Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/1-gH9WIVrLER1VKxNH2ZTmWmLDrc.roa
File:                     1-gH9WIVrLER1VKxNH2ZTmWmLDrc.roa (raw, json)
Hash identifier:          kwMxE7Pw0CWAiBDFZwj9WdKrsNgggZhsRz9KxEOi6Rc=
Subject key identifier:   FA:01:FD:58:85:6B:2C:44:75:54:AC:4D:1F:66:53:99:69:8B:0E:B7
Certificate issuer:       /CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Certificate serial:       01941F8BFFA137AC5D9033AFE34A50746537
Authority key identifier: 54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/1-gH9WIVrLER1VKxNH2ZTmWmLDrc.roa
Signing time:             Wed 01 Jan 2025 01:47:36 +0000
ROA not before:           Wed 01 Jan 2025 01:47:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203055
IP address blocks:        66.203.124.0/23 maxlen: 24
                          2a0b:e46:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:1f:8b:ff:a1:37:ac:5d:90:33:af:e3:4a:50:74:65:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
        Validity
            Not Before: Jan  1 01:47:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=fa01fd58856b2c447554ac4d1f665399698b0eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:93:e1:ed:80:53:c3:ae:ed:3c:3e:bb:44:93:
                    87:cb:3d:fd:b1:19:a6:82:98:c6:82:7a:dd:0d:a6:
                    bc:75:31:94:8e:85:44:02:ae:40:b8:9c:8f:ee:ef:
                    de:ea:88:01:4f:1c:ed:ff:a0:e7:18:49:7c:97:06:
                    7d:d5:bd:98:51:91:89:49:9c:dd:87:a4:00:76:b2:
                    44:76:69:65:36:fa:3a:f4:77:0b:1f:d2:cb:8f:10:
                    ff:55:aa:57:ea:7a:4c:03:8d:7b:f2:31:fd:c3:33:
                    87:a7:ed:09:1d:74:c5:08:c4:f1:bf:dc:9b:47:a0:
                    b8:6c:73:93:b8:e0:c5:9a:43:83:de:4d:a5:a4:0c:
                    41:f4:63:50:ee:d3:9c:65:77:8c:5d:3c:15:e0:64:
                    e5:21:a2:92:af:ce:c8:49:d0:c7:49:d5:6b:52:f9:
                    f3:d6:82:89:17:e4:da:43:2f:9f:3b:8f:52:82:0c:
                    08:c6:a8:27:a4:59:12:38:05:74:ea:7c:45:42:af:
                    8e:39:2e:a7:0a:ed:fd:2c:4a:ef:8c:ab:d6:97:f9:
                    6f:5f:e7:05:49:04:1c:82:41:2e:88:b9:95:31:e5:
                    81:3b:9a:fb:90:75:54:8a:62:04:57:0c:52:d6:60:
                    05:5e:0a:83:12:b9:00:67:fb:d5:dd:b3:c8:36:d0:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:FD:58:85:6B:2C:44:75:54:AC:4D:1F:66:53:99:69:8B:0E:B7
            X509v3 Authority Key Identifier:
                keyid:54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/1-gH9WIVrLER1VKxNH2ZTmWmLDrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.203.124.0/23
                IPv6:
                  2a0b:e46:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:96:67:fd:fb:e8:6f:6f:d3:0e:ba:e5:f2:2f:23:43:28:97:
         12:98:26:05:d5:56:b3:b7:ab:36:06:17:35:7d:b7:fd:b5:92:
         35:65:34:ff:43:61:46:66:b1:d6:7d:f0:f1:6c:ba:86:73:89:
         61:f5:59:2b:ba:90:51:72:a1:54:7c:fe:70:1f:bf:d7:b0:63:
         28:3a:e6:2b:b4:a8:b6:08:be:e5:ac:c2:a4:33:13:38:1b:78:
         6f:42:53:65:ca:b3:2f:1e:4d:92:08:8a:37:4e:c2:bd:da:c4:
         b4:7c:69:33:b0:70:b8:f9:b7:47:e7:73:d7:db:1d:10:4e:63:
         ec:f3:88:f8:f8:8b:22:e7:6c:c8:8f:f4:e4:f3:80:60:c6:a2:
         a5:93:20:fb:c2:ee:b1:54:e2:31:25:5f:90:18:c6:3d:ca:57:
         56:bd:04:89:63:bf:10:31:db:1e:b4:eb:92:0d:ec:0c:6f:67:
         18:39:29:8d:29:08:11:a4:b8:65:26:07:fb:34:34:21:a7:cb:
         bf:30:89:46:f5:1c:91:52:3d:b5:b6:ee:d1:02:71:4a:a9:3a:
         93:7d:a2:22:54:f7:8b:fe:a3:ed:1a:43:7a:c8:f7:c0:95:9f:
         df:a7:cc:96:91:de:45:fc:02:2b:60:42:4d:12:c6:c6:3d:16:
         16:b8:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----