Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa
File:                     7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa (raw, json)
Hash identifier:          VzOH1v3ihvshRqLzYlHFbA9ewMu5V3WewaJXm960cgk=
Subject key identifier:   ED:4E:59:9D:2C:18:1B:5A:2D:1F:6A:E7:DE:54:EA:6D:15:44:DC:1D
Certificate issuer:       /CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Certificate serial:       01942445200F5B4C2DC3337B8C4E6AF53982
Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa
Signing time:             Wed 01 Jan 2025 23:48:17 +0000
ROA not before:           Wed 01 Jan 2025 23:48:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9103
IP address blocks:        212.109.128.0/20 maxlen: 20
                          2a00:6c40::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:45:20:0f:5b:4c:2d:c3:33:7b:8c:4e:6a:f5:39:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
        Validity
            Not Before: Jan  1 23:48:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed4e599d2c181b5a2d1f6ae7de54ea6d1544dc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:68:59:ba:85:67:c6:8b:b2:43:ae:f0:d8:10:
                    0d:49:9a:26:3f:3a:10:2c:3a:e2:e8:5f:17:3b:c2:
                    57:99:c6:69:19:a0:a4:9e:dc:ca:a7:ec:71:ee:a1:
                    ae:11:4e:13:2c:77:03:1b:9e:f7:f1:04:97:fb:41:
                    a6:16:c7:92:1d:43:e8:6b:e3:c3:79:32:13:51:ee:
                    e8:a1:19:72:aa:b9:b3:12:1b:60:ef:66:77:da:ca:
                    2b:07:f0:70:0a:b8:37:e4:54:49:53:0c:31:48:3e:
                    86:d3:bf:58:d0:be:5b:f4:38:54:5c:30:12:bb:6a:
                    59:a8:16:73:12:2f:63:24:3e:57:f9:21:8f:80:7a:
                    31:e8:52:c8:47:a1:bb:32:d4:96:2e:d0:84:bb:80:
                    16:88:37:52:db:c3:45:6a:40:2b:c8:87:10:32:3a:
                    a8:cf:de:cb:78:2b:66:7e:20:67:f0:b7:b6:e5:be:
                    6e:72:e3:df:16:a5:58:5f:9d:1c:19:2e:03:fc:8d:
                    bb:34:62:fd:e1:0d:e0:31:55:39:09:68:b3:d1:b7:
                    d2:ae:1b:e2:70:fa:38:84:31:59:36:69:7d:f4:95:
                    23:2e:db:c9:83:ad:46:bd:11:a0:08:4d:ca:fe:32:
                    d1:42:f8:f2:98:b3:e6:cf:ca:5f:8a:f2:3e:4d:62:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:59:9D:2C:18:1B:5A:2D:1F:6A:E7:DE:54:EA:6D:15:44:DC:1D
            X509v3 Authority Key Identifier:
                keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/7U5ZnSwYG1otH2rn3lTqbRVE3B0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.109.128.0/20
                IPv6:
                  2a00:6c40::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:fc:f6:6a:29:e6:f7:16:00:46:aa:18:c3:5a:e5:ed:46:58:
         25:4d:21:93:7c:9c:23:76:53:1b:e0:b5:07:e0:79:8a:86:26:
         9e:80:38:9f:77:ea:e6:b5:05:0c:4a:c0:2c:c6:33:f4:72:cd:
         a1:50:b0:91:8c:43:62:55:1a:4c:0a:1a:22:87:76:bd:66:b7:
         cb:c0:59:47:77:82:c8:64:bb:70:c7:9a:79:a1:e9:5e:26:80:
         2f:11:19:5d:4b:4a:a5:c6:90:c4:f1:8b:e1:d6:d7:34:2d:98:
         23:c4:1e:a2:56:0a:a3:be:5e:9a:b7:17:8c:77:22:ec:42:2a:
         5a:9b:c4:61:5f:61:ff:ad:ad:65:07:5e:f0:d5:97:9e:b4:e2:
         c6:a4:18:3a:59:27:06:b4:08:78:ff:73:74:53:05:98:fe:65:
         bd:bc:05:2b:91:42:11:e3:f2:6b:9e:b3:b6:9e:f5:3c:ba:77:
         ea:22:f5:0d:8c:24:63:d6:06:9e:df:9a:ec:a3:44:7d:d5:47:
         57:ba:39:3b:d4:e2:bc:59:ca:51:eb:a1:58:ce:d0:73:5e:43:
         62:86:2e:8b:ef:71:8e:90:28:61:66:07:b2:17:9c:e6:b7:2d:
         09:3e:75:b3:7a:47:d4:c2:de:13:ef:72:6e:f1:3c:67:7d:1e:
         da:6b:d4:ac
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQkRSAPW0wtwzN7jE5q9TmCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZj
MTdjMDEwHhcNMjUwMTAxMjM0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDRlNTk5ZDJjMTgxYjVhMmQxZjZhZTdkZTU0ZWE2ZDE1NDRkYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WhZuoVnxouyQ67w2BANSZomPzoQ
LDri6F8XO8JXmcZpGaCkntzKp+xx7qGuEU4TLHcDG5738QSX+0GmFseSHUPoa+PD
eTITUe7ooRlyqrmzEhtg72Z32sorB/BwCrg35FRJUwwxSD6G079Y0L5b9DhUXDAS
u2pZqBZzEi9jJD5X+SGPgHox6FLIR6G7MtSWLtCEu4AWiDdS28NFakAryIcQMjqo
z97LeCtmfiBn8Le25b5ucuPfFqVYX50cGS4D/I27NGL94Q3gMVU5CWiz0bfSrhvi
cPo4hDFZNml99JUjLtvJg61GvRGgCE3K/jLRQvjymLPmz8pfivI+TWLFhQIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFO1OWZ0sGBtaLR9q595U6m0VRNwdMB8GA1UdIwQY
MBaAFJboKrZIuLP4hXVpw5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMt
MTkzYWQ1Yzc5YjgzLzEvN1U1Wm5Td1lHMW90SDJybjNsVHFiUlZFM0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5Yjgz
LzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQE1G2AMA4E
AgACMAgDBgcqAGxAADANBgkqhkiG9w0BAQsFAAOCAQEAY/z2ainm9xYARqoYw1rl
7UZYJU0hk3ycI3ZTG+C1B+B5ioYmnoA4n3fq5rUFDErALMYz9HLNoVCwkYxDYlUa
TAoaIod2vWa3y8BZR3eCyGS7cMeaeaHpXiaALxEZXUtKpcaQxPGL4dbXNC2YI8Qe
olYKo75emrcXjHci7EIqWpvEYV9h/62tZQde8NWXnrTixqQYOlknBrQIeP9zdFMF
mP5lvbwFK5FCEePya56ztp71PLp36iL1DYwkY9YGnt+a7KNEfdVHV7o5O9TivFnK
UeuhWM7Qc15DYoYui+9xjpAoYWYHshec5rctCT51s3pH1MLeE+9ybvE8Z30e2mvU
rA==
-----END CERTIFICATE-----