3:8d:6a:5b:fe:15:25:10:ff:88:
                    47:42:29:83:ff:96:4f:44:73:38:6a:fc:93:5b:d3:
                    6e:7c:d8:c5:09:59:8e:01:bb:bb:4d:0a:d6:d4:12:
                    1d:aa:53:e0:48:d5:da:31:ad:71:dd:49:f2:29:de:
                    e6:48:18:6d:7b:5b:2e:35:08:52:e8:41:68:32:53:
                    c4:87:1b:a2:23:30:fa:39:17:7e:5a:15:5c:55:21:
                    8a:78:21:a6:19:b2:79:3c:eb:22:5e:7e:27:38:dd:
                    4f:46:d5:90:59:bd:21:89:3c:42:8d:80:d1:45:73:
                    fd:a3:b6:62:19:51:19:95:c0:f1:86:a9:fb:b6:f9:
                    f5:3b:2f:2a:22:fd:09:5b:26:f6:ed:49:f0:7d:ba:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:75:D5:FA:FA:4C:CF:B1:21:6B:41:F4:1F:D2:F5:61:C3:87:28
            X509v3 Authority Key Identifier:
                keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/EiR11fr6TM-xIWtB9B_S9WHDhyg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.5.0-5.183.7.255
                IPv6:
                  2a14:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:68:ed:f7:d0:18:a7:d2:7a:7d:47:cc:7c:4c:27:9c:cc:
         dd:15:f0:94:5d:2c:b6:86:c9:c3:9b:d3:53:21:01:cb:b9:c4:
         4f:94:8e:d5:aa:fa:a7:eb:b7:16:cc:95:55:0b:ff:53:bf:b4:
         b9:37:d3:cd:95:c8:e4:5a:fa:ed:a4:85:06:78:4a:60:d6:d4:
         b8:5e:4f:91:b0:b0:a8:10:10:30:a0:61:82:df:fe:ba:05:7a:
         b0:d1:54:2d:6e:7a:20:e1:cc:41:77:39:bb:db:7e:38:1a:f1:
         83:39:19:42:ff:6d:23:14:dc:4a:24:ad:d9:da:44:60:ea:df:
         2f:61:9c:92:ef:8f:34:c0:af:ee:39:f1:85:a9:d0:e9:ab:57:
         cc:29:32:d0:c5:4d:68:bb:10:01:0b:8a:d4:04:80:71:a8:f9:
         cc:90:fa:1b:ff:be:f2:41:ba:76:c6:50:dd:0c:a9:b3:82:09:
         67:1e:45:04:d6:5f:1d:cc:ad:a8:df:7a:87:df:f9:87:a4:22:
         98:e8:fa:52:18:36:f9:15:41:94:18:6b:8b:d3:71:8a:84:b5:
         7c:55:5f:a5:c5:01:f4:14:b3:8c:74:b7:37:b6:3d:08:0f:4f:
         f9:99:a3:11:f8:e7:80:11:92:c6:4e:66:40:41:24:9f:7f:4e:
         54:30:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----